diff --git a/java-gke-multi-cloud/README.md b/java-gke-multi-cloud/README.md
index 57d382c8fcf4..206a6085558a 100644
--- a/java-gke-multi-cloud/README.md
+++ b/java-gke-multi-cloud/README.md
@@ -201,7 +201,7 @@ Java is a registered trademark of Oracle and/or its affiliates.
 [kokoro-badge-link-5]: http://storage.googleapis.com/cloud-devrel-public/java/badges/google-cloud-java/java11.html
 [stability-image]: https://img.shields.io/badge/stability-preview-yellow
 [maven-version-image]: https://img.shields.io/maven-central/v/com.google.cloud/google-cloud-gke-multi-cloud.svg
-[maven-version-link]: https://central.sonatype.com/artifact/com.google.cloud/google-cloud-gke-multi-cloud/0.29.0
+[maven-version-link]: https://central.sonatype.com/artifact/com.google.cloud/google-cloud-gke-multi-cloud/0.31.0
 [authentication]: https://github.com/googleapis/google-cloud-java#authentication
 [auth-scopes]: https://developers.google.com/identity/protocols/oauth2/scopes
 [predefined-iam-roles]: https://cloud.google.com/iam/docs/understanding-roles#predefined_roles
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClient.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClient.java
index 79354452c759..f0ae675082b4 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClient.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClient.java
@@ -453,9 +453,11 @@ public final OperationFuture<AttachedCluster, OperationMetadata> createAttachedC
    * @param updateMask Required. Mask of fields to update. At least one path must be supplied in
    *     this field. The elements of the repeated paths field can only include these fields from
    *     [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
-   *     <p>&#42; `description`. &#42; `annotations`. &#42; `platform_version`. &#42;
-   *     `authorization.admin_users`. &#42; `logging_config.component_config.enable_components`.
-   *     &#42; `monitoring_config.managed_prometheus_config.enabled`.
+   *     <p>&#42; `annotations`. &#42; `authorization.admin_groups`. &#42;
+   *     `authorization.admin_users`. &#42; `binary_authorization.evaluation_mode`. &#42;
+   *     `description`. &#42; `logging_config.component_config.enable_components`. &#42;
+   *     `monitoring_config.managed_prometheus_config.enabled`. &#42; `platform_version`. &#42;
+   *     `proxy_config.kubernetes_secret.name`. &#42; `proxy_config.kubernetes_secret.namespace`.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final OperationFuture<AttachedCluster, OperationMetadata> updateAttachedClusterAsync(
@@ -681,6 +683,7 @@ public final OperationFuture<AttachedCluster, OperationMetadata> importAttachedC
    *           .setFleetMembership("fleetMembership-665479228")
    *           .setPlatformVersion("platformVersion1848800485")
    *           .setDistribution("distribution-1580708220")
+   *           .setProxyConfig(AttachedProxyConfig.newBuilder().build())
    *           .build();
    *   AttachedCluster response = attachedClustersClient.importAttachedClusterAsync(request).get();
    * }
@@ -722,6 +725,7 @@ public final OperationFuture<AttachedCluster, OperationMetadata> importAttachedC
    *           .setFleetMembership("fleetMembership-665479228")
    *           .setPlatformVersion("platformVersion1848800485")
    *           .setDistribution("distribution-1580708220")
+   *           .setProxyConfig(AttachedProxyConfig.newBuilder().build())
    *           .build();
    *   OperationFuture<AttachedCluster, OperationMetadata> future =
    *       attachedClustersClient.importAttachedClusterOperationCallable().futureCall(request);
@@ -763,6 +767,7 @@ public final OperationFuture<AttachedCluster, OperationMetadata> importAttachedC
    *           .setFleetMembership("fleetMembership-665479228")
    *           .setPlatformVersion("platformVersion1848800485")
    *           .setDistribution("distribution-1580708220")
+   *           .setProxyConfig(AttachedProxyConfig.newBuilder().build())
    *           .build();
    *   ApiFuture<Operation> future =
    *       attachedClustersClient.importAttachedClusterCallable().futureCall(request);
@@ -1519,6 +1524,7 @@ public final AttachedServerConfig getAttachedServerConfig(
    *           .setParent(LocationName.of("[PROJECT]", "[LOCATION]").toString())
    *           .setAttachedClusterId("attachedClusterId865943409")
    *           .setPlatformVersion("platformVersion1848800485")
+   *           .setProxyConfig(AttachedProxyConfig.newBuilder().build())
    *           .build();
    *   GenerateAttachedClusterInstallManifestResponse response =
    *       attachedClustersClient.generateAttachedClusterInstallManifest(request);
@@ -1552,6 +1558,7 @@ public final AttachedServerConfig getAttachedServerConfig(
    *           .setParent(LocationName.of("[PROJECT]", "[LOCATION]").toString())
    *           .setAttachedClusterId("attachedClusterId865943409")
    *           .setPlatformVersion("platformVersion1848800485")
+   *           .setProxyConfig(AttachedProxyConfig.newBuilder().build())
    *           .build();
    *   ApiFuture<GenerateAttachedClusterInstallManifestResponse> future =
    *       attachedClustersClient
@@ -1569,6 +1576,86 @@ public final AttachedServerConfig getAttachedServerConfig(
     return stub.generateAttachedClusterInstallManifestCallable();
   }
 
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Generates an access token for a cluster agent.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AttachedClustersClient attachedClustersClient = AttachedClustersClient.create()) {
+   *   GenerateAttachedClusterAgentTokenRequest request =
+   *       GenerateAttachedClusterAgentTokenRequest.newBuilder()
+   *           .setAttachedCluster(
+   *               AttachedClusterName.of("[PROJECT]", "[LOCATION]", "[ATTACHED_CLUSTER]")
+   *                   .toString())
+   *           .setSubjectToken("subjectToken-1519661011")
+   *           .setSubjectTokenType("subjectTokenType1839592711")
+   *           .setVersion("version351608024")
+   *           .setGrantType("grantType-1219832202")
+   *           .setAudience("audience975628804")
+   *           .setScope("scope109264468")
+   *           .setRequestedTokenType("requestedTokenType1733106949")
+   *           .setOptions("options-1249474914")
+   *           .build();
+   *   GenerateAttachedClusterAgentTokenResponse response =
+   *       attachedClustersClient.generateAttachedClusterAgentToken(request);
+   * }
+   * }</pre>
+   *
+   * @param request The request object containing all of the parameters for the API call.
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final GenerateAttachedClusterAgentTokenResponse generateAttachedClusterAgentToken(
+      GenerateAttachedClusterAgentTokenRequest request) {
+    return generateAttachedClusterAgentTokenCallable().call(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Generates an access token for a cluster agent.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AttachedClustersClient attachedClustersClient = AttachedClustersClient.create()) {
+   *   GenerateAttachedClusterAgentTokenRequest request =
+   *       GenerateAttachedClusterAgentTokenRequest.newBuilder()
+   *           .setAttachedCluster(
+   *               AttachedClusterName.of("[PROJECT]", "[LOCATION]", "[ATTACHED_CLUSTER]")
+   *                   .toString())
+   *           .setSubjectToken("subjectToken-1519661011")
+   *           .setSubjectTokenType("subjectTokenType1839592711")
+   *           .setVersion("version351608024")
+   *           .setGrantType("grantType-1219832202")
+   *           .setAudience("audience975628804")
+   *           .setScope("scope109264468")
+   *           .setRequestedTokenType("requestedTokenType1733106949")
+   *           .setOptions("options-1249474914")
+   *           .build();
+   *   ApiFuture<GenerateAttachedClusterAgentTokenResponse> future =
+   *       attachedClustersClient.generateAttachedClusterAgentTokenCallable().futureCall(request);
+   *   // Do something.
+   *   GenerateAttachedClusterAgentTokenResponse response = future.get();
+   * }
+   * }</pre>
+   */
+  public final UnaryCallable<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenCallable() {
+    return stub.generateAttachedClusterAgentTokenCallable();
+  }
+
   @Override
   public final void close() {
     stub.close();
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersSettings.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersSettings.java
index d340a8ef4b1c..1be93ed8b7e2 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersSettings.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersSettings.java
@@ -162,6 +162,14 @@ public class AttachedClustersSettings extends ClientSettings<AttachedClustersSet
         .generateAttachedClusterInstallManifestSettings();
   }
 
+  /** Returns the object with the settings used for calls to generateAttachedClusterAgentToken. */
+  public UnaryCallSettings<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenSettings() {
+    return ((AttachedClustersStubSettings) getStubSettings())
+        .generateAttachedClusterAgentTokenSettings();
+  }
+
   public static final AttachedClustersSettings create(AttachedClustersStubSettings stub)
       throws IOException {
     return new AttachedClustersSettings.Builder(stub.toBuilder()).build();
@@ -360,6 +368,13 @@ public Builder applyToAllUnaryMethods(
       return getStubSettingsBuilder().generateAttachedClusterInstallManifestSettings();
     }
 
+    /** Returns the builder for the settings used for calls to generateAttachedClusterAgentToken. */
+    public UnaryCallSettings.Builder<
+            GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+        generateAttachedClusterAgentTokenSettings() {
+      return getStubSettingsBuilder().generateAttachedClusterAgentTokenSettings();
+    }
+
     @Override
     public AttachedClustersSettings build() throws IOException {
       return new AttachedClustersSettings(this);
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersClient.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersClient.java
index e4a38d3afbd9..099f15cd6e80 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersClient.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersClient.java
@@ -441,17 +441,21 @@ public final UnaryCallable<CreateAwsClusterRequest, Operation> createAwsClusterC
    *     this field. The elements of the repeated paths field can only include these fields from
    *     [AwsCluster][google.cloud.gkemulticloud.v1.AwsCluster]:
    *     <p>&#42; `description`. &#42; `annotations`. &#42; `control_plane.version`. &#42;
-   *     `authorization.admin_users`. &#42; `control_plane.aws_services_authentication.role_arn`.
-   *     &#42; `control_plane.aws_services_authentication.role_session_name`. &#42;
+   *     `authorization.admin_users`. &#42; `authorization.admin_groups`. &#42;
+   *     `binary_authorization.evaluation_mode`. &#42;
+   *     `control_plane.aws_services_authentication.role_arn`. &#42;
+   *     `control_plane.aws_services_authentication.role_session_name`. &#42;
    *     `control_plane.config_encryption.kms_key_arn`. &#42; `control_plane.instance_type`. &#42;
    *     `control_plane.security_group_ids`. &#42; `control_plane.proxy_config`. &#42;
    *     `control_plane.proxy_config.secret_arn`. &#42; `control_plane.proxy_config.secret_version`.
    *     &#42; `control_plane.root_volume.size_gib`. &#42; `control_plane.root_volume.volume_type`.
-   *     &#42; `control_plane.root_volume.iops`. &#42; `control_plane.root_volume.kms_key_arn`.
-   *     &#42; `control_plane.ssh_config`. &#42; `control_plane.ssh_config.ec2_key_pair`. &#42;
-   *     `control_plane.instance_placement.tenancy`. &#42; `control_plane.iam_instance_profile`.
-   *     &#42; `logging_config.component_config.enable_components`. &#42; `control_plane.tags`.
-   *     &#42; `monitoring_config.managed_prometheus_config.enabled`.
+   *     &#42; `control_plane.root_volume.iops`. &#42; `control_plane.root_volume.throughput`. &#42;
+   *     `control_plane.root_volume.kms_key_arn`. &#42; `control_plane.ssh_config`. &#42;
+   *     `control_plane.ssh_config.ec2_key_pair`. &#42; `control_plane.instance_placement.tenancy`.
+   *     &#42; `control_plane.iam_instance_profile`. &#42;
+   *     `logging_config.component_config.enable_components`. &#42; `control_plane.tags`. &#42;
+   *     `monitoring_config.managed_prometheus_config.enabled`. &#42;
+   *     `networking.per_node_pool_sg_rules_disabled`.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final OperationFuture<AwsCluster, OperationMetadata> updateAwsClusterAsync(
@@ -954,6 +958,7 @@ public final OperationFuture<Empty, OperationMetadata> deleteAwsClusterAsync(Str
    *           .setName(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
    *           .setValidateOnly(true)
    *           .setAllowMissing(true)
+   *           .setIgnoreErrors(true)
    *           .setEtag("etag3123477")
    *           .build();
    *   awsClustersClient.deleteAwsClusterAsync(request).get();
@@ -993,6 +998,7 @@ public final OperationFuture<Empty, OperationMetadata> deleteAwsClusterAsync(
    *           .setName(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
    *           .setValidateOnly(true)
    *           .setAllowMissing(true)
+   *           .setIgnoreErrors(true)
    *           .setEtag("etag3123477")
    *           .build();
    *   OperationFuture<Empty, OperationMetadata> future =
@@ -1032,6 +1038,7 @@ public final OperationFuture<Empty, OperationMetadata> deleteAwsClusterAsync(
    *           .setName(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
    *           .setValidateOnly(true)
    *           .setAllowMissing(true)
+   *           .setIgnoreErrors(true)
    *           .setEtag("etag3123477")
    *           .build();
    *   ApiFuture<Operation> future =
@@ -1045,6 +1052,86 @@ public final UnaryCallable<DeleteAwsClusterRequest, Operation> deleteAwsClusterC
     return stub.deleteAwsClusterCallable();
   }
 
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Generates an access token for a cluster agent.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   GenerateAwsClusterAgentTokenRequest request =
+   *       GenerateAwsClusterAgentTokenRequest.newBuilder()
+   *           .setAwsCluster(
+   *               AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+   *           .setSubjectToken("subjectToken-1519661011")
+   *           .setSubjectTokenType("subjectTokenType1839592711")
+   *           .setVersion("version351608024")
+   *           .setNodePoolId("nodePoolId1121557241")
+   *           .setGrantType("grantType-1219832202")
+   *           .setAudience("audience975628804")
+   *           .setScope("scope109264468")
+   *           .setRequestedTokenType("requestedTokenType1733106949")
+   *           .setOptions("options-1249474914")
+   *           .build();
+   *   GenerateAwsClusterAgentTokenResponse response =
+   *       awsClustersClient.generateAwsClusterAgentToken(request);
+   * }
+   * }</pre>
+   *
+   * @param request The request object containing all of the parameters for the API call.
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final GenerateAwsClusterAgentTokenResponse generateAwsClusterAgentToken(
+      GenerateAwsClusterAgentTokenRequest request) {
+    return generateAwsClusterAgentTokenCallable().call(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Generates an access token for a cluster agent.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   GenerateAwsClusterAgentTokenRequest request =
+   *       GenerateAwsClusterAgentTokenRequest.newBuilder()
+   *           .setAwsCluster(
+   *               AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+   *           .setSubjectToken("subjectToken-1519661011")
+   *           .setSubjectTokenType("subjectTokenType1839592711")
+   *           .setVersion("version351608024")
+   *           .setNodePoolId("nodePoolId1121557241")
+   *           .setGrantType("grantType-1219832202")
+   *           .setAudience("audience975628804")
+   *           .setScope("scope109264468")
+   *           .setRequestedTokenType("requestedTokenType1733106949")
+   *           .setOptions("options-1249474914")
+   *           .build();
+   *   ApiFuture<GenerateAwsClusterAgentTokenResponse> future =
+   *       awsClustersClient.generateAwsClusterAgentTokenCallable().futureCall(request);
+   *   // Do something.
+   *   GenerateAwsClusterAgentTokenResponse response = future.get();
+   * }
+   * }</pre>
+   */
+  public final UnaryCallable<
+          GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenCallable() {
+    return stub.generateAwsClusterAgentTokenCallable();
+  }
+
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
    * Generates a short-lived access token to authenticate to a given
@@ -1351,14 +1438,18 @@ public final UnaryCallable<CreateAwsNodePoolRequest, Operation> createAwsNodePoo
    *     <p>&#42; `annotations`. &#42; `version`. &#42; `autoscaling.min_node_count`. &#42;
    *     `autoscaling.max_node_count`. &#42; `config.config_encryption.kms_key_arn`. &#42;
    *     `config.security_group_ids`. &#42; `config.root_volume.iops`. &#42;
-   *     `config.root_volume.kms_key_arn`. &#42; `config.root_volume.volume_type`. &#42;
-   *     `config.root_volume.size_gib`. &#42; `config.proxy_config`. &#42;
-   *     `config.proxy_config.secret_arn`. &#42; `config.proxy_config.secret_version`. &#42;
-   *     `config.ssh_config`. &#42; `config.ssh_config.ec2_key_pair`. &#42;
-   *     `config.instance_placement.tenancy`. &#42; `config.iam_instance_profile`. &#42;
-   *     `config.labels`. &#42; `config.tags`. &#42; `config.autoscaling_metrics_collection`. &#42;
+   *     `config.root_volume.throughput`. &#42; `config.root_volume.kms_key_arn`. &#42;
+   *     `config.root_volume.volume_type`. &#42; `config.root_volume.size_gib`. &#42;
+   *     `config.proxy_config`. &#42; `config.proxy_config.secret_arn`. &#42;
+   *     `config.proxy_config.secret_version`. &#42; `config.ssh_config`. &#42;
+   *     `config.ssh_config.ec2_key_pair`. &#42; `config.instance_placement.tenancy`. &#42;
+   *     `config.iam_instance_profile`. &#42; `config.labels`. &#42; `config.tags`. &#42;
+   *     `config.autoscaling_metrics_collection`. &#42;
    *     `config.autoscaling_metrics_collection.granularity`. &#42;
-   *     `config.autoscaling_metrics_collection.metrics`.
+   *     `config.autoscaling_metrics_collection.metrics`. &#42; `config.instance_type`. &#42;
+   *     `management.auto_repair`. &#42; `management`. &#42; `update_settings`. &#42;
+   *     `update_settings.surge_settings`. &#42; `update_settings.surge_settings.max_surge`. &#42;
+   *     `update_settings.surge_settings.max_unavailable`.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final OperationFuture<AwsNodePool, OperationMetadata> updateAwsNodePoolAsync(
@@ -1463,6 +1554,193 @@ public final UnaryCallable<UpdateAwsNodePoolRequest, Operation> updateAwsNodePoo
     return stub.updateAwsNodePoolCallable();
   }
 
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Rolls back a previously aborted or failed
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] update request. Makes no changes if
+   * the last update request successfully finished. If an update request is in progress, you cannot
+   * rollback the update. You must first cancel or let it finish unsuccessfully before you can
+   * rollback.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   AwsNodePoolName name =
+   *       AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]");
+   *   AwsNodePool response = awsClustersClient.rollbackAwsNodePoolUpdateAsync(name).get();
+   * }
+   * }</pre>
+   *
+   * @param name Required. The name of the [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool]
+   *     resource to rollback.
+   *     <p>`AwsNodePool` names are formatted as
+   *     `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+   *     <p>See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more
+   *     details on Google Cloud resource names.
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final OperationFuture<AwsNodePool, OperationMetadata> rollbackAwsNodePoolUpdateAsync(
+      AwsNodePoolName name) {
+    RollbackAwsNodePoolUpdateRequest request =
+        RollbackAwsNodePoolUpdateRequest.newBuilder()
+            .setName(name == null ? null : name.toString())
+            .build();
+    return rollbackAwsNodePoolUpdateAsync(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Rolls back a previously aborted or failed
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] update request. Makes no changes if
+   * the last update request successfully finished. If an update request is in progress, you cannot
+   * rollback the update. You must first cancel or let it finish unsuccessfully before you can
+   * rollback.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   String name =
+   *       AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+   *           .toString();
+   *   AwsNodePool response = awsClustersClient.rollbackAwsNodePoolUpdateAsync(name).get();
+   * }
+   * }</pre>
+   *
+   * @param name Required. The name of the [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool]
+   *     resource to rollback.
+   *     <p>`AwsNodePool` names are formatted as
+   *     `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+   *     <p>See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more
+   *     details on Google Cloud resource names.
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final OperationFuture<AwsNodePool, OperationMetadata> rollbackAwsNodePoolUpdateAsync(
+      String name) {
+    RollbackAwsNodePoolUpdateRequest request =
+        RollbackAwsNodePoolUpdateRequest.newBuilder().setName(name).build();
+    return rollbackAwsNodePoolUpdateAsync(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Rolls back a previously aborted or failed
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] update request. Makes no changes if
+   * the last update request successfully finished. If an update request is in progress, you cannot
+   * rollback the update. You must first cancel or let it finish unsuccessfully before you can
+   * rollback.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   RollbackAwsNodePoolUpdateRequest request =
+   *       RollbackAwsNodePoolUpdateRequest.newBuilder()
+   *           .setName(
+   *               AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+   *                   .toString())
+   *           .setRespectPdb(true)
+   *           .build();
+   *   AwsNodePool response = awsClustersClient.rollbackAwsNodePoolUpdateAsync(request).get();
+   * }
+   * }</pre>
+   *
+   * @param request The request object containing all of the parameters for the API call.
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final OperationFuture<AwsNodePool, OperationMetadata> rollbackAwsNodePoolUpdateAsync(
+      RollbackAwsNodePoolUpdateRequest request) {
+    return rollbackAwsNodePoolUpdateOperationCallable().futureCall(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Rolls back a previously aborted or failed
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] update request. Makes no changes if
+   * the last update request successfully finished. If an update request is in progress, you cannot
+   * rollback the update. You must first cancel or let it finish unsuccessfully before you can
+   * rollback.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   RollbackAwsNodePoolUpdateRequest request =
+   *       RollbackAwsNodePoolUpdateRequest.newBuilder()
+   *           .setName(
+   *               AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+   *                   .toString())
+   *           .setRespectPdb(true)
+   *           .build();
+   *   OperationFuture<AwsNodePool, OperationMetadata> future =
+   *       awsClustersClient.rollbackAwsNodePoolUpdateOperationCallable().futureCall(request);
+   *   // Do something.
+   *   AwsNodePool response = future.get();
+   * }
+   * }</pre>
+   */
+  public final OperationCallable<RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+      rollbackAwsNodePoolUpdateOperationCallable() {
+    return stub.rollbackAwsNodePoolUpdateOperationCallable();
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Rolls back a previously aborted or failed
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] update request. Makes no changes if
+   * the last update request successfully finished. If an update request is in progress, you cannot
+   * rollback the update. You must first cancel or let it finish unsuccessfully before you can
+   * rollback.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   RollbackAwsNodePoolUpdateRequest request =
+   *       RollbackAwsNodePoolUpdateRequest.newBuilder()
+   *           .setName(
+   *               AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+   *                   .toString())
+   *           .setRespectPdb(true)
+   *           .build();
+   *   ApiFuture<Operation> future =
+   *       awsClustersClient.rollbackAwsNodePoolUpdateCallable().futureCall(request);
+   *   // Do something.
+   *   Operation response = future.get();
+   * }
+   * }</pre>
+   */
+  public final UnaryCallable<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateCallable() {
+    return stub.rollbackAwsNodePoolUpdateCallable();
+  }
+
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
    * Describes a specific [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource.
@@ -1870,6 +2148,7 @@ public final OperationFuture<Empty, OperationMetadata> deleteAwsNodePoolAsync(St
    *                   .toString())
    *           .setValidateOnly(true)
    *           .setAllowMissing(true)
+   *           .setIgnoreErrors(true)
    *           .setEtag("etag3123477")
    *           .build();
    *   awsClustersClient.deleteAwsNodePoolAsync(request).get();
@@ -1908,6 +2187,7 @@ public final OperationFuture<Empty, OperationMetadata> deleteAwsNodePoolAsync(
    *                   .toString())
    *           .setValidateOnly(true)
    *           .setAllowMissing(true)
+   *           .setIgnoreErrors(true)
    *           .setEtag("etag3123477")
    *           .build();
    *   OperationFuture<Empty, OperationMetadata> future =
@@ -1946,6 +2226,7 @@ public final OperationFuture<Empty, OperationMetadata> deleteAwsNodePoolAsync(
    *                   .toString())
    *           .setValidateOnly(true)
    *           .setAllowMissing(true)
+   *           .setIgnoreErrors(true)
    *           .setEtag("etag3123477")
    *           .build();
    *   ApiFuture<Operation> future =
@@ -1959,6 +2240,125 @@ public final UnaryCallable<DeleteAwsNodePoolRequest, Operation> deleteAwsNodePoo
     return stub.deleteAwsNodePoolCallable();
   }
 
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the OIDC discovery document for the cluster. See the [OpenID Connect Discovery 1.0
+   * specification](https://openid.net/specs/openid-connect-discovery-1_0.html) for details.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   GetAwsOpenIdConfigRequest request =
+   *       GetAwsOpenIdConfigRequest.newBuilder()
+   *           .setAwsCluster(
+   *               AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+   *           .build();
+   *   AwsOpenIdConfig response = awsClustersClient.getAwsOpenIdConfig(request);
+   * }
+   * }</pre>
+   *
+   * @param request The request object containing all of the parameters for the API call.
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final AwsOpenIdConfig getAwsOpenIdConfig(GetAwsOpenIdConfigRequest request) {
+    return getAwsOpenIdConfigCallable().call(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the OIDC discovery document for the cluster. See the [OpenID Connect Discovery 1.0
+   * specification](https://openid.net/specs/openid-connect-discovery-1_0.html) for details.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   GetAwsOpenIdConfigRequest request =
+   *       GetAwsOpenIdConfigRequest.newBuilder()
+   *           .setAwsCluster(
+   *               AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+   *           .build();
+   *   ApiFuture<AwsOpenIdConfig> future =
+   *       awsClustersClient.getAwsOpenIdConfigCallable().futureCall(request);
+   *   // Do something.
+   *   AwsOpenIdConfig response = future.get();
+   * }
+   * }</pre>
+   */
+  public final UnaryCallable<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+      getAwsOpenIdConfigCallable() {
+    return stub.getAwsOpenIdConfigCallable();
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the public component of the cluster signing keys in JSON Web Key format.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   GetAwsJsonWebKeysRequest request =
+   *       GetAwsJsonWebKeysRequest.newBuilder()
+   *           .setAwsCluster(
+   *               AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+   *           .build();
+   *   AwsJsonWebKeys response = awsClustersClient.getAwsJsonWebKeys(request);
+   * }
+   * }</pre>
+   *
+   * @param request The request object containing all of the parameters for the API call.
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final AwsJsonWebKeys getAwsJsonWebKeys(GetAwsJsonWebKeysRequest request) {
+    return getAwsJsonWebKeysCallable().call(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the public component of the cluster signing keys in JSON Web Key format.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+   *   GetAwsJsonWebKeysRequest request =
+   *       GetAwsJsonWebKeysRequest.newBuilder()
+   *           .setAwsCluster(
+   *               AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+   *           .build();
+   *   ApiFuture<AwsJsonWebKeys> future =
+   *       awsClustersClient.getAwsJsonWebKeysCallable().futureCall(request);
+   *   // Do something.
+   *   AwsJsonWebKeys response = future.get();
+   * }
+   * }</pre>
+   */
+  public final UnaryCallable<GetAwsJsonWebKeysRequest, AwsJsonWebKeys> getAwsJsonWebKeysCallable() {
+    return stub.getAwsJsonWebKeysCallable();
+  }
+
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
    * Returns information, such as supported AWS regions and Kubernetes versions, on a given Google
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersSettings.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersSettings.java
index 60373e69eded..61fb91ea00bf 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersSettings.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersSettings.java
@@ -123,6 +123,13 @@ public UnaryCallSettings<DeleteAwsClusterRequest, Operation> deleteAwsClusterSet
     return ((AwsClustersStubSettings) getStubSettings()).deleteAwsClusterOperationSettings();
   }
 
+  /** Returns the object with the settings used for calls to generateAwsClusterAgentToken. */
+  public UnaryCallSettings<
+          GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenSettings() {
+    return ((AwsClustersStubSettings) getStubSettings()).generateAwsClusterAgentTokenSettings();
+  }
+
   /** Returns the object with the settings used for calls to generateAwsAccessToken. */
   public UnaryCallSettings<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
       generateAwsAccessTokenSettings() {
@@ -151,6 +158,19 @@ public UnaryCallSettings<UpdateAwsNodePoolRequest, Operation> updateAwsNodePoolS
     return ((AwsClustersStubSettings) getStubSettings()).updateAwsNodePoolOperationSettings();
   }
 
+  /** Returns the object with the settings used for calls to rollbackAwsNodePoolUpdate. */
+  public UnaryCallSettings<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateSettings() {
+    return ((AwsClustersStubSettings) getStubSettings()).rollbackAwsNodePoolUpdateSettings();
+  }
+
+  /** Returns the object with the settings used for calls to rollbackAwsNodePoolUpdate. */
+  public OperationCallSettings<RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+      rollbackAwsNodePoolUpdateOperationSettings() {
+    return ((AwsClustersStubSettings) getStubSettings())
+        .rollbackAwsNodePoolUpdateOperationSettings();
+  }
+
   /** Returns the object with the settings used for calls to getAwsNodePool. */
   public UnaryCallSettings<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolSettings() {
     return ((AwsClustersStubSettings) getStubSettings()).getAwsNodePoolSettings();
@@ -174,6 +194,17 @@ public UnaryCallSettings<DeleteAwsNodePoolRequest, Operation> deleteAwsNodePoolS
     return ((AwsClustersStubSettings) getStubSettings()).deleteAwsNodePoolOperationSettings();
   }
 
+  /** Returns the object with the settings used for calls to getAwsOpenIdConfig. */
+  public UnaryCallSettings<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+      getAwsOpenIdConfigSettings() {
+    return ((AwsClustersStubSettings) getStubSettings()).getAwsOpenIdConfigSettings();
+  }
+
+  /** Returns the object with the settings used for calls to getAwsJsonWebKeys. */
+  public UnaryCallSettings<GetAwsJsonWebKeysRequest, AwsJsonWebKeys> getAwsJsonWebKeysSettings() {
+    return ((AwsClustersStubSettings) getStubSettings()).getAwsJsonWebKeysSettings();
+  }
+
   /** Returns the object with the settings used for calls to getAwsServerConfig. */
   public UnaryCallSettings<GetAwsServerConfigRequest, AwsServerConfig>
       getAwsServerConfigSettings() {
@@ -342,6 +373,13 @@ public UnaryCallSettings.Builder<GetAwsClusterRequest, AwsCluster> getAwsCluster
       return getStubSettingsBuilder().deleteAwsClusterOperationSettings();
     }
 
+    /** Returns the builder for the settings used for calls to generateAwsClusterAgentToken. */
+    public UnaryCallSettings.Builder<
+            GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+        generateAwsClusterAgentTokenSettings() {
+      return getStubSettingsBuilder().generateAwsClusterAgentTokenSettings();
+    }
+
     /** Returns the builder for the settings used for calls to generateAwsAccessToken. */
     public UnaryCallSettings.Builder<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
         generateAwsAccessTokenSettings() {
@@ -372,6 +410,19 @@ public UnaryCallSettings.Builder<GetAwsClusterRequest, AwsCluster> getAwsCluster
       return getStubSettingsBuilder().updateAwsNodePoolOperationSettings();
     }
 
+    /** Returns the builder for the settings used for calls to rollbackAwsNodePoolUpdate. */
+    public UnaryCallSettings.Builder<RollbackAwsNodePoolUpdateRequest, Operation>
+        rollbackAwsNodePoolUpdateSettings() {
+      return getStubSettingsBuilder().rollbackAwsNodePoolUpdateSettings();
+    }
+
+    /** Returns the builder for the settings used for calls to rollbackAwsNodePoolUpdate. */
+    public OperationCallSettings.Builder<
+            RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+        rollbackAwsNodePoolUpdateOperationSettings() {
+      return getStubSettingsBuilder().rollbackAwsNodePoolUpdateOperationSettings();
+    }
+
     /** Returns the builder for the settings used for calls to getAwsNodePool. */
     public UnaryCallSettings.Builder<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolSettings() {
       return getStubSettingsBuilder().getAwsNodePoolSettings();
@@ -396,6 +447,18 @@ public UnaryCallSettings.Builder<GetAwsNodePoolRequest, AwsNodePool> getAwsNodeP
       return getStubSettingsBuilder().deleteAwsNodePoolOperationSettings();
     }
 
+    /** Returns the builder for the settings used for calls to getAwsOpenIdConfig. */
+    public UnaryCallSettings.Builder<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+        getAwsOpenIdConfigSettings() {
+      return getStubSettingsBuilder().getAwsOpenIdConfigSettings();
+    }
+
+    /** Returns the builder for the settings used for calls to getAwsJsonWebKeys. */
+    public UnaryCallSettings.Builder<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>
+        getAwsJsonWebKeysSettings() {
+      return getStubSettingsBuilder().getAwsJsonWebKeysSettings();
+    }
+
     /** Returns the builder for the settings used for calls to getAwsServerConfig. */
     public UnaryCallSettings.Builder<GetAwsServerConfigRequest, AwsServerConfig>
         getAwsServerConfigSettings() {
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersClient.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersClient.java
index cf85a3a3c9ec..cade7e677d67 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersClient.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersClient.java
@@ -1164,8 +1164,8 @@ public final UnaryCallable<CreateAzureClusterRequest, Operation> createAzureClus
    *     [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]:
    *     <p>&#42; `description`. &#42; `azureClient`. &#42; `control_plane.version`. &#42;
    *     `control_plane.vm_size`. &#42; `annotations`. &#42; `authorization.admin_users`. &#42;
-   *     `control_plane.root_volume.size_gib`. &#42; `azure_services_authentication`. &#42;
-   *     `azure_services_authentication.tenant_id`. &#42;
+   *     `authorization.admin_groups`. &#42; `control_plane.root_volume.size_gib`. &#42;
+   *     `azure_services_authentication`. &#42; `azure_services_authentication.tenant_id`. &#42;
    *     `azure_services_authentication.application_id`. &#42; `control_plane.proxy_config`. &#42;
    *     `control_plane.proxy_config.resource_group_id`. &#42;
    *     `control_plane.proxy_config.secret_id`. &#42; `control_plane.ssh_config.authorized_key`.
@@ -1769,6 +1769,86 @@ public final UnaryCallable<DeleteAzureClusterRequest, Operation> deleteAzureClus
     return stub.deleteAzureClusterCallable();
   }
 
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Generates an access token for a cluster agent.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+   *   GenerateAzureClusterAgentTokenRequest request =
+   *       GenerateAzureClusterAgentTokenRequest.newBuilder()
+   *           .setAzureCluster(
+   *               AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+   *           .setSubjectToken("subjectToken-1519661011")
+   *           .setSubjectTokenType("subjectTokenType1839592711")
+   *           .setVersion("version351608024")
+   *           .setNodePoolId("nodePoolId1121557241")
+   *           .setGrantType("grantType-1219832202")
+   *           .setAudience("audience975628804")
+   *           .setScope("scope109264468")
+   *           .setRequestedTokenType("requestedTokenType1733106949")
+   *           .setOptions("options-1249474914")
+   *           .build();
+   *   GenerateAzureClusterAgentTokenResponse response =
+   *       azureClustersClient.generateAzureClusterAgentToken(request);
+   * }
+   * }</pre>
+   *
+   * @param request The request object containing all of the parameters for the API call.
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final GenerateAzureClusterAgentTokenResponse generateAzureClusterAgentToken(
+      GenerateAzureClusterAgentTokenRequest request) {
+    return generateAzureClusterAgentTokenCallable().call(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Generates an access token for a cluster agent.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+   *   GenerateAzureClusterAgentTokenRequest request =
+   *       GenerateAzureClusterAgentTokenRequest.newBuilder()
+   *           .setAzureCluster(
+   *               AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+   *           .setSubjectToken("subjectToken-1519661011")
+   *           .setSubjectTokenType("subjectTokenType1839592711")
+   *           .setVersion("version351608024")
+   *           .setNodePoolId("nodePoolId1121557241")
+   *           .setGrantType("grantType-1219832202")
+   *           .setAudience("audience975628804")
+   *           .setScope("scope109264468")
+   *           .setRequestedTokenType("requestedTokenType1733106949")
+   *           .setOptions("options-1249474914")
+   *           .build();
+   *   ApiFuture<GenerateAzureClusterAgentTokenResponse> future =
+   *       azureClustersClient.generateAzureClusterAgentTokenCallable().futureCall(request);
+   *   // Do something.
+   *   GenerateAzureClusterAgentTokenResponse response = future.get();
+   * }
+   * }</pre>
+   */
+  public final UnaryCallable<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenCallable() {
+    return stub.generateAzureClusterAgentTokenCallable();
+  }
+
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
    * Generates a short-lived access token to authenticate to a given
@@ -1862,7 +1942,8 @@ public final GenerateAzureAccessTokenResponse generateAzureAccessToken(
    *
    * @param parent Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster] resource
    *     where this node pool will be created.
-   *     <p>Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+   *     <p>`AzureCluster` names are formatted as
+   *     `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
    *     <p>See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more
    *     details on Google Cloud resource names.
    * @param azureNodePool Required. The specification of the
@@ -1916,7 +1997,8 @@ public final OperationFuture<AzureNodePool, OperationMetadata> createAzureNodePo
    *
    * @param parent Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster] resource
    *     where this node pool will be created.
-   *     <p>Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+   *     <p>`AzureCluster` names are formatted as
+   *     `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
    *     <p>See [Resource Names](https://cloud.google.com/apis/design/resource_names) for more
    *     details on Google Cloud resource names.
    * @param azureNodePool Required. The specification of the
@@ -2079,7 +2161,8 @@ public final UnaryCallable<CreateAzureNodePoolRequest, Operation> createAzureNod
    *     this field. The elements of the repeated paths field can only include these fields from
    *     [AzureNodePool][google.cloud.gkemulticloud.v1.AzureNodePool]:
    *     <p>&#42;. `annotations`. &#42; `version`. &#42; `autoscaling.min_node_count`. &#42;
-   *     `autoscaling.max_node_count`. &#42; `config.ssh_config.authorized_key`.
+   *     `autoscaling.max_node_count`. &#42; `config.ssh_config.authorized_key`. &#42;
+   *     `management.auto_repair`. &#42; `management`.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final OperationFuture<AzureNodePool, OperationMetadata> updateAzureNodePoolAsync(
@@ -2690,6 +2773,248 @@ public final UnaryCallable<DeleteAzureNodePoolRequest, Operation> deleteAzureNod
     return stub.deleteAzureNodePoolCallable();
   }
 
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the OIDC discovery document for the cluster. See the [OpenID Connect Discovery 1.0
+   * specification](https://openid.net/specs/openid-connect-discovery-1_0.html) for details.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+   *   AzureClusterName azureCluster =
+   *       AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+   *   AzureOpenIdConfig response = azureClustersClient.getAzureOpenIdConfig(azureCluster);
+   * }
+   * }</pre>
+   *
+   * @param azureCluster Required. The AzureCluster, which owns the OIDC discovery document. Format:
+   *     projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final AzureOpenIdConfig getAzureOpenIdConfig(AzureClusterName azureCluster) {
+    GetAzureOpenIdConfigRequest request =
+        GetAzureOpenIdConfigRequest.newBuilder()
+            .setAzureCluster(azureCluster == null ? null : azureCluster.toString())
+            .build();
+    return getAzureOpenIdConfig(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the OIDC discovery document for the cluster. See the [OpenID Connect Discovery 1.0
+   * specification](https://openid.net/specs/openid-connect-discovery-1_0.html) for details.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+   *   String azureCluster =
+   *       AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString();
+   *   AzureOpenIdConfig response = azureClustersClient.getAzureOpenIdConfig(azureCluster);
+   * }
+   * }</pre>
+   *
+   * @param azureCluster Required. The AzureCluster, which owns the OIDC discovery document. Format:
+   *     projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final AzureOpenIdConfig getAzureOpenIdConfig(String azureCluster) {
+    GetAzureOpenIdConfigRequest request =
+        GetAzureOpenIdConfigRequest.newBuilder().setAzureCluster(azureCluster).build();
+    return getAzureOpenIdConfig(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the OIDC discovery document for the cluster. See the [OpenID Connect Discovery 1.0
+   * specification](https://openid.net/specs/openid-connect-discovery-1_0.html) for details.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+   *   GetAzureOpenIdConfigRequest request =
+   *       GetAzureOpenIdConfigRequest.newBuilder()
+   *           .setAzureCluster(
+   *               AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+   *           .build();
+   *   AzureOpenIdConfig response = azureClustersClient.getAzureOpenIdConfig(request);
+   * }
+   * }</pre>
+   *
+   * @param request The request object containing all of the parameters for the API call.
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final AzureOpenIdConfig getAzureOpenIdConfig(GetAzureOpenIdConfigRequest request) {
+    return getAzureOpenIdConfigCallable().call(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the OIDC discovery document for the cluster. See the [OpenID Connect Discovery 1.0
+   * specification](https://openid.net/specs/openid-connect-discovery-1_0.html) for details.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+   *   GetAzureOpenIdConfigRequest request =
+   *       GetAzureOpenIdConfigRequest.newBuilder()
+   *           .setAzureCluster(
+   *               AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+   *           .build();
+   *   ApiFuture<AzureOpenIdConfig> future =
+   *       azureClustersClient.getAzureOpenIdConfigCallable().futureCall(request);
+   *   // Do something.
+   *   AzureOpenIdConfig response = future.get();
+   * }
+   * }</pre>
+   */
+  public final UnaryCallable<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigCallable() {
+    return stub.getAzureOpenIdConfigCallable();
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the public component of the cluster signing keys in JSON Web Key format.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+   *   AzureClusterName azureCluster =
+   *       AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+   *   AzureJsonWebKeys response = azureClustersClient.getAzureJsonWebKeys(azureCluster);
+   * }
+   * }</pre>
+   *
+   * @param azureCluster Required. The AzureCluster, which owns the JsonWebKeys. Format:
+   *     projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final AzureJsonWebKeys getAzureJsonWebKeys(AzureClusterName azureCluster) {
+    GetAzureJsonWebKeysRequest request =
+        GetAzureJsonWebKeysRequest.newBuilder()
+            .setAzureCluster(azureCluster == null ? null : azureCluster.toString())
+            .build();
+    return getAzureJsonWebKeys(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the public component of the cluster signing keys in JSON Web Key format.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+   *   String azureCluster =
+   *       AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString();
+   *   AzureJsonWebKeys response = azureClustersClient.getAzureJsonWebKeys(azureCluster);
+   * }
+   * }</pre>
+   *
+   * @param azureCluster Required. The AzureCluster, which owns the JsonWebKeys. Format:
+   *     projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final AzureJsonWebKeys getAzureJsonWebKeys(String azureCluster) {
+    GetAzureJsonWebKeysRequest request =
+        GetAzureJsonWebKeysRequest.newBuilder().setAzureCluster(azureCluster).build();
+    return getAzureJsonWebKeys(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the public component of the cluster signing keys in JSON Web Key format.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+   *   GetAzureJsonWebKeysRequest request =
+   *       GetAzureJsonWebKeysRequest.newBuilder()
+   *           .setAzureCluster(
+   *               AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+   *           .build();
+   *   AzureJsonWebKeys response = azureClustersClient.getAzureJsonWebKeys(request);
+   * }
+   * }</pre>
+   *
+   * @param request The request object containing all of the parameters for the API call.
+   * @throws com.google.api.gax.rpc.ApiException if the remote call fails
+   */
+  public final AzureJsonWebKeys getAzureJsonWebKeys(GetAzureJsonWebKeysRequest request) {
+    return getAzureJsonWebKeysCallable().call(request);
+  }
+
+  // AUTO-GENERATED DOCUMENTATION AND METHOD.
+  /**
+   * Gets the public component of the cluster signing keys in JSON Web Key format.
+   *
+   * <p>Sample code:
+   *
+   * <pre>{@code
+   * // This snippet has been automatically generated and should be regarded as a code template only.
+   * // It will require modifications to work:
+   * // - It may require correct/in-range values for request initialization.
+   * // - It may require specifying regional endpoints when creating the service client as shown in
+   * // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+   * try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+   *   GetAzureJsonWebKeysRequest request =
+   *       GetAzureJsonWebKeysRequest.newBuilder()
+   *           .setAzureCluster(
+   *               AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+   *           .build();
+   *   ApiFuture<AzureJsonWebKeys> future =
+   *       azureClustersClient.getAzureJsonWebKeysCallable().futureCall(request);
+   *   // Do something.
+   *   AzureJsonWebKeys response = future.get();
+   * }
+   * }</pre>
+   */
+  public final UnaryCallable<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+      getAzureJsonWebKeysCallable() {
+    return stub.getAzureJsonWebKeysCallable();
+  }
+
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
    * Returns information, such as supported Azure regions and Kubernetes versions, on a given Google
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersSettings.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersSettings.java
index d6bb54323ec3..803fb49b67bc 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersSettings.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersSettings.java
@@ -158,6 +158,13 @@ public UnaryCallSettings<DeleteAzureClusterRequest, Operation> deleteAzureCluste
     return ((AzureClustersStubSettings) getStubSettings()).deleteAzureClusterOperationSettings();
   }
 
+  /** Returns the object with the settings used for calls to generateAzureClusterAgentToken. */
+  public UnaryCallSettings<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenSettings() {
+    return ((AzureClustersStubSettings) getStubSettings()).generateAzureClusterAgentTokenSettings();
+  }
+
   /** Returns the object with the settings used for calls to generateAzureAccessToken. */
   public UnaryCallSettings<GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
       generateAzureAccessTokenSettings() {
@@ -209,6 +216,18 @@ public UnaryCallSettings<DeleteAzureNodePoolRequest, Operation> deleteAzureNodeP
     return ((AzureClustersStubSettings) getStubSettings()).deleteAzureNodePoolOperationSettings();
   }
 
+  /** Returns the object with the settings used for calls to getAzureOpenIdConfig. */
+  public UnaryCallSettings<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigSettings() {
+    return ((AzureClustersStubSettings) getStubSettings()).getAzureOpenIdConfigSettings();
+  }
+
+  /** Returns the object with the settings used for calls to getAzureJsonWebKeys. */
+  public UnaryCallSettings<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+      getAzureJsonWebKeysSettings() {
+    return ((AzureClustersStubSettings) getStubSettings()).getAzureJsonWebKeysSettings();
+  }
+
   /** Returns the object with the settings used for calls to getAzureServerConfig. */
   public UnaryCallSettings<GetAzureServerConfigRequest, AzureServerConfig>
       getAzureServerConfigSettings() {
@@ -415,6 +434,13 @@ public UnaryCallSettings.Builder<GetAzureClientRequest, AzureClient> getAzureCli
       return getStubSettingsBuilder().deleteAzureClusterOperationSettings();
     }
 
+    /** Returns the builder for the settings used for calls to generateAzureClusterAgentToken. */
+    public UnaryCallSettings.Builder<
+            GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+        generateAzureClusterAgentTokenSettings() {
+      return getStubSettingsBuilder().generateAzureClusterAgentTokenSettings();
+    }
+
     /** Returns the builder for the settings used for calls to generateAzureAccessToken. */
     public UnaryCallSettings.Builder<
             GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
@@ -473,6 +499,18 @@ public UnaryCallSettings.Builder<GetAzureClientRequest, AzureClient> getAzureCli
       return getStubSettingsBuilder().deleteAzureNodePoolOperationSettings();
     }
 
+    /** Returns the builder for the settings used for calls to getAzureOpenIdConfig. */
+    public UnaryCallSettings.Builder<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+        getAzureOpenIdConfigSettings() {
+      return getStubSettingsBuilder().getAzureOpenIdConfigSettings();
+    }
+
+    /** Returns the builder for the settings used for calls to getAzureJsonWebKeys. */
+    public UnaryCallSettings.Builder<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+        getAzureJsonWebKeysSettings() {
+      return getStubSettingsBuilder().getAzureJsonWebKeysSettings();
+    }
+
     /** Returns the builder for the settings used for calls to getAzureServerConfig. */
     public UnaryCallSettings.Builder<GetAzureServerConfigRequest, AzureServerConfig>
         getAzureServerConfigSettings() {
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/gapic_metadata.json b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/gapic_metadata.json
index 75b5c7121211..e1b6cb72f164 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/gapic_metadata.json
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/gapic_metadata.json
@@ -16,6 +16,9 @@
             "DeleteAttachedCluster": {
               "methods": ["deleteAttachedClusterAsync", "deleteAttachedClusterAsync", "deleteAttachedClusterAsync", "deleteAttachedClusterOperationCallable", "deleteAttachedClusterCallable"]
             },
+            "GenerateAttachedClusterAgentToken": {
+              "methods": ["generateAttachedClusterAgentToken", "generateAttachedClusterAgentTokenCallable"]
+            },
             "GenerateAttachedClusterInstallManifest": {
               "methods": ["generateAttachedClusterInstallManifest", "generateAttachedClusterInstallManifest", "generateAttachedClusterInstallManifest", "generateAttachedClusterInstallManifestCallable"]
             },
@@ -58,12 +61,21 @@
             "GenerateAwsAccessToken": {
               "methods": ["generateAwsAccessToken", "generateAwsAccessTokenCallable"]
             },
+            "GenerateAwsClusterAgentToken": {
+              "methods": ["generateAwsClusterAgentToken", "generateAwsClusterAgentTokenCallable"]
+            },
             "GetAwsCluster": {
               "methods": ["getAwsCluster", "getAwsCluster", "getAwsCluster", "getAwsClusterCallable"]
             },
+            "GetAwsJsonWebKeys": {
+              "methods": ["getAwsJsonWebKeys", "getAwsJsonWebKeysCallable"]
+            },
             "GetAwsNodePool": {
               "methods": ["getAwsNodePool", "getAwsNodePool", "getAwsNodePool", "getAwsNodePoolCallable"]
             },
+            "GetAwsOpenIdConfig": {
+              "methods": ["getAwsOpenIdConfig", "getAwsOpenIdConfigCallable"]
+            },
             "GetAwsServerConfig": {
               "methods": ["getAwsServerConfig", "getAwsServerConfig", "getAwsServerConfig", "getAwsServerConfigCallable"]
             },
@@ -73,6 +85,9 @@
             "ListAwsNodePools": {
               "methods": ["listAwsNodePools", "listAwsNodePools", "listAwsNodePools", "listAwsNodePoolsPagedCallable", "listAwsNodePoolsCallable"]
             },
+            "RollbackAwsNodePoolUpdate": {
+              "methods": ["rollbackAwsNodePoolUpdateAsync", "rollbackAwsNodePoolUpdateAsync", "rollbackAwsNodePoolUpdateAsync", "rollbackAwsNodePoolUpdateOperationCallable", "rollbackAwsNodePoolUpdateCallable"]
+            },
             "UpdateAwsCluster": {
               "methods": ["updateAwsClusterAsync", "updateAwsClusterAsync", "updateAwsClusterOperationCallable", "updateAwsClusterCallable"]
             },
@@ -109,15 +124,24 @@
             "GenerateAzureAccessToken": {
               "methods": ["generateAzureAccessToken", "generateAzureAccessTokenCallable"]
             },
+            "GenerateAzureClusterAgentToken": {
+              "methods": ["generateAzureClusterAgentToken", "generateAzureClusterAgentTokenCallable"]
+            },
             "GetAzureClient": {
               "methods": ["getAzureClient", "getAzureClient", "getAzureClient", "getAzureClientCallable"]
             },
             "GetAzureCluster": {
               "methods": ["getAzureCluster", "getAzureCluster", "getAzureCluster", "getAzureClusterCallable"]
             },
+            "GetAzureJsonWebKeys": {
+              "methods": ["getAzureJsonWebKeys", "getAzureJsonWebKeys", "getAzureJsonWebKeys", "getAzureJsonWebKeysCallable"]
+            },
             "GetAzureNodePool": {
               "methods": ["getAzureNodePool", "getAzureNodePool", "getAzureNodePool", "getAzureNodePoolCallable"]
             },
+            "GetAzureOpenIdConfig": {
+              "methods": ["getAzureOpenIdConfig", "getAzureOpenIdConfig", "getAzureOpenIdConfig", "getAzureOpenIdConfigCallable"]
+            },
             "GetAzureServerConfig": {
               "methods": ["getAzureServerConfig", "getAzureServerConfig", "getAzureServerConfig", "getAzureServerConfigCallable"]
             },
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AttachedClustersStub.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AttachedClustersStub.java
index 94d7f9cacfd6..d5a045ed4f65 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AttachedClustersStub.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AttachedClustersStub.java
@@ -25,6 +25,8 @@
 import com.google.cloud.gkemulticloud.v1.AttachedServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAttachedClusterRequest;
 import com.google.cloud.gkemulticloud.v1.DeleteAttachedClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestResponse;
 import com.google.cloud.gkemulticloud.v1.GetAttachedClusterRequest;
@@ -123,6 +125,13 @@ public UnaryCallable<DeleteAttachedClusterRequest, Operation> deleteAttachedClus
         "Not implemented: generateAttachedClusterInstallManifestCallable()");
   }
 
+  public UnaryCallable<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenCallable() {
+    throw new UnsupportedOperationException(
+        "Not implemented: generateAttachedClusterAgentTokenCallable()");
+  }
+
   @Override
   public abstract void close();
 }
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AttachedClustersStubSettings.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AttachedClustersStubSettings.java
index 2c2c668d5ce5..c6cd6b95f2e9 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AttachedClustersStubSettings.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AttachedClustersStubSettings.java
@@ -51,6 +51,8 @@
 import com.google.cloud.gkemulticloud.v1.AttachedServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAttachedClusterRequest;
 import com.google.cloud.gkemulticloud.v1.DeleteAttachedClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestResponse;
 import com.google.cloud.gkemulticloud.v1.GetAttachedClusterRequest;
@@ -146,6 +148,9 @@ public class AttachedClustersStubSettings extends StubSettings<AttachedClustersS
           GenerateAttachedClusterInstallManifestRequest,
           GenerateAttachedClusterInstallManifestResponse>
       generateAttachedClusterInstallManifestSettings;
+  private final UnaryCallSettings<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenSettings;
 
   private static final PagedListDescriptor<
           ListAttachedClustersRequest, ListAttachedClustersResponse, AttachedCluster>
@@ -291,6 +296,13 @@ public ApiFuture<ListAttachedClustersPagedResponse> getFuturePagedResponse(
     return generateAttachedClusterInstallManifestSettings;
   }
 
+  /** Returns the object with the settings used for calls to generateAttachedClusterAgentToken. */
+  public UnaryCallSettings<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenSettings() {
+    return generateAttachedClusterAgentTokenSettings;
+  }
+
   public AttachedClustersStub createStub() throws IOException {
     if (getTransportChannelProvider()
         .getTransportName()
@@ -414,6 +426,8 @@ protected AttachedClustersStubSettings(Builder settingsBuilder) throws IOExcepti
     getAttachedServerConfigSettings = settingsBuilder.getAttachedServerConfigSettings().build();
     generateAttachedClusterInstallManifestSettings =
         settingsBuilder.generateAttachedClusterInstallManifestSettings().build();
+    generateAttachedClusterAgentTokenSettings =
+        settingsBuilder.generateAttachedClusterAgentTokenSettings().build();
   }
 
   /** Builder for AttachedClustersStubSettings. */
@@ -452,6 +466,9 @@ public static class Builder extends StubSettings.Builder<AttachedClustersStubSet
             GenerateAttachedClusterInstallManifestRequest,
             GenerateAttachedClusterInstallManifestResponse>
         generateAttachedClusterInstallManifestSettings;
+    private final UnaryCallSettings.Builder<
+            GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+        generateAttachedClusterAgentTokenSettings;
     private static final ImmutableMap<String, ImmutableSet<StatusCode.Code>>
         RETRYABLE_CODE_DEFINITIONS;
 
@@ -514,6 +531,7 @@ protected Builder(ClientContext clientContext) {
       getAttachedServerConfigSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       generateAttachedClusterInstallManifestSettings =
           UnaryCallSettings.newUnaryCallSettingsBuilder();
+      generateAttachedClusterAgentTokenSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
 
       unaryMethodSettingsBuilders =
           ImmutableList.<UnaryCallSettings.Builder<?, ?>>of(
@@ -524,7 +542,8 @@ protected Builder(ClientContext clientContext) {
               listAttachedClustersSettings,
               deleteAttachedClusterSettings,
               getAttachedServerConfigSettings,
-              generateAttachedClusterInstallManifestSettings);
+              generateAttachedClusterInstallManifestSettings,
+              generateAttachedClusterAgentTokenSettings);
       initDefaults(this);
     }
 
@@ -548,6 +567,8 @@ protected Builder(AttachedClustersStubSettings settings) {
       getAttachedServerConfigSettings = settings.getAttachedServerConfigSettings.toBuilder();
       generateAttachedClusterInstallManifestSettings =
           settings.generateAttachedClusterInstallManifestSettings.toBuilder();
+      generateAttachedClusterAgentTokenSettings =
+          settings.generateAttachedClusterAgentTokenSettings.toBuilder();
 
       unaryMethodSettingsBuilders =
           ImmutableList.<UnaryCallSettings.Builder<?, ?>>of(
@@ -558,7 +579,8 @@ protected Builder(AttachedClustersStubSettings settings) {
               listAttachedClustersSettings,
               deleteAttachedClusterSettings,
               getAttachedServerConfigSettings,
-              generateAttachedClusterInstallManifestSettings);
+              generateAttachedClusterInstallManifestSettings,
+              generateAttachedClusterAgentTokenSettings);
     }
 
     private static Builder createDefault() {
@@ -628,6 +650,11 @@ private static Builder initDefaults(Builder builder) {
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
           .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("retry_policy_0_params"));
 
+      builder
+          .generateAttachedClusterAgentTokenSettings()
+          .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
+          .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("retry_policy_0_params"));
+
       builder
           .createAttachedClusterOperationSettings()
           .setInitialCallSettings(
@@ -833,6 +860,13 @@ public Builder applyToAllUnaryMethods(
       return generateAttachedClusterInstallManifestSettings;
     }
 
+    /** Returns the builder for the settings used for calls to generateAttachedClusterAgentToken. */
+    public UnaryCallSettings.Builder<
+            GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+        generateAttachedClusterAgentTokenSettings() {
+      return generateAttachedClusterAgentTokenSettings;
+    }
+
     @Override
     public AttachedClustersStubSettings build() throws IOException {
       return new AttachedClustersStubSettings(this);
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AwsClustersStub.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AwsClustersStub.java
index e54738206e7a..71ccedbc12c3 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AwsClustersStub.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AwsClustersStub.java
@@ -23,7 +23,9 @@
 import com.google.api.gax.rpc.OperationCallable;
 import com.google.api.gax.rpc.UnaryCallable;
 import com.google.cloud.gkemulticloud.v1.AwsCluster;
+import com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys;
 import com.google.cloud.gkemulticloud.v1.AwsNodePool;
+import com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig;
 import com.google.cloud.gkemulticloud.v1.AwsServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAwsClusterRequest;
 import com.google.cloud.gkemulticloud.v1.CreateAwsNodePoolRequest;
@@ -31,14 +33,19 @@
 import com.google.cloud.gkemulticloud.v1.DeleteAwsNodePoolRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenResponse;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GetAwsClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest;
 import com.google.cloud.gkemulticloud.v1.GetAwsNodePoolRequest;
+import com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest;
 import com.google.cloud.gkemulticloud.v1.GetAwsServerConfigRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsClustersRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsClustersResponse;
 import com.google.cloud.gkemulticloud.v1.ListAwsNodePoolsRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsNodePoolsResponse;
 import com.google.cloud.gkemulticloud.v1.OperationMetadata;
+import com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest;
 import com.google.cloud.gkemulticloud.v1.UpdateAwsClusterRequest;
 import com.google.cloud.gkemulticloud.v1.UpdateAwsNodePoolRequest;
 import com.google.longrunning.Operation;
@@ -103,6 +110,12 @@ public UnaryCallable<DeleteAwsClusterRequest, Operation> deleteAwsClusterCallabl
     throw new UnsupportedOperationException("Not implemented: deleteAwsClusterCallable()");
   }
 
+  public UnaryCallable<GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenCallable() {
+    throw new UnsupportedOperationException(
+        "Not implemented: generateAwsClusterAgentTokenCallable()");
+  }
+
   public UnaryCallable<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
       generateAwsAccessTokenCallable() {
     throw new UnsupportedOperationException("Not implemented: generateAwsAccessTokenCallable()");
@@ -128,6 +141,17 @@ public UnaryCallable<UpdateAwsNodePoolRequest, Operation> updateAwsNodePoolCalla
     throw new UnsupportedOperationException("Not implemented: updateAwsNodePoolCallable()");
   }
 
+  public OperationCallable<RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+      rollbackAwsNodePoolUpdateOperationCallable() {
+    throw new UnsupportedOperationException(
+        "Not implemented: rollbackAwsNodePoolUpdateOperationCallable()");
+  }
+
+  public UnaryCallable<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateCallable() {
+    throw new UnsupportedOperationException("Not implemented: rollbackAwsNodePoolUpdateCallable()");
+  }
+
   public UnaryCallable<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolCallable() {
     throw new UnsupportedOperationException("Not implemented: getAwsNodePoolCallable()");
   }
@@ -152,6 +176,14 @@ public UnaryCallable<DeleteAwsNodePoolRequest, Operation> deleteAwsNodePoolCalla
     throw new UnsupportedOperationException("Not implemented: deleteAwsNodePoolCallable()");
   }
 
+  public UnaryCallable<GetAwsOpenIdConfigRequest, AwsOpenIdConfig> getAwsOpenIdConfigCallable() {
+    throw new UnsupportedOperationException("Not implemented: getAwsOpenIdConfigCallable()");
+  }
+
+  public UnaryCallable<GetAwsJsonWebKeysRequest, AwsJsonWebKeys> getAwsJsonWebKeysCallable() {
+    throw new UnsupportedOperationException("Not implemented: getAwsJsonWebKeysCallable()");
+  }
+
   public UnaryCallable<GetAwsServerConfigRequest, AwsServerConfig> getAwsServerConfigCallable() {
     throw new UnsupportedOperationException("Not implemented: getAwsServerConfigCallable()");
   }
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AwsClustersStubSettings.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AwsClustersStubSettings.java
index add4fbe89f1a..0e942d2c988d 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AwsClustersStubSettings.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AwsClustersStubSettings.java
@@ -49,7 +49,9 @@
 import com.google.api.gax.rpc.UnaryCallSettings;
 import com.google.api.gax.rpc.UnaryCallable;
 import com.google.cloud.gkemulticloud.v1.AwsCluster;
+import com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys;
 import com.google.cloud.gkemulticloud.v1.AwsNodePool;
+import com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig;
 import com.google.cloud.gkemulticloud.v1.AwsServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAwsClusterRequest;
 import com.google.cloud.gkemulticloud.v1.CreateAwsNodePoolRequest;
@@ -57,14 +59,19 @@
 import com.google.cloud.gkemulticloud.v1.DeleteAwsNodePoolRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenResponse;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GetAwsClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest;
 import com.google.cloud.gkemulticloud.v1.GetAwsNodePoolRequest;
+import com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest;
 import com.google.cloud.gkemulticloud.v1.GetAwsServerConfigRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsClustersRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsClustersResponse;
 import com.google.cloud.gkemulticloud.v1.ListAwsNodePoolsRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsNodePoolsResponse;
 import com.google.cloud.gkemulticloud.v1.OperationMetadata;
+import com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest;
 import com.google.cloud.gkemulticloud.v1.UpdateAwsClusterRequest;
 import com.google.cloud.gkemulticloud.v1.UpdateAwsNodePoolRequest;
 import com.google.common.collect.ImmutableList;
@@ -134,6 +141,9 @@ public class AwsClustersStubSettings extends StubSettings<AwsClustersStubSetting
   private final UnaryCallSettings<DeleteAwsClusterRequest, Operation> deleteAwsClusterSettings;
   private final OperationCallSettings<DeleteAwsClusterRequest, Empty, OperationMetadata>
       deleteAwsClusterOperationSettings;
+  private final UnaryCallSettings<
+          GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenSettings;
   private final UnaryCallSettings<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
       generateAwsAccessTokenSettings;
   private final UnaryCallSettings<CreateAwsNodePoolRequest, Operation> createAwsNodePoolSettings;
@@ -142,6 +152,11 @@ public class AwsClustersStubSettings extends StubSettings<AwsClustersStubSetting
   private final UnaryCallSettings<UpdateAwsNodePoolRequest, Operation> updateAwsNodePoolSettings;
   private final OperationCallSettings<UpdateAwsNodePoolRequest, AwsNodePool, OperationMetadata>
       updateAwsNodePoolOperationSettings;
+  private final UnaryCallSettings<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateSettings;
+  private final OperationCallSettings<
+          RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+      rollbackAwsNodePoolUpdateOperationSettings;
   private final UnaryCallSettings<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolSettings;
   private final PagedCallSettings<
           ListAwsNodePoolsRequest, ListAwsNodePoolsResponse, ListAwsNodePoolsPagedResponse>
@@ -149,6 +164,10 @@ public class AwsClustersStubSettings extends StubSettings<AwsClustersStubSetting
   private final UnaryCallSettings<DeleteAwsNodePoolRequest, Operation> deleteAwsNodePoolSettings;
   private final OperationCallSettings<DeleteAwsNodePoolRequest, Empty, OperationMetadata>
       deleteAwsNodePoolOperationSettings;
+  private final UnaryCallSettings<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+      getAwsOpenIdConfigSettings;
+  private final UnaryCallSettings<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>
+      getAwsJsonWebKeysSettings;
   private final UnaryCallSettings<GetAwsServerConfigRequest, AwsServerConfig>
       getAwsServerConfigSettings;
 
@@ -312,6 +331,13 @@ public UnaryCallSettings<DeleteAwsClusterRequest, Operation> deleteAwsClusterSet
     return deleteAwsClusterOperationSettings;
   }
 
+  /** Returns the object with the settings used for calls to generateAwsClusterAgentToken. */
+  public UnaryCallSettings<
+          GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenSettings() {
+    return generateAwsClusterAgentTokenSettings;
+  }
+
   /** Returns the object with the settings used for calls to generateAwsAccessToken. */
   public UnaryCallSettings<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
       generateAwsAccessTokenSettings() {
@@ -340,6 +366,18 @@ public UnaryCallSettings<UpdateAwsNodePoolRequest, Operation> updateAwsNodePoolS
     return updateAwsNodePoolOperationSettings;
   }
 
+  /** Returns the object with the settings used for calls to rollbackAwsNodePoolUpdate. */
+  public UnaryCallSettings<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateSettings() {
+    return rollbackAwsNodePoolUpdateSettings;
+  }
+
+  /** Returns the object with the settings used for calls to rollbackAwsNodePoolUpdate. */
+  public OperationCallSettings<RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+      rollbackAwsNodePoolUpdateOperationSettings() {
+    return rollbackAwsNodePoolUpdateOperationSettings;
+  }
+
   /** Returns the object with the settings used for calls to getAwsNodePool. */
   public UnaryCallSettings<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolSettings() {
     return getAwsNodePoolSettings;
@@ -363,6 +401,17 @@ public UnaryCallSettings<DeleteAwsNodePoolRequest, Operation> deleteAwsNodePoolS
     return deleteAwsNodePoolOperationSettings;
   }
 
+  /** Returns the object with the settings used for calls to getAwsOpenIdConfig. */
+  public UnaryCallSettings<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+      getAwsOpenIdConfigSettings() {
+    return getAwsOpenIdConfigSettings;
+  }
+
+  /** Returns the object with the settings used for calls to getAwsJsonWebKeys. */
+  public UnaryCallSettings<GetAwsJsonWebKeysRequest, AwsJsonWebKeys> getAwsJsonWebKeysSettings() {
+    return getAwsJsonWebKeysSettings;
+  }
+
   /** Returns the object with the settings used for calls to getAwsServerConfig. */
   public UnaryCallSettings<GetAwsServerConfigRequest, AwsServerConfig>
       getAwsServerConfigSettings() {
@@ -483,6 +532,8 @@ protected AwsClustersStubSettings(Builder settingsBuilder) throws IOException {
     listAwsClustersSettings = settingsBuilder.listAwsClustersSettings().build();
     deleteAwsClusterSettings = settingsBuilder.deleteAwsClusterSettings().build();
     deleteAwsClusterOperationSettings = settingsBuilder.deleteAwsClusterOperationSettings().build();
+    generateAwsClusterAgentTokenSettings =
+        settingsBuilder.generateAwsClusterAgentTokenSettings().build();
     generateAwsAccessTokenSettings = settingsBuilder.generateAwsAccessTokenSettings().build();
     createAwsNodePoolSettings = settingsBuilder.createAwsNodePoolSettings().build();
     createAwsNodePoolOperationSettings =
@@ -490,11 +541,16 @@ protected AwsClustersStubSettings(Builder settingsBuilder) throws IOException {
     updateAwsNodePoolSettings = settingsBuilder.updateAwsNodePoolSettings().build();
     updateAwsNodePoolOperationSettings =
         settingsBuilder.updateAwsNodePoolOperationSettings().build();
+    rollbackAwsNodePoolUpdateSettings = settingsBuilder.rollbackAwsNodePoolUpdateSettings().build();
+    rollbackAwsNodePoolUpdateOperationSettings =
+        settingsBuilder.rollbackAwsNodePoolUpdateOperationSettings().build();
     getAwsNodePoolSettings = settingsBuilder.getAwsNodePoolSettings().build();
     listAwsNodePoolsSettings = settingsBuilder.listAwsNodePoolsSettings().build();
     deleteAwsNodePoolSettings = settingsBuilder.deleteAwsNodePoolSettings().build();
     deleteAwsNodePoolOperationSettings =
         settingsBuilder.deleteAwsNodePoolOperationSettings().build();
+    getAwsOpenIdConfigSettings = settingsBuilder.getAwsOpenIdConfigSettings().build();
+    getAwsJsonWebKeysSettings = settingsBuilder.getAwsJsonWebKeysSettings().build();
     getAwsServerConfigSettings = settingsBuilder.getAwsServerConfigSettings().build();
   }
 
@@ -519,6 +575,9 @@ public static class Builder extends StubSettings.Builder<AwsClustersStubSettings
         deleteAwsClusterSettings;
     private final OperationCallSettings.Builder<DeleteAwsClusterRequest, Empty, OperationMetadata>
         deleteAwsClusterOperationSettings;
+    private final UnaryCallSettings.Builder<
+            GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+        generateAwsClusterAgentTokenSettings;
     private final UnaryCallSettings.Builder<
             GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
         generateAwsAccessTokenSettings;
@@ -532,6 +591,11 @@ public static class Builder extends StubSettings.Builder<AwsClustersStubSettings
     private final OperationCallSettings.Builder<
             UpdateAwsNodePoolRequest, AwsNodePool, OperationMetadata>
         updateAwsNodePoolOperationSettings;
+    private final UnaryCallSettings.Builder<RollbackAwsNodePoolUpdateRequest, Operation>
+        rollbackAwsNodePoolUpdateSettings;
+    private final OperationCallSettings.Builder<
+            RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+        rollbackAwsNodePoolUpdateOperationSettings;
     private final UnaryCallSettings.Builder<GetAwsNodePoolRequest, AwsNodePool>
         getAwsNodePoolSettings;
     private final PagedCallSettings.Builder<
@@ -541,6 +605,10 @@ public static class Builder extends StubSettings.Builder<AwsClustersStubSettings
         deleteAwsNodePoolSettings;
     private final OperationCallSettings.Builder<DeleteAwsNodePoolRequest, Empty, OperationMetadata>
         deleteAwsNodePoolOperationSettings;
+    private final UnaryCallSettings.Builder<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+        getAwsOpenIdConfigSettings;
+    private final UnaryCallSettings.Builder<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>
+        getAwsJsonWebKeysSettings;
     private final UnaryCallSettings.Builder<GetAwsServerConfigRequest, AwsServerConfig>
         getAwsServerConfigSettings;
     private static final ImmutableMap<String, ImmutableSet<StatusCode.Code>>
@@ -599,15 +667,20 @@ protected Builder(ClientContext clientContext) {
       listAwsClustersSettings = PagedCallSettings.newBuilder(LIST_AWS_CLUSTERS_PAGE_STR_FACT);
       deleteAwsClusterSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       deleteAwsClusterOperationSettings = OperationCallSettings.newBuilder();
+      generateAwsClusterAgentTokenSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       generateAwsAccessTokenSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       createAwsNodePoolSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       createAwsNodePoolOperationSettings = OperationCallSettings.newBuilder();
       updateAwsNodePoolSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       updateAwsNodePoolOperationSettings = OperationCallSettings.newBuilder();
+      rollbackAwsNodePoolUpdateSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
+      rollbackAwsNodePoolUpdateOperationSettings = OperationCallSettings.newBuilder();
       getAwsNodePoolSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       listAwsNodePoolsSettings = PagedCallSettings.newBuilder(LIST_AWS_NODE_POOLS_PAGE_STR_FACT);
       deleteAwsNodePoolSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       deleteAwsNodePoolOperationSettings = OperationCallSettings.newBuilder();
+      getAwsOpenIdConfigSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
+      getAwsJsonWebKeysSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       getAwsServerConfigSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
 
       unaryMethodSettingsBuilders =
@@ -617,12 +690,16 @@ protected Builder(ClientContext clientContext) {
               getAwsClusterSettings,
               listAwsClustersSettings,
               deleteAwsClusterSettings,
+              generateAwsClusterAgentTokenSettings,
               generateAwsAccessTokenSettings,
               createAwsNodePoolSettings,
               updateAwsNodePoolSettings,
+              rollbackAwsNodePoolUpdateSettings,
               getAwsNodePoolSettings,
               listAwsNodePoolsSettings,
               deleteAwsNodePoolSettings,
+              getAwsOpenIdConfigSettings,
+              getAwsJsonWebKeysSettings,
               getAwsServerConfigSettings);
       initDefaults(this);
     }
@@ -638,15 +715,22 @@ protected Builder(AwsClustersStubSettings settings) {
       listAwsClustersSettings = settings.listAwsClustersSettings.toBuilder();
       deleteAwsClusterSettings = settings.deleteAwsClusterSettings.toBuilder();
       deleteAwsClusterOperationSettings = settings.deleteAwsClusterOperationSettings.toBuilder();
+      generateAwsClusterAgentTokenSettings =
+          settings.generateAwsClusterAgentTokenSettings.toBuilder();
       generateAwsAccessTokenSettings = settings.generateAwsAccessTokenSettings.toBuilder();
       createAwsNodePoolSettings = settings.createAwsNodePoolSettings.toBuilder();
       createAwsNodePoolOperationSettings = settings.createAwsNodePoolOperationSettings.toBuilder();
       updateAwsNodePoolSettings = settings.updateAwsNodePoolSettings.toBuilder();
       updateAwsNodePoolOperationSettings = settings.updateAwsNodePoolOperationSettings.toBuilder();
+      rollbackAwsNodePoolUpdateSettings = settings.rollbackAwsNodePoolUpdateSettings.toBuilder();
+      rollbackAwsNodePoolUpdateOperationSettings =
+          settings.rollbackAwsNodePoolUpdateOperationSettings.toBuilder();
       getAwsNodePoolSettings = settings.getAwsNodePoolSettings.toBuilder();
       listAwsNodePoolsSettings = settings.listAwsNodePoolsSettings.toBuilder();
       deleteAwsNodePoolSettings = settings.deleteAwsNodePoolSettings.toBuilder();
       deleteAwsNodePoolOperationSettings = settings.deleteAwsNodePoolOperationSettings.toBuilder();
+      getAwsOpenIdConfigSettings = settings.getAwsOpenIdConfigSettings.toBuilder();
+      getAwsJsonWebKeysSettings = settings.getAwsJsonWebKeysSettings.toBuilder();
       getAwsServerConfigSettings = settings.getAwsServerConfigSettings.toBuilder();
 
       unaryMethodSettingsBuilders =
@@ -656,12 +740,16 @@ protected Builder(AwsClustersStubSettings settings) {
               getAwsClusterSettings,
               listAwsClustersSettings,
               deleteAwsClusterSettings,
+              generateAwsClusterAgentTokenSettings,
               generateAwsAccessTokenSettings,
               createAwsNodePoolSettings,
               updateAwsNodePoolSettings,
+              rollbackAwsNodePoolUpdateSettings,
               getAwsNodePoolSettings,
               listAwsNodePoolsSettings,
               deleteAwsNodePoolSettings,
+              getAwsOpenIdConfigSettings,
+              getAwsJsonWebKeysSettings,
               getAwsServerConfigSettings);
     }
 
@@ -717,6 +805,11 @@ private static Builder initDefaults(Builder builder) {
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("no_retry_1_codes"))
           .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("no_retry_1_params"));
 
+      builder
+          .generateAwsClusterAgentTokenSettings()
+          .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
+          .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("retry_policy_0_params"));
+
       builder
           .generateAwsAccessTokenSettings()
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
@@ -732,6 +825,11 @@ private static Builder initDefaults(Builder builder) {
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("no_retry_1_codes"))
           .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("no_retry_1_params"));
 
+      builder
+          .rollbackAwsNodePoolUpdateSettings()
+          .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("no_retry_1_codes"))
+          .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("no_retry_1_params"));
+
       builder
           .getAwsNodePoolSettings()
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
@@ -747,6 +845,16 @@ private static Builder initDefaults(Builder builder) {
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("no_retry_1_codes"))
           .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("no_retry_1_params"));
 
+      builder
+          .getAwsOpenIdConfigSettings()
+          .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
+          .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("retry_policy_0_params"));
+
+      builder
+          .getAwsJsonWebKeysSettings()
+          .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
+          .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("retry_policy_0_params"));
+
       builder
           .getAwsServerConfigSettings()
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
@@ -872,6 +980,31 @@ private static Builder initDefaults(Builder builder) {
                       .setTotalTimeout(Duration.ofMillis(300000L))
                       .build()));
 
+      builder
+          .rollbackAwsNodePoolUpdateOperationSettings()
+          .setInitialCallSettings(
+              UnaryCallSettings
+                  .<RollbackAwsNodePoolUpdateRequest, OperationSnapshot>
+                      newUnaryCallSettingsBuilder()
+                  .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("no_retry_1_codes"))
+                  .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("no_retry_1_params"))
+                  .build())
+          .setResponseTransformer(
+              ProtoOperationTransformers.ResponseTransformer.create(AwsNodePool.class))
+          .setMetadataTransformer(
+              ProtoOperationTransformers.MetadataTransformer.create(OperationMetadata.class))
+          .setPollingAlgorithm(
+              OperationTimedPollAlgorithm.create(
+                  RetrySettings.newBuilder()
+                      .setInitialRetryDelay(Duration.ofMillis(5000L))
+                      .setRetryDelayMultiplier(1.5)
+                      .setMaxRetryDelay(Duration.ofMillis(45000L))
+                      .setInitialRpcTimeout(Duration.ZERO)
+                      .setRpcTimeoutMultiplier(1.0)
+                      .setMaxRpcTimeout(Duration.ZERO)
+                      .setTotalTimeout(Duration.ofMillis(300000L))
+                      .build()));
+
       builder
           .deleteAwsNodePoolOperationSettings()
           .setInitialCallSettings(
@@ -968,6 +1101,13 @@ public UnaryCallSettings.Builder<GetAwsClusterRequest, AwsCluster> getAwsCluster
       return deleteAwsClusterOperationSettings;
     }
 
+    /** Returns the builder for the settings used for calls to generateAwsClusterAgentToken. */
+    public UnaryCallSettings.Builder<
+            GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+        generateAwsClusterAgentTokenSettings() {
+      return generateAwsClusterAgentTokenSettings;
+    }
+
     /** Returns the builder for the settings used for calls to generateAwsAccessToken. */
     public UnaryCallSettings.Builder<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
         generateAwsAccessTokenSettings() {
@@ -1002,6 +1142,21 @@ public UnaryCallSettings.Builder<GetAwsClusterRequest, AwsCluster> getAwsCluster
       return updateAwsNodePoolOperationSettings;
     }
 
+    /** Returns the builder for the settings used for calls to rollbackAwsNodePoolUpdate. */
+    public UnaryCallSettings.Builder<RollbackAwsNodePoolUpdateRequest, Operation>
+        rollbackAwsNodePoolUpdateSettings() {
+      return rollbackAwsNodePoolUpdateSettings;
+    }
+
+    /** Returns the builder for the settings used for calls to rollbackAwsNodePoolUpdate. */
+    @BetaApi(
+        "The surface for use by generated code is not stable yet and may change in the future.")
+    public OperationCallSettings.Builder<
+            RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+        rollbackAwsNodePoolUpdateOperationSettings() {
+      return rollbackAwsNodePoolUpdateOperationSettings;
+    }
+
     /** Returns the builder for the settings used for calls to getAwsNodePool. */
     public UnaryCallSettings.Builder<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolSettings() {
       return getAwsNodePoolSettings;
@@ -1028,6 +1183,18 @@ public UnaryCallSettings.Builder<GetAwsNodePoolRequest, AwsNodePool> getAwsNodeP
       return deleteAwsNodePoolOperationSettings;
     }
 
+    /** Returns the builder for the settings used for calls to getAwsOpenIdConfig. */
+    public UnaryCallSettings.Builder<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+        getAwsOpenIdConfigSettings() {
+      return getAwsOpenIdConfigSettings;
+    }
+
+    /** Returns the builder for the settings used for calls to getAwsJsonWebKeys. */
+    public UnaryCallSettings.Builder<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>
+        getAwsJsonWebKeysSettings() {
+      return getAwsJsonWebKeysSettings;
+    }
+
     /** Returns the builder for the settings used for calls to getAwsServerConfig. */
     public UnaryCallSettings.Builder<GetAwsServerConfigRequest, AwsServerConfig>
         getAwsServerConfigSettings() {
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AzureClustersStub.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AzureClustersStub.java
index 9e2d1df79aa3..32b6ac604f1d 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AzureClustersStub.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AzureClustersStub.java
@@ -25,7 +25,9 @@
 import com.google.api.gax.rpc.UnaryCallable;
 import com.google.cloud.gkemulticloud.v1.AzureClient;
 import com.google.cloud.gkemulticloud.v1.AzureCluster;
+import com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys;
 import com.google.cloud.gkemulticloud.v1.AzureNodePool;
+import com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig;
 import com.google.cloud.gkemulticloud.v1.AzureServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAzureClientRequest;
 import com.google.cloud.gkemulticloud.v1.CreateAzureClusterRequest;
@@ -35,9 +37,13 @@
 import com.google.cloud.gkemulticloud.v1.DeleteAzureNodePoolRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenResponse;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GetAzureClientRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureNodePoolRequest;
+import com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureServerConfigRequest;
 import com.google.cloud.gkemulticloud.v1.ListAzureClientsRequest;
 import com.google.cloud.gkemulticloud.v1.ListAzureClientsResponse;
@@ -148,6 +154,13 @@ public UnaryCallable<DeleteAzureClusterRequest, Operation> deleteAzureClusterCal
     throw new UnsupportedOperationException("Not implemented: deleteAzureClusterCallable()");
   }
 
+  public UnaryCallable<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenCallable() {
+    throw new UnsupportedOperationException(
+        "Not implemented: generateAzureClusterAgentTokenCallable()");
+  }
+
   public UnaryCallable<GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
       generateAzureAccessTokenCallable() {
     throw new UnsupportedOperationException("Not implemented: generateAzureAccessTokenCallable()");
@@ -197,6 +210,15 @@ public UnaryCallable<DeleteAzureNodePoolRequest, Operation> deleteAzureNodePoolC
     throw new UnsupportedOperationException("Not implemented: deleteAzureNodePoolCallable()");
   }
 
+  public UnaryCallable<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigCallable() {
+    throw new UnsupportedOperationException("Not implemented: getAzureOpenIdConfigCallable()");
+  }
+
+  public UnaryCallable<GetAzureJsonWebKeysRequest, AzureJsonWebKeys> getAzureJsonWebKeysCallable() {
+    throw new UnsupportedOperationException("Not implemented: getAzureJsonWebKeysCallable()");
+  }
+
   public UnaryCallable<GetAzureServerConfigRequest, AzureServerConfig>
       getAzureServerConfigCallable() {
     throw new UnsupportedOperationException("Not implemented: getAzureServerConfigCallable()");
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AzureClustersStubSettings.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AzureClustersStubSettings.java
index 7de1035341e9..8e7e640a92a6 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AzureClustersStubSettings.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/AzureClustersStubSettings.java
@@ -51,7 +51,9 @@
 import com.google.api.gax.rpc.UnaryCallable;
 import com.google.cloud.gkemulticloud.v1.AzureClient;
 import com.google.cloud.gkemulticloud.v1.AzureCluster;
+import com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys;
 import com.google.cloud.gkemulticloud.v1.AzureNodePool;
+import com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig;
 import com.google.cloud.gkemulticloud.v1.AzureServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAzureClientRequest;
 import com.google.cloud.gkemulticloud.v1.CreateAzureClusterRequest;
@@ -61,9 +63,13 @@
 import com.google.cloud.gkemulticloud.v1.DeleteAzureNodePoolRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenResponse;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GetAzureClientRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureNodePoolRequest;
+import com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureServerConfigRequest;
 import com.google.cloud.gkemulticloud.v1.ListAzureClientsRequest;
 import com.google.cloud.gkemulticloud.v1.ListAzureClientsResponse;
@@ -151,6 +157,9 @@ public class AzureClustersStubSettings extends StubSettings<AzureClustersStubSet
   private final UnaryCallSettings<DeleteAzureClusterRequest, Operation> deleteAzureClusterSettings;
   private final OperationCallSettings<DeleteAzureClusterRequest, Empty, OperationMetadata>
       deleteAzureClusterOperationSettings;
+  private final UnaryCallSettings<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenSettings;
   private final UnaryCallSettings<GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
       generateAzureAccessTokenSettings;
   private final UnaryCallSettings<CreateAzureNodePoolRequest, Operation>
@@ -169,6 +178,10 @@ public class AzureClustersStubSettings extends StubSettings<AzureClustersStubSet
       deleteAzureNodePoolSettings;
   private final OperationCallSettings<DeleteAzureNodePoolRequest, Empty, OperationMetadata>
       deleteAzureNodePoolOperationSettings;
+  private final UnaryCallSettings<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigSettings;
+  private final UnaryCallSettings<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+      getAzureJsonWebKeysSettings;
   private final UnaryCallSettings<GetAzureServerConfigRequest, AzureServerConfig>
       getAzureServerConfigSettings;
 
@@ -432,6 +445,13 @@ public UnaryCallSettings<DeleteAzureClusterRequest, Operation> deleteAzureCluste
     return deleteAzureClusterOperationSettings;
   }
 
+  /** Returns the object with the settings used for calls to generateAzureClusterAgentToken. */
+  public UnaryCallSettings<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenSettings() {
+    return generateAzureClusterAgentTokenSettings;
+  }
+
   /** Returns the object with the settings used for calls to generateAzureAccessToken. */
   public UnaryCallSettings<GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
       generateAzureAccessTokenSettings() {
@@ -483,6 +503,18 @@ public UnaryCallSettings<DeleteAzureNodePoolRequest, Operation> deleteAzureNodeP
     return deleteAzureNodePoolOperationSettings;
   }
 
+  /** Returns the object with the settings used for calls to getAzureOpenIdConfig. */
+  public UnaryCallSettings<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigSettings() {
+    return getAzureOpenIdConfigSettings;
+  }
+
+  /** Returns the object with the settings used for calls to getAzureJsonWebKeys. */
+  public UnaryCallSettings<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+      getAzureJsonWebKeysSettings() {
+    return getAzureJsonWebKeysSettings;
+  }
+
   /** Returns the object with the settings used for calls to getAzureServerConfig. */
   public UnaryCallSettings<GetAzureServerConfigRequest, AzureServerConfig>
       getAzureServerConfigSettings() {
@@ -614,6 +646,8 @@ protected AzureClustersStubSettings(Builder settingsBuilder) throws IOException
     deleteAzureClusterSettings = settingsBuilder.deleteAzureClusterSettings().build();
     deleteAzureClusterOperationSettings =
         settingsBuilder.deleteAzureClusterOperationSettings().build();
+    generateAzureClusterAgentTokenSettings =
+        settingsBuilder.generateAzureClusterAgentTokenSettings().build();
     generateAzureAccessTokenSettings = settingsBuilder.generateAzureAccessTokenSettings().build();
     createAzureNodePoolSettings = settingsBuilder.createAzureNodePoolSettings().build();
     createAzureNodePoolOperationSettings =
@@ -626,6 +660,8 @@ protected AzureClustersStubSettings(Builder settingsBuilder) throws IOException
     deleteAzureNodePoolSettings = settingsBuilder.deleteAzureNodePoolSettings().build();
     deleteAzureNodePoolOperationSettings =
         settingsBuilder.deleteAzureNodePoolOperationSettings().build();
+    getAzureOpenIdConfigSettings = settingsBuilder.getAzureOpenIdConfigSettings().build();
+    getAzureJsonWebKeysSettings = settingsBuilder.getAzureJsonWebKeysSettings().build();
     getAzureServerConfigSettings = settingsBuilder.getAzureServerConfigSettings().build();
   }
 
@@ -665,6 +701,9 @@ public static class Builder extends StubSettings.Builder<AzureClustersStubSettin
         deleteAzureClusterSettings;
     private final OperationCallSettings.Builder<DeleteAzureClusterRequest, Empty, OperationMetadata>
         deleteAzureClusterOperationSettings;
+    private final UnaryCallSettings.Builder<
+            GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+        generateAzureClusterAgentTokenSettings;
     private final UnaryCallSettings.Builder<
             GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
         generateAzureAccessTokenSettings;
@@ -688,6 +727,10 @@ public static class Builder extends StubSettings.Builder<AzureClustersStubSettin
     private final OperationCallSettings.Builder<
             DeleteAzureNodePoolRequest, Empty, OperationMetadata>
         deleteAzureNodePoolOperationSettings;
+    private final UnaryCallSettings.Builder<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+        getAzureOpenIdConfigSettings;
+    private final UnaryCallSettings.Builder<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+        getAzureJsonWebKeysSettings;
     private final UnaryCallSettings.Builder<GetAzureServerConfigRequest, AzureServerConfig>
         getAzureServerConfigSettings;
     private static final ImmutableMap<String, ImmutableSet<StatusCode.Code>>
@@ -752,6 +795,7 @@ protected Builder(ClientContext clientContext) {
       listAzureClustersSettings = PagedCallSettings.newBuilder(LIST_AZURE_CLUSTERS_PAGE_STR_FACT);
       deleteAzureClusterSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       deleteAzureClusterOperationSettings = OperationCallSettings.newBuilder();
+      generateAzureClusterAgentTokenSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       generateAzureAccessTokenSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       createAzureNodePoolSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       createAzureNodePoolOperationSettings = OperationCallSettings.newBuilder();
@@ -762,6 +806,8 @@ protected Builder(ClientContext clientContext) {
           PagedCallSettings.newBuilder(LIST_AZURE_NODE_POOLS_PAGE_STR_FACT);
       deleteAzureNodePoolSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       deleteAzureNodePoolOperationSettings = OperationCallSettings.newBuilder();
+      getAzureOpenIdConfigSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
+      getAzureJsonWebKeysSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
       getAzureServerConfigSettings = UnaryCallSettings.newUnaryCallSettingsBuilder();
 
       unaryMethodSettingsBuilders =
@@ -775,12 +821,15 @@ protected Builder(ClientContext clientContext) {
               getAzureClusterSettings,
               listAzureClustersSettings,
               deleteAzureClusterSettings,
+              generateAzureClusterAgentTokenSettings,
               generateAzureAccessTokenSettings,
               createAzureNodePoolSettings,
               updateAzureNodePoolSettings,
               getAzureNodePoolSettings,
               listAzureNodePoolsSettings,
               deleteAzureNodePoolSettings,
+              getAzureOpenIdConfigSettings,
+              getAzureJsonWebKeysSettings,
               getAzureServerConfigSettings);
       initDefaults(this);
     }
@@ -805,6 +854,8 @@ protected Builder(AzureClustersStubSettings settings) {
       deleteAzureClusterSettings = settings.deleteAzureClusterSettings.toBuilder();
       deleteAzureClusterOperationSettings =
           settings.deleteAzureClusterOperationSettings.toBuilder();
+      generateAzureClusterAgentTokenSettings =
+          settings.generateAzureClusterAgentTokenSettings.toBuilder();
       generateAzureAccessTokenSettings = settings.generateAzureAccessTokenSettings.toBuilder();
       createAzureNodePoolSettings = settings.createAzureNodePoolSettings.toBuilder();
       createAzureNodePoolOperationSettings =
@@ -817,6 +868,8 @@ protected Builder(AzureClustersStubSettings settings) {
       deleteAzureNodePoolSettings = settings.deleteAzureNodePoolSettings.toBuilder();
       deleteAzureNodePoolOperationSettings =
           settings.deleteAzureNodePoolOperationSettings.toBuilder();
+      getAzureOpenIdConfigSettings = settings.getAzureOpenIdConfigSettings.toBuilder();
+      getAzureJsonWebKeysSettings = settings.getAzureJsonWebKeysSettings.toBuilder();
       getAzureServerConfigSettings = settings.getAzureServerConfigSettings.toBuilder();
 
       unaryMethodSettingsBuilders =
@@ -830,12 +883,15 @@ protected Builder(AzureClustersStubSettings settings) {
               getAzureClusterSettings,
               listAzureClustersSettings,
               deleteAzureClusterSettings,
+              generateAzureClusterAgentTokenSettings,
               generateAzureAccessTokenSettings,
               createAzureNodePoolSettings,
               updateAzureNodePoolSettings,
               getAzureNodePoolSettings,
               listAzureNodePoolsSettings,
               deleteAzureNodePoolSettings,
+              getAzureOpenIdConfigSettings,
+              getAzureJsonWebKeysSettings,
               getAzureServerConfigSettings);
     }
 
@@ -911,6 +967,11 @@ private static Builder initDefaults(Builder builder) {
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("no_retry_1_codes"))
           .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("no_retry_1_params"));
 
+      builder
+          .generateAzureClusterAgentTokenSettings()
+          .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
+          .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("retry_policy_0_params"));
+
       builder
           .generateAzureAccessTokenSettings()
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
@@ -941,6 +1002,16 @@ private static Builder initDefaults(Builder builder) {
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("no_retry_1_codes"))
           .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("no_retry_1_params"));
 
+      builder
+          .getAzureOpenIdConfigSettings()
+          .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
+          .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("retry_policy_0_params"));
+
+      builder
+          .getAzureJsonWebKeysSettings()
+          .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
+          .setRetrySettings(RETRY_PARAM_DEFINITIONS.get("retry_policy_0_params"));
+
       builder
           .getAzureServerConfigSettings()
           .setRetryableCodes(RETRYABLE_CODE_DEFINITIONS.get("retry_policy_0_codes"))
@@ -1251,6 +1322,13 @@ public UnaryCallSettings.Builder<GetAzureClientRequest, AzureClient> getAzureCli
       return deleteAzureClusterOperationSettings;
     }
 
+    /** Returns the builder for the settings used for calls to generateAzureClusterAgentToken. */
+    public UnaryCallSettings.Builder<
+            GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+        generateAzureClusterAgentTokenSettings() {
+      return generateAzureClusterAgentTokenSettings;
+    }
+
     /** Returns the builder for the settings used for calls to generateAzureAccessToken. */
     public UnaryCallSettings.Builder<
             GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
@@ -1315,6 +1393,18 @@ public UnaryCallSettings.Builder<GetAzureClientRequest, AzureClient> getAzureCli
       return deleteAzureNodePoolOperationSettings;
     }
 
+    /** Returns the builder for the settings used for calls to getAzureOpenIdConfig. */
+    public UnaryCallSettings.Builder<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+        getAzureOpenIdConfigSettings() {
+      return getAzureOpenIdConfigSettings;
+    }
+
+    /** Returns the builder for the settings used for calls to getAzureJsonWebKeys. */
+    public UnaryCallSettings.Builder<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+        getAzureJsonWebKeysSettings() {
+      return getAzureJsonWebKeysSettings;
+    }
+
     /** Returns the builder for the settings used for calls to getAzureServerConfig. */
     public UnaryCallSettings.Builder<GetAzureServerConfigRequest, AzureServerConfig>
         getAzureServerConfigSettings() {
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAttachedClustersStub.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAttachedClustersStub.java
index 222bc51b929c..9014cedc82e1 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAttachedClustersStub.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAttachedClustersStub.java
@@ -30,6 +30,8 @@
 import com.google.cloud.gkemulticloud.v1.AttachedServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAttachedClusterRequest;
 import com.google.cloud.gkemulticloud.v1.DeleteAttachedClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestResponse;
 import com.google.cloud.gkemulticloud.v1.GetAttachedClusterRequest;
@@ -154,6 +156,23 @@ public class GrpcAttachedClustersStub extends AttachedClustersStub {
                       GenerateAttachedClusterInstallManifestResponse.getDefaultInstance()))
               .build();
 
+  private static final MethodDescriptor<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenMethodDescriptor =
+          MethodDescriptor
+              .<GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+                  newBuilder()
+              .setType(MethodDescriptor.MethodType.UNARY)
+              .setFullMethodName(
+                  "google.cloud.gkemulticloud.v1.AttachedClusters/GenerateAttachedClusterAgentToken")
+              .setRequestMarshaller(
+                  ProtoUtils.marshaller(
+                      GenerateAttachedClusterAgentTokenRequest.getDefaultInstance()))
+              .setResponseMarshaller(
+                  ProtoUtils.marshaller(
+                      GenerateAttachedClusterAgentTokenResponse.getDefaultInstance()))
+              .build();
+
   private final UnaryCallable<CreateAttachedClusterRequest, Operation>
       createAttachedClusterCallable;
   private final OperationCallable<CreateAttachedClusterRequest, AttachedCluster, OperationMetadata>
@@ -182,6 +201,9 @@ public class GrpcAttachedClustersStub extends AttachedClustersStub {
           GenerateAttachedClusterInstallManifestRequest,
           GenerateAttachedClusterInstallManifestResponse>
       generateAttachedClusterInstallManifestCallable;
+  private final UnaryCallable<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenCallable;
 
   private final BackgroundResource backgroundResources;
   private final GrpcOperationsStub operationsStub;
@@ -322,6 +344,21 @@ protected GrpcAttachedClustersStub(
                       return builder.build();
                     })
                 .build();
+    GrpcCallSettings<
+            GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+        generateAttachedClusterAgentTokenTransportSettings =
+            GrpcCallSettings
+                .<GenerateAttachedClusterAgentTokenRequest,
+                    GenerateAttachedClusterAgentTokenResponse>
+                    newBuilder()
+                .setMethodDescriptor(generateAttachedClusterAgentTokenMethodDescriptor)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("attached_cluster", String.valueOf(request.getAttachedCluster()));
+                      return builder.build();
+                    })
+                .build();
 
     this.createAttachedClusterCallable =
         callableFactory.createUnaryCallable(
@@ -392,6 +429,11 @@ protected GrpcAttachedClustersStub(
             generateAttachedClusterInstallManifestTransportSettings,
             settings.generateAttachedClusterInstallManifestSettings(),
             clientContext);
+    this.generateAttachedClusterAgentTokenCallable =
+        callableFactory.createUnaryCallable(
+            generateAttachedClusterAgentTokenTransportSettings,
+            settings.generateAttachedClusterAgentTokenSettings(),
+            clientContext);
 
     this.backgroundResources =
         new BackgroundResourceAggregation(clientContext.getBackgroundResources());
@@ -476,6 +518,13 @@ public UnaryCallable<DeleteAttachedClusterRequest, Operation> deleteAttachedClus
     return generateAttachedClusterInstallManifestCallable;
   }
 
+  @Override
+  public UnaryCallable<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenCallable() {
+    return generateAttachedClusterAgentTokenCallable;
+  }
+
   @Override
   public final void close() {
     try {
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAwsClustersStub.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAwsClustersStub.java
index fd3e6fcaf6db..53d28a602527 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAwsClustersStub.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAwsClustersStub.java
@@ -28,7 +28,9 @@
 import com.google.api.gax.rpc.RequestParamsBuilder;
 import com.google.api.gax.rpc.UnaryCallable;
 import com.google.cloud.gkemulticloud.v1.AwsCluster;
+import com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys;
 import com.google.cloud.gkemulticloud.v1.AwsNodePool;
+import com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig;
 import com.google.cloud.gkemulticloud.v1.AwsServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAwsClusterRequest;
 import com.google.cloud.gkemulticloud.v1.CreateAwsNodePoolRequest;
@@ -36,14 +38,19 @@
 import com.google.cloud.gkemulticloud.v1.DeleteAwsNodePoolRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenResponse;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GetAwsClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest;
 import com.google.cloud.gkemulticloud.v1.GetAwsNodePoolRequest;
+import com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest;
 import com.google.cloud.gkemulticloud.v1.GetAwsServerConfigRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsClustersRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsClustersResponse;
 import com.google.cloud.gkemulticloud.v1.ListAwsNodePoolsRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsNodePoolsResponse;
 import com.google.cloud.gkemulticloud.v1.OperationMetadata;
+import com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest;
 import com.google.cloud.gkemulticloud.v1.UpdateAwsClusterRequest;
 import com.google.cloud.gkemulticloud.v1.UpdateAwsNodePoolRequest;
 import com.google.longrunning.Operation;
@@ -114,6 +121,21 @@ public class GrpcAwsClustersStub extends AwsClustersStub {
               .setResponseMarshaller(ProtoUtils.marshaller(Operation.getDefaultInstance()))
               .build();
 
+  private static final MethodDescriptor<
+          GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenMethodDescriptor =
+          MethodDescriptor
+              .<GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+                  newBuilder()
+              .setType(MethodDescriptor.MethodType.UNARY)
+              .setFullMethodName(
+                  "google.cloud.gkemulticloud.v1.AwsClusters/GenerateAwsClusterAgentToken")
+              .setRequestMarshaller(
+                  ProtoUtils.marshaller(GenerateAwsClusterAgentTokenRequest.getDefaultInstance()))
+              .setResponseMarshaller(
+                  ProtoUtils.marshaller(GenerateAwsClusterAgentTokenResponse.getDefaultInstance()))
+              .build();
+
   private static final MethodDescriptor<
           GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
       generateAwsAccessTokenMethodDescriptor =
@@ -147,6 +169,17 @@ public class GrpcAwsClustersStub extends AwsClustersStub {
               .setResponseMarshaller(ProtoUtils.marshaller(Operation.getDefaultInstance()))
               .build();
 
+  private static final MethodDescriptor<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateMethodDescriptor =
+          MethodDescriptor.<RollbackAwsNodePoolUpdateRequest, Operation>newBuilder()
+              .setType(MethodDescriptor.MethodType.UNARY)
+              .setFullMethodName(
+                  "google.cloud.gkemulticloud.v1.AwsClusters/RollbackAwsNodePoolUpdate")
+              .setRequestMarshaller(
+                  ProtoUtils.marshaller(RollbackAwsNodePoolUpdateRequest.getDefaultInstance()))
+              .setResponseMarshaller(ProtoUtils.marshaller(Operation.getDefaultInstance()))
+              .build();
+
   private static final MethodDescriptor<GetAwsNodePoolRequest, AwsNodePool>
       getAwsNodePoolMethodDescriptor =
           MethodDescriptor.<GetAwsNodePoolRequest, AwsNodePool>newBuilder()
@@ -178,6 +211,26 @@ public class GrpcAwsClustersStub extends AwsClustersStub {
               .setResponseMarshaller(ProtoUtils.marshaller(Operation.getDefaultInstance()))
               .build();
 
+  private static final MethodDescriptor<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+      getAwsOpenIdConfigMethodDescriptor =
+          MethodDescriptor.<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>newBuilder()
+              .setType(MethodDescriptor.MethodType.UNARY)
+              .setFullMethodName("google.cloud.gkemulticloud.v1.AwsClusters/GetAwsOpenIdConfig")
+              .setRequestMarshaller(
+                  ProtoUtils.marshaller(GetAwsOpenIdConfigRequest.getDefaultInstance()))
+              .setResponseMarshaller(ProtoUtils.marshaller(AwsOpenIdConfig.getDefaultInstance()))
+              .build();
+
+  private static final MethodDescriptor<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>
+      getAwsJsonWebKeysMethodDescriptor =
+          MethodDescriptor.<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>newBuilder()
+              .setType(MethodDescriptor.MethodType.UNARY)
+              .setFullMethodName("google.cloud.gkemulticloud.v1.AwsClusters/GetAwsJsonWebKeys")
+              .setRequestMarshaller(
+                  ProtoUtils.marshaller(GetAwsJsonWebKeysRequest.getDefaultInstance()))
+              .setResponseMarshaller(ProtoUtils.marshaller(AwsJsonWebKeys.getDefaultInstance()))
+              .build();
+
   private static final MethodDescriptor<GetAwsServerConfigRequest, AwsServerConfig>
       getAwsServerConfigMethodDescriptor =
           MethodDescriptor.<GetAwsServerConfigRequest, AwsServerConfig>newBuilder()
@@ -202,6 +255,9 @@ public class GrpcAwsClustersStub extends AwsClustersStub {
   private final UnaryCallable<DeleteAwsClusterRequest, Operation> deleteAwsClusterCallable;
   private final OperationCallable<DeleteAwsClusterRequest, Empty, OperationMetadata>
       deleteAwsClusterOperationCallable;
+  private final UnaryCallable<
+          GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenCallable;
   private final UnaryCallable<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
       generateAwsAccessTokenCallable;
   private final UnaryCallable<CreateAwsNodePoolRequest, Operation> createAwsNodePoolCallable;
@@ -210,6 +266,10 @@ public class GrpcAwsClustersStub extends AwsClustersStub {
   private final UnaryCallable<UpdateAwsNodePoolRequest, Operation> updateAwsNodePoolCallable;
   private final OperationCallable<UpdateAwsNodePoolRequest, AwsNodePool, OperationMetadata>
       updateAwsNodePoolOperationCallable;
+  private final UnaryCallable<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateCallable;
+  private final OperationCallable<RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+      rollbackAwsNodePoolUpdateOperationCallable;
   private final UnaryCallable<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolCallable;
   private final UnaryCallable<ListAwsNodePoolsRequest, ListAwsNodePoolsResponse>
       listAwsNodePoolsCallable;
@@ -218,6 +278,9 @@ public class GrpcAwsClustersStub extends AwsClustersStub {
   private final UnaryCallable<DeleteAwsNodePoolRequest, Operation> deleteAwsNodePoolCallable;
   private final OperationCallable<DeleteAwsNodePoolRequest, Empty, OperationMetadata>
       deleteAwsNodePoolOperationCallable;
+  private final UnaryCallable<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+      getAwsOpenIdConfigCallable;
+  private final UnaryCallable<GetAwsJsonWebKeysRequest, AwsJsonWebKeys> getAwsJsonWebKeysCallable;
   private final UnaryCallable<GetAwsServerConfigRequest, AwsServerConfig>
       getAwsServerConfigCallable;
 
@@ -315,6 +378,19 @@ protected GrpcAwsClustersStub(
                   return builder.build();
                 })
             .build();
+    GrpcCallSettings<GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+        generateAwsClusterAgentTokenTransportSettings =
+            GrpcCallSettings
+                .<GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+                    newBuilder()
+                .setMethodDescriptor(generateAwsClusterAgentTokenMethodDescriptor)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("aws_cluster", String.valueOf(request.getAwsCluster()));
+                      return builder.build();
+                    })
+                .build();
     GrpcCallSettings<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
         generateAwsAccessTokenTransportSettings =
             GrpcCallSettings
@@ -348,6 +424,17 @@ protected GrpcAwsClustersStub(
                   return builder.build();
                 })
             .build();
+    GrpcCallSettings<RollbackAwsNodePoolUpdateRequest, Operation>
+        rollbackAwsNodePoolUpdateTransportSettings =
+            GrpcCallSettings.<RollbackAwsNodePoolUpdateRequest, Operation>newBuilder()
+                .setMethodDescriptor(rollbackAwsNodePoolUpdateMethodDescriptor)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("name", String.valueOf(request.getName()));
+                      return builder.build();
+                    })
+                .build();
     GrpcCallSettings<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolTransportSettings =
         GrpcCallSettings.<GetAwsNodePoolRequest, AwsNodePool>newBuilder()
             .setMethodDescriptor(getAwsNodePoolMethodDescriptor)
@@ -379,6 +466,27 @@ protected GrpcAwsClustersStub(
                   return builder.build();
                 })
             .build();
+    GrpcCallSettings<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+        getAwsOpenIdConfigTransportSettings =
+            GrpcCallSettings.<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>newBuilder()
+                .setMethodDescriptor(getAwsOpenIdConfigMethodDescriptor)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("aws_cluster", String.valueOf(request.getAwsCluster()));
+                      return builder.build();
+                    })
+                .build();
+    GrpcCallSettings<GetAwsJsonWebKeysRequest, AwsJsonWebKeys> getAwsJsonWebKeysTransportSettings =
+        GrpcCallSettings.<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>newBuilder()
+            .setMethodDescriptor(getAwsJsonWebKeysMethodDescriptor)
+            .setParamsExtractor(
+                request -> {
+                  RequestParamsBuilder builder = RequestParamsBuilder.create();
+                  builder.add("aws_cluster", String.valueOf(request.getAwsCluster()));
+                  return builder.build();
+                })
+            .build();
     GrpcCallSettings<GetAwsServerConfigRequest, AwsServerConfig>
         getAwsServerConfigTransportSettings =
             GrpcCallSettings.<GetAwsServerConfigRequest, AwsServerConfig>newBuilder()
@@ -427,6 +535,11 @@ protected GrpcAwsClustersStub(
             settings.deleteAwsClusterOperationSettings(),
             clientContext,
             operationsStub);
+    this.generateAwsClusterAgentTokenCallable =
+        callableFactory.createUnaryCallable(
+            generateAwsClusterAgentTokenTransportSettings,
+            settings.generateAwsClusterAgentTokenSettings(),
+            clientContext);
     this.generateAwsAccessTokenCallable =
         callableFactory.createUnaryCallable(
             generateAwsAccessTokenTransportSettings,
@@ -454,6 +567,17 @@ protected GrpcAwsClustersStub(
             settings.updateAwsNodePoolOperationSettings(),
             clientContext,
             operationsStub);
+    this.rollbackAwsNodePoolUpdateCallable =
+        callableFactory.createUnaryCallable(
+            rollbackAwsNodePoolUpdateTransportSettings,
+            settings.rollbackAwsNodePoolUpdateSettings(),
+            clientContext);
+    this.rollbackAwsNodePoolUpdateOperationCallable =
+        callableFactory.createOperationCallable(
+            rollbackAwsNodePoolUpdateTransportSettings,
+            settings.rollbackAwsNodePoolUpdateOperationSettings(),
+            clientContext,
+            operationsStub);
     this.getAwsNodePoolCallable =
         callableFactory.createUnaryCallable(
             getAwsNodePoolTransportSettings, settings.getAwsNodePoolSettings(), clientContext);
@@ -474,6 +598,16 @@ protected GrpcAwsClustersStub(
             settings.deleteAwsNodePoolOperationSettings(),
             clientContext,
             operationsStub);
+    this.getAwsOpenIdConfigCallable =
+        callableFactory.createUnaryCallable(
+            getAwsOpenIdConfigTransportSettings,
+            settings.getAwsOpenIdConfigSettings(),
+            clientContext);
+    this.getAwsJsonWebKeysCallable =
+        callableFactory.createUnaryCallable(
+            getAwsJsonWebKeysTransportSettings,
+            settings.getAwsJsonWebKeysSettings(),
+            clientContext);
     this.getAwsServerConfigCallable =
         callableFactory.createUnaryCallable(
             getAwsServerConfigTransportSettings,
@@ -537,6 +671,12 @@ public UnaryCallable<DeleteAwsClusterRequest, Operation> deleteAwsClusterCallabl
     return deleteAwsClusterOperationCallable;
   }
 
+  @Override
+  public UnaryCallable<GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenCallable() {
+    return generateAwsClusterAgentTokenCallable;
+  }
+
   @Override
   public UnaryCallable<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
       generateAwsAccessTokenCallable() {
@@ -565,6 +705,18 @@ public UnaryCallable<UpdateAwsNodePoolRequest, Operation> updateAwsNodePoolCalla
     return updateAwsNodePoolOperationCallable;
   }
 
+  @Override
+  public UnaryCallable<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateCallable() {
+    return rollbackAwsNodePoolUpdateCallable;
+  }
+
+  @Override
+  public OperationCallable<RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+      rollbackAwsNodePoolUpdateOperationCallable() {
+    return rollbackAwsNodePoolUpdateOperationCallable;
+  }
+
   @Override
   public UnaryCallable<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolCallable() {
     return getAwsNodePoolCallable;
@@ -593,6 +745,16 @@ public UnaryCallable<DeleteAwsNodePoolRequest, Operation> deleteAwsNodePoolCalla
     return deleteAwsNodePoolOperationCallable;
   }
 
+  @Override
+  public UnaryCallable<GetAwsOpenIdConfigRequest, AwsOpenIdConfig> getAwsOpenIdConfigCallable() {
+    return getAwsOpenIdConfigCallable;
+  }
+
+  @Override
+  public UnaryCallable<GetAwsJsonWebKeysRequest, AwsJsonWebKeys> getAwsJsonWebKeysCallable() {
+    return getAwsJsonWebKeysCallable;
+  }
+
   @Override
   public UnaryCallable<GetAwsServerConfigRequest, AwsServerConfig> getAwsServerConfigCallable() {
     return getAwsServerConfigCallable;
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAzureClustersStub.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAzureClustersStub.java
index eb765f250812..6a34cdc8f896 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAzureClustersStub.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/GrpcAzureClustersStub.java
@@ -30,7 +30,9 @@
 import com.google.api.gax.rpc.UnaryCallable;
 import com.google.cloud.gkemulticloud.v1.AzureClient;
 import com.google.cloud.gkemulticloud.v1.AzureCluster;
+import com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys;
 import com.google.cloud.gkemulticloud.v1.AzureNodePool;
+import com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig;
 import com.google.cloud.gkemulticloud.v1.AzureServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAzureClientRequest;
 import com.google.cloud.gkemulticloud.v1.CreateAzureClusterRequest;
@@ -40,9 +42,13 @@
 import com.google.cloud.gkemulticloud.v1.DeleteAzureNodePoolRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenResponse;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GetAzureClientRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureNodePoolRequest;
+import com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureServerConfigRequest;
 import com.google.cloud.gkemulticloud.v1.ListAzureClientsRequest;
 import com.google.cloud.gkemulticloud.v1.ListAzureClientsResponse;
@@ -162,6 +168,22 @@ public class GrpcAzureClustersStub extends AzureClustersStub {
               .setResponseMarshaller(ProtoUtils.marshaller(Operation.getDefaultInstance()))
               .build();
 
+  private static final MethodDescriptor<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenMethodDescriptor =
+          MethodDescriptor
+              .<GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+                  newBuilder()
+              .setType(MethodDescriptor.MethodType.UNARY)
+              .setFullMethodName(
+                  "google.cloud.gkemulticloud.v1.AzureClusters/GenerateAzureClusterAgentToken")
+              .setRequestMarshaller(
+                  ProtoUtils.marshaller(GenerateAzureClusterAgentTokenRequest.getDefaultInstance()))
+              .setResponseMarshaller(
+                  ProtoUtils.marshaller(
+                      GenerateAzureClusterAgentTokenResponse.getDefaultInstance()))
+              .build();
+
   private static final MethodDescriptor<
           GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
       generateAzureAccessTokenMethodDescriptor =
@@ -227,6 +249,26 @@ public class GrpcAzureClustersStub extends AzureClustersStub {
               .setResponseMarshaller(ProtoUtils.marshaller(Operation.getDefaultInstance()))
               .build();
 
+  private static final MethodDescriptor<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigMethodDescriptor =
+          MethodDescriptor.<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>newBuilder()
+              .setType(MethodDescriptor.MethodType.UNARY)
+              .setFullMethodName("google.cloud.gkemulticloud.v1.AzureClusters/GetAzureOpenIdConfig")
+              .setRequestMarshaller(
+                  ProtoUtils.marshaller(GetAzureOpenIdConfigRequest.getDefaultInstance()))
+              .setResponseMarshaller(ProtoUtils.marshaller(AzureOpenIdConfig.getDefaultInstance()))
+              .build();
+
+  private static final MethodDescriptor<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+      getAzureJsonWebKeysMethodDescriptor =
+          MethodDescriptor.<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>newBuilder()
+              .setType(MethodDescriptor.MethodType.UNARY)
+              .setFullMethodName("google.cloud.gkemulticloud.v1.AzureClusters/GetAzureJsonWebKeys")
+              .setRequestMarshaller(
+                  ProtoUtils.marshaller(GetAzureJsonWebKeysRequest.getDefaultInstance()))
+              .setResponseMarshaller(ProtoUtils.marshaller(AzureJsonWebKeys.getDefaultInstance()))
+              .build();
+
   private static final MethodDescriptor<GetAzureServerConfigRequest, AzureServerConfig>
       getAzureServerConfigMethodDescriptor =
           MethodDescriptor.<GetAzureServerConfigRequest, AzureServerConfig>newBuilder()
@@ -262,6 +304,9 @@ public class GrpcAzureClustersStub extends AzureClustersStub {
   private final UnaryCallable<DeleteAzureClusterRequest, Operation> deleteAzureClusterCallable;
   private final OperationCallable<DeleteAzureClusterRequest, Empty, OperationMetadata>
       deleteAzureClusterOperationCallable;
+  private final UnaryCallable<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenCallable;
   private final UnaryCallable<GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
       generateAzureAccessTokenCallable;
   private final UnaryCallable<CreateAzureNodePoolRequest, Operation> createAzureNodePoolCallable;
@@ -278,6 +323,10 @@ public class GrpcAzureClustersStub extends AzureClustersStub {
   private final UnaryCallable<DeleteAzureNodePoolRequest, Operation> deleteAzureNodePoolCallable;
   private final OperationCallable<DeleteAzureNodePoolRequest, Empty, OperationMetadata>
       deleteAzureNodePoolOperationCallable;
+  private final UnaryCallable<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigCallable;
+  private final UnaryCallable<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+      getAzureJsonWebKeysCallable;
   private final UnaryCallable<GetAzureServerConfigRequest, AzureServerConfig>
       getAzureServerConfigCallable;
 
@@ -416,6 +465,19 @@ protected GrpcAzureClustersStub(
                   return builder.build();
                 })
             .build();
+    GrpcCallSettings<GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+        generateAzureClusterAgentTokenTransportSettings =
+            GrpcCallSettings
+                .<GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+                    newBuilder()
+                .setMethodDescriptor(generateAzureClusterAgentTokenMethodDescriptor)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("azure_cluster", String.valueOf(request.getAzureCluster()));
+                      return builder.build();
+                    })
+                .build();
     GrpcCallSettings<GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
         generateAzureAccessTokenTransportSettings =
             GrpcCallSettings
@@ -480,6 +542,28 @@ protected GrpcAzureClustersStub(
                   return builder.build();
                 })
             .build();
+    GrpcCallSettings<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+        getAzureOpenIdConfigTransportSettings =
+            GrpcCallSettings.<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>newBuilder()
+                .setMethodDescriptor(getAzureOpenIdConfigMethodDescriptor)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("azure_cluster", String.valueOf(request.getAzureCluster()));
+                      return builder.build();
+                    })
+                .build();
+    GrpcCallSettings<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+        getAzureJsonWebKeysTransportSettings =
+            GrpcCallSettings.<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>newBuilder()
+                .setMethodDescriptor(getAzureJsonWebKeysMethodDescriptor)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("azure_cluster", String.valueOf(request.getAzureCluster()));
+                      return builder.build();
+                    })
+                .build();
     GrpcCallSettings<GetAzureServerConfigRequest, AzureServerConfig>
         getAzureServerConfigTransportSettings =
             GrpcCallSettings.<GetAzureServerConfigRequest, AzureServerConfig>newBuilder()
@@ -569,6 +653,11 @@ protected GrpcAzureClustersStub(
             settings.deleteAzureClusterOperationSettings(),
             clientContext,
             operationsStub);
+    this.generateAzureClusterAgentTokenCallable =
+        callableFactory.createUnaryCallable(
+            generateAzureClusterAgentTokenTransportSettings,
+            settings.generateAzureClusterAgentTokenSettings(),
+            clientContext);
     this.generateAzureAccessTokenCallable =
         callableFactory.createUnaryCallable(
             generateAzureAccessTokenTransportSettings,
@@ -620,6 +709,16 @@ protected GrpcAzureClustersStub(
             settings.deleteAzureNodePoolOperationSettings(),
             clientContext,
             operationsStub);
+    this.getAzureOpenIdConfigCallable =
+        callableFactory.createUnaryCallable(
+            getAzureOpenIdConfigTransportSettings,
+            settings.getAzureOpenIdConfigSettings(),
+            clientContext);
+    this.getAzureJsonWebKeysCallable =
+        callableFactory.createUnaryCallable(
+            getAzureJsonWebKeysTransportSettings,
+            settings.getAzureJsonWebKeysSettings(),
+            clientContext);
     this.getAzureServerConfigCallable =
         callableFactory.createUnaryCallable(
             getAzureServerConfigTransportSettings,
@@ -723,6 +822,13 @@ public UnaryCallable<DeleteAzureClusterRequest, Operation> deleteAzureClusterCal
     return deleteAzureClusterOperationCallable;
   }
 
+  @Override
+  public UnaryCallable<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenCallable() {
+    return generateAzureClusterAgentTokenCallable;
+  }
+
   @Override
   public UnaryCallable<GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
       generateAzureAccessTokenCallable() {
@@ -779,6 +885,17 @@ public UnaryCallable<DeleteAzureNodePoolRequest, Operation> deleteAzureNodePoolC
     return deleteAzureNodePoolOperationCallable;
   }
 
+  @Override
+  public UnaryCallable<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigCallable() {
+    return getAzureOpenIdConfigCallable;
+  }
+
+  @Override
+  public UnaryCallable<GetAzureJsonWebKeysRequest, AzureJsonWebKeys> getAzureJsonWebKeysCallable() {
+    return getAzureJsonWebKeysCallable;
+  }
+
   @Override
   public UnaryCallable<GetAzureServerConfigRequest, AzureServerConfig>
       getAzureServerConfigCallable() {
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAttachedClustersStub.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAttachedClustersStub.java
index 40cf81ef696d..ec087c0ba8f5 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAttachedClustersStub.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAttachedClustersStub.java
@@ -39,6 +39,8 @@
 import com.google.cloud.gkemulticloud.v1.AttachedServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAttachedClusterRequest;
 import com.google.cloud.gkemulticloud.v1.DeleteAttachedClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestResponse;
 import com.google.cloud.gkemulticloud.v1.GetAttachedClusterRequest;
@@ -389,6 +391,8 @@ public class HttpJsonAttachedClustersStub extends AttachedClustersStub {
                                 fields, "attachedClusterId", request.getAttachedClusterId());
                             serializer.putQueryParam(
                                 fields, "platformVersion", request.getPlatformVersion());
+                            serializer.putQueryParam(
+                                fields, "proxyConfig", request.getProxyConfig());
                             return fields;
                           })
                       .setRequestBodyExtractor(request -> null)
@@ -402,6 +406,52 @@ public class HttpJsonAttachedClustersStub extends AttachedClustersStub {
                       .build())
               .build();
 
+  private static final ApiMethodDescriptor<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenMethodDescriptor =
+          ApiMethodDescriptor
+              .<GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+                  newBuilder()
+              .setFullMethodName(
+                  "google.cloud.gkemulticloud.v1.AttachedClusters/GenerateAttachedClusterAgentToken")
+              .setHttpMethod("POST")
+              .setType(ApiMethodDescriptor.MethodType.UNARY)
+              .setRequestFormatter(
+                  ProtoMessageRequestFormatter
+                      .<GenerateAttachedClusterAgentTokenRequest>newBuilder()
+                      .setPath(
+                          "/v1/{attachedCluster=projects/*/locations/*/attachedClusters/*}:generateAttachedClusterAgentToken",
+                          request -> {
+                            Map<String, String> fields = new HashMap<>();
+                            ProtoRestSerializer<GenerateAttachedClusterAgentTokenRequest>
+                                serializer = ProtoRestSerializer.create();
+                            serializer.putPathParam(
+                                fields, "attachedCluster", request.getAttachedCluster());
+                            return fields;
+                          })
+                      .setQueryParamsExtractor(
+                          request -> {
+                            Map<String, List<String>> fields = new HashMap<>();
+                            ProtoRestSerializer<GenerateAttachedClusterAgentTokenRequest>
+                                serializer = ProtoRestSerializer.create();
+                            return fields;
+                          })
+                      .setRequestBodyExtractor(
+                          request ->
+                              ProtoRestSerializer.create()
+                                  .toBody(
+                                      "*",
+                                      request.toBuilder().clearAttachedCluster().build(),
+                                      false))
+                      .build())
+              .setResponseParser(
+                  ProtoMessageResponseParser.<GenerateAttachedClusterAgentTokenResponse>newBuilder()
+                      .setDefaultInstance(
+                          GenerateAttachedClusterAgentTokenResponse.getDefaultInstance())
+                      .setDefaultTypeRegistry(typeRegistry)
+                      .build())
+              .build();
+
   private final UnaryCallable<CreateAttachedClusterRequest, Operation>
       createAttachedClusterCallable;
   private final OperationCallable<CreateAttachedClusterRequest, AttachedCluster, OperationMetadata>
@@ -430,6 +480,9 @@ public class HttpJsonAttachedClustersStub extends AttachedClustersStub {
           GenerateAttachedClusterInstallManifestRequest,
           GenerateAttachedClusterInstallManifestResponse>
       generateAttachedClusterInstallManifestCallable;
+  private final UnaryCallable<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenCallable;
 
   private final BackgroundResource backgroundResources;
   private final HttpJsonOperationsStub httpJsonOperationsStub;
@@ -605,6 +658,22 @@ protected HttpJsonAttachedClustersStub(
                       return builder.build();
                     })
                 .build();
+    HttpJsonCallSettings<
+            GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+        generateAttachedClusterAgentTokenTransportSettings =
+            HttpJsonCallSettings
+                .<GenerateAttachedClusterAgentTokenRequest,
+                    GenerateAttachedClusterAgentTokenResponse>
+                    newBuilder()
+                .setMethodDescriptor(generateAttachedClusterAgentTokenMethodDescriptor)
+                .setTypeRegistry(typeRegistry)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("attached_cluster", String.valueOf(request.getAttachedCluster()));
+                      return builder.build();
+                    })
+                .build();
 
     this.createAttachedClusterCallable =
         callableFactory.createUnaryCallable(
@@ -675,6 +744,11 @@ protected HttpJsonAttachedClustersStub(
             generateAttachedClusterInstallManifestTransportSettings,
             settings.generateAttachedClusterInstallManifestSettings(),
             clientContext);
+    this.generateAttachedClusterAgentTokenCallable =
+        callableFactory.createUnaryCallable(
+            generateAttachedClusterAgentTokenTransportSettings,
+            settings.generateAttachedClusterAgentTokenSettings(),
+            clientContext);
 
     this.backgroundResources =
         new BackgroundResourceAggregation(clientContext.getBackgroundResources());
@@ -691,6 +765,7 @@ public static List<ApiMethodDescriptor> getMethodDescriptors() {
     methodDescriptors.add(deleteAttachedClusterMethodDescriptor);
     methodDescriptors.add(getAttachedServerConfigMethodDescriptor);
     methodDescriptors.add(generateAttachedClusterInstallManifestMethodDescriptor);
+    methodDescriptors.add(generateAttachedClusterAgentTokenMethodDescriptor);
     return methodDescriptors;
   }
 
@@ -773,6 +848,13 @@ public UnaryCallable<DeleteAttachedClusterRequest, Operation> deleteAttachedClus
     return generateAttachedClusterInstallManifestCallable;
   }
 
+  @Override
+  public UnaryCallable<
+          GenerateAttachedClusterAgentTokenRequest, GenerateAttachedClusterAgentTokenResponse>
+      generateAttachedClusterAgentTokenCallable() {
+    return generateAttachedClusterAgentTokenCallable;
+  }
+
   @Override
   public final void close() {
     try {
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAwsClustersStub.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAwsClustersStub.java
index e62a6c8d5b9a..dcff1ee22126 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAwsClustersStub.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAwsClustersStub.java
@@ -37,7 +37,9 @@
 import com.google.api.gax.rpc.RequestParamsBuilder;
 import com.google.api.gax.rpc.UnaryCallable;
 import com.google.cloud.gkemulticloud.v1.AwsCluster;
+import com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys;
 import com.google.cloud.gkemulticloud.v1.AwsNodePool;
+import com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig;
 import com.google.cloud.gkemulticloud.v1.AwsServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAwsClusterRequest;
 import com.google.cloud.gkemulticloud.v1.CreateAwsNodePoolRequest;
@@ -45,14 +47,19 @@
 import com.google.cloud.gkemulticloud.v1.DeleteAwsNodePoolRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenResponse;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GetAwsClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest;
 import com.google.cloud.gkemulticloud.v1.GetAwsNodePoolRequest;
+import com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest;
 import com.google.cloud.gkemulticloud.v1.GetAwsServerConfigRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsClustersRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsClustersResponse;
 import com.google.cloud.gkemulticloud.v1.ListAwsNodePoolsRequest;
 import com.google.cloud.gkemulticloud.v1.ListAwsNodePoolsResponse;
 import com.google.cloud.gkemulticloud.v1.OperationMetadata;
+import com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest;
 import com.google.cloud.gkemulticloud.v1.UpdateAwsClusterRequest;
 import com.google.cloud.gkemulticloud.v1.UpdateAwsNodePoolRequest;
 import com.google.common.collect.ImmutableMap;
@@ -263,6 +270,8 @@ public class HttpJsonAwsClustersStub extends AwsClustersStub {
                             serializer.putQueryParam(
                                 fields, "allowMissing", request.getAllowMissing());
                             serializer.putQueryParam(fields, "etag", request.getEtag());
+                            serializer.putQueryParam(
+                                fields, "ignoreErrors", request.getIgnoreErrors());
                             serializer.putQueryParam(
                                 fields, "validateOnly", request.getValidateOnly());
                             return fields;
@@ -279,6 +288,47 @@ public class HttpJsonAwsClustersStub extends AwsClustersStub {
                       HttpJsonOperationSnapshot.create(response))
               .build();
 
+  private static final ApiMethodDescriptor<
+          GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenMethodDescriptor =
+          ApiMethodDescriptor
+              .<GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+                  newBuilder()
+              .setFullMethodName(
+                  "google.cloud.gkemulticloud.v1.AwsClusters/GenerateAwsClusterAgentToken")
+              .setHttpMethod("POST")
+              .setType(ApiMethodDescriptor.MethodType.UNARY)
+              .setRequestFormatter(
+                  ProtoMessageRequestFormatter.<GenerateAwsClusterAgentTokenRequest>newBuilder()
+                      .setPath(
+                          "/v1/{awsCluster=projects/*/locations/*/awsClusters/*}:generateAwsClusterAgentToken",
+                          request -> {
+                            Map<String, String> fields = new HashMap<>();
+                            ProtoRestSerializer<GenerateAwsClusterAgentTokenRequest> serializer =
+                                ProtoRestSerializer.create();
+                            serializer.putPathParam(fields, "awsCluster", request.getAwsCluster());
+                            return fields;
+                          })
+                      .setQueryParamsExtractor(
+                          request -> {
+                            Map<String, List<String>> fields = new HashMap<>();
+                            ProtoRestSerializer<GenerateAwsClusterAgentTokenRequest> serializer =
+                                ProtoRestSerializer.create();
+                            return fields;
+                          })
+                      .setRequestBodyExtractor(
+                          request ->
+                              ProtoRestSerializer.create()
+                                  .toBody(
+                                      "*", request.toBuilder().clearAwsCluster().build(), false))
+                      .build())
+              .setResponseParser(
+                  ProtoMessageResponseParser.<GenerateAwsClusterAgentTokenResponse>newBuilder()
+                      .setDefaultInstance(GenerateAwsClusterAgentTokenResponse.getDefaultInstance())
+                      .setDefaultTypeRegistry(typeRegistry)
+                      .build())
+              .build();
+
   private static final ApiMethodDescriptor<
           GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
       generateAwsAccessTokenMethodDescriptor =
@@ -400,6 +450,46 @@ public class HttpJsonAwsClustersStub extends AwsClustersStub {
                       HttpJsonOperationSnapshot.create(response))
               .build();
 
+  private static final ApiMethodDescriptor<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateMethodDescriptor =
+          ApiMethodDescriptor.<RollbackAwsNodePoolUpdateRequest, Operation>newBuilder()
+              .setFullMethodName(
+                  "google.cloud.gkemulticloud.v1.AwsClusters/RollbackAwsNodePoolUpdate")
+              .setHttpMethod("POST")
+              .setType(ApiMethodDescriptor.MethodType.UNARY)
+              .setRequestFormatter(
+                  ProtoMessageRequestFormatter.<RollbackAwsNodePoolUpdateRequest>newBuilder()
+                      .setPath(
+                          "/v1/{name=projects/*/locations/*/awsClusters/*/awsNodePools/*}:rollback",
+                          request -> {
+                            Map<String, String> fields = new HashMap<>();
+                            ProtoRestSerializer<RollbackAwsNodePoolUpdateRequest> serializer =
+                                ProtoRestSerializer.create();
+                            serializer.putPathParam(fields, "name", request.getName());
+                            return fields;
+                          })
+                      .setQueryParamsExtractor(
+                          request -> {
+                            Map<String, List<String>> fields = new HashMap<>();
+                            ProtoRestSerializer<RollbackAwsNodePoolUpdateRequest> serializer =
+                                ProtoRestSerializer.create();
+                            return fields;
+                          })
+                      .setRequestBodyExtractor(
+                          request ->
+                              ProtoRestSerializer.create()
+                                  .toBody("*", request.toBuilder().clearName().build(), false))
+                      .build())
+              .setResponseParser(
+                  ProtoMessageResponseParser.<Operation>newBuilder()
+                      .setDefaultInstance(Operation.getDefaultInstance())
+                      .setDefaultTypeRegistry(typeRegistry)
+                      .build())
+              .setOperationSnapshotFactory(
+                  (RollbackAwsNodePoolUpdateRequest request, Operation response) ->
+                      HttpJsonOperationSnapshot.create(response))
+              .build();
+
   private static final ApiMethodDescriptor<GetAwsNodePoolRequest, AwsNodePool>
       getAwsNodePoolMethodDescriptor =
           ApiMethodDescriptor.<GetAwsNodePoolRequest, AwsNodePool>newBuilder()
@@ -493,6 +583,8 @@ public class HttpJsonAwsClustersStub extends AwsClustersStub {
                             serializer.putQueryParam(
                                 fields, "allowMissing", request.getAllowMissing());
                             serializer.putQueryParam(fields, "etag", request.getEtag());
+                            serializer.putQueryParam(
+                                fields, "ignoreErrors", request.getIgnoreErrors());
                             serializer.putQueryParam(
                                 fields, "validateOnly", request.getValidateOnly());
                             return fields;
@@ -509,6 +601,72 @@ public class HttpJsonAwsClustersStub extends AwsClustersStub {
                       HttpJsonOperationSnapshot.create(response))
               .build();
 
+  private static final ApiMethodDescriptor<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+      getAwsOpenIdConfigMethodDescriptor =
+          ApiMethodDescriptor.<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>newBuilder()
+              .setFullMethodName("google.cloud.gkemulticloud.v1.AwsClusters/GetAwsOpenIdConfig")
+              .setHttpMethod("GET")
+              .setType(ApiMethodDescriptor.MethodType.UNARY)
+              .setRequestFormatter(
+                  ProtoMessageRequestFormatter.<GetAwsOpenIdConfigRequest>newBuilder()
+                      .setPath(
+                          "/v1/{awsCluster=projects/*/locations/*/awsClusters/*}/.well-known/openid-configuration",
+                          request -> {
+                            Map<String, String> fields = new HashMap<>();
+                            ProtoRestSerializer<GetAwsOpenIdConfigRequest> serializer =
+                                ProtoRestSerializer.create();
+                            serializer.putPathParam(fields, "awsCluster", request.getAwsCluster());
+                            return fields;
+                          })
+                      .setQueryParamsExtractor(
+                          request -> {
+                            Map<String, List<String>> fields = new HashMap<>();
+                            ProtoRestSerializer<GetAwsOpenIdConfigRequest> serializer =
+                                ProtoRestSerializer.create();
+                            return fields;
+                          })
+                      .setRequestBodyExtractor(request -> null)
+                      .build())
+              .setResponseParser(
+                  ProtoMessageResponseParser.<AwsOpenIdConfig>newBuilder()
+                      .setDefaultInstance(AwsOpenIdConfig.getDefaultInstance())
+                      .setDefaultTypeRegistry(typeRegistry)
+                      .build())
+              .build();
+
+  private static final ApiMethodDescriptor<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>
+      getAwsJsonWebKeysMethodDescriptor =
+          ApiMethodDescriptor.<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>newBuilder()
+              .setFullMethodName("google.cloud.gkemulticloud.v1.AwsClusters/GetAwsJsonWebKeys")
+              .setHttpMethod("GET")
+              .setType(ApiMethodDescriptor.MethodType.UNARY)
+              .setRequestFormatter(
+                  ProtoMessageRequestFormatter.<GetAwsJsonWebKeysRequest>newBuilder()
+                      .setPath(
+                          "/v1/{awsCluster=projects/*/locations/*/awsClusters/*}/jwks",
+                          request -> {
+                            Map<String, String> fields = new HashMap<>();
+                            ProtoRestSerializer<GetAwsJsonWebKeysRequest> serializer =
+                                ProtoRestSerializer.create();
+                            serializer.putPathParam(fields, "awsCluster", request.getAwsCluster());
+                            return fields;
+                          })
+                      .setQueryParamsExtractor(
+                          request -> {
+                            Map<String, List<String>> fields = new HashMap<>();
+                            ProtoRestSerializer<GetAwsJsonWebKeysRequest> serializer =
+                                ProtoRestSerializer.create();
+                            return fields;
+                          })
+                      .setRequestBodyExtractor(request -> null)
+                      .build())
+              .setResponseParser(
+                  ProtoMessageResponseParser.<AwsJsonWebKeys>newBuilder()
+                      .setDefaultInstance(AwsJsonWebKeys.getDefaultInstance())
+                      .setDefaultTypeRegistry(typeRegistry)
+                      .build())
+              .build();
+
   private static final ApiMethodDescriptor<GetAwsServerConfigRequest, AwsServerConfig>
       getAwsServerConfigMethodDescriptor =
           ApiMethodDescriptor.<GetAwsServerConfigRequest, AwsServerConfig>newBuilder()
@@ -556,6 +714,9 @@ public class HttpJsonAwsClustersStub extends AwsClustersStub {
   private final UnaryCallable<DeleteAwsClusterRequest, Operation> deleteAwsClusterCallable;
   private final OperationCallable<DeleteAwsClusterRequest, Empty, OperationMetadata>
       deleteAwsClusterOperationCallable;
+  private final UnaryCallable<
+          GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenCallable;
   private final UnaryCallable<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
       generateAwsAccessTokenCallable;
   private final UnaryCallable<CreateAwsNodePoolRequest, Operation> createAwsNodePoolCallable;
@@ -564,6 +725,10 @@ public class HttpJsonAwsClustersStub extends AwsClustersStub {
   private final UnaryCallable<UpdateAwsNodePoolRequest, Operation> updateAwsNodePoolCallable;
   private final OperationCallable<UpdateAwsNodePoolRequest, AwsNodePool, OperationMetadata>
       updateAwsNodePoolOperationCallable;
+  private final UnaryCallable<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateCallable;
+  private final OperationCallable<RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+      rollbackAwsNodePoolUpdateOperationCallable;
   private final UnaryCallable<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolCallable;
   private final UnaryCallable<ListAwsNodePoolsRequest, ListAwsNodePoolsResponse>
       listAwsNodePoolsCallable;
@@ -572,6 +737,9 @@ public class HttpJsonAwsClustersStub extends AwsClustersStub {
   private final UnaryCallable<DeleteAwsNodePoolRequest, Operation> deleteAwsNodePoolCallable;
   private final OperationCallable<DeleteAwsNodePoolRequest, Empty, OperationMetadata>
       deleteAwsNodePoolOperationCallable;
+  private final UnaryCallable<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+      getAwsOpenIdConfigCallable;
+  private final UnaryCallable<GetAwsJsonWebKeysRequest, AwsJsonWebKeys> getAwsJsonWebKeysCallable;
   private final UnaryCallable<GetAwsServerConfigRequest, AwsServerConfig>
       getAwsServerConfigCallable;
 
@@ -702,6 +870,20 @@ protected HttpJsonAwsClustersStub(
                   return builder.build();
                 })
             .build();
+    HttpJsonCallSettings<GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+        generateAwsClusterAgentTokenTransportSettings =
+            HttpJsonCallSettings
+                .<GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+                    newBuilder()
+                .setMethodDescriptor(generateAwsClusterAgentTokenMethodDescriptor)
+                .setTypeRegistry(typeRegistry)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("aws_cluster", String.valueOf(request.getAwsCluster()));
+                      return builder.build();
+                    })
+                .build();
     HttpJsonCallSettings<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
         generateAwsAccessTokenTransportSettings =
             HttpJsonCallSettings
@@ -738,6 +920,18 @@ protected HttpJsonAwsClustersStub(
                   return builder.build();
                 })
             .build();
+    HttpJsonCallSettings<RollbackAwsNodePoolUpdateRequest, Operation>
+        rollbackAwsNodePoolUpdateTransportSettings =
+            HttpJsonCallSettings.<RollbackAwsNodePoolUpdateRequest, Operation>newBuilder()
+                .setMethodDescriptor(rollbackAwsNodePoolUpdateMethodDescriptor)
+                .setTypeRegistry(typeRegistry)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("name", String.valueOf(request.getName()));
+                      return builder.build();
+                    })
+                .build();
     HttpJsonCallSettings<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolTransportSettings =
         HttpJsonCallSettings.<GetAwsNodePoolRequest, AwsNodePool>newBuilder()
             .setMethodDescriptor(getAwsNodePoolMethodDescriptor)
@@ -772,6 +966,30 @@ protected HttpJsonAwsClustersStub(
                   return builder.build();
                 })
             .build();
+    HttpJsonCallSettings<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>
+        getAwsOpenIdConfigTransportSettings =
+            HttpJsonCallSettings.<GetAwsOpenIdConfigRequest, AwsOpenIdConfig>newBuilder()
+                .setMethodDescriptor(getAwsOpenIdConfigMethodDescriptor)
+                .setTypeRegistry(typeRegistry)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("aws_cluster", String.valueOf(request.getAwsCluster()));
+                      return builder.build();
+                    })
+                .build();
+    HttpJsonCallSettings<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>
+        getAwsJsonWebKeysTransportSettings =
+            HttpJsonCallSettings.<GetAwsJsonWebKeysRequest, AwsJsonWebKeys>newBuilder()
+                .setMethodDescriptor(getAwsJsonWebKeysMethodDescriptor)
+                .setTypeRegistry(typeRegistry)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("aws_cluster", String.valueOf(request.getAwsCluster()));
+                      return builder.build();
+                    })
+                .build();
     HttpJsonCallSettings<GetAwsServerConfigRequest, AwsServerConfig>
         getAwsServerConfigTransportSettings =
             HttpJsonCallSettings.<GetAwsServerConfigRequest, AwsServerConfig>newBuilder()
@@ -821,6 +1039,11 @@ protected HttpJsonAwsClustersStub(
             settings.deleteAwsClusterOperationSettings(),
             clientContext,
             httpJsonOperationsStub);
+    this.generateAwsClusterAgentTokenCallable =
+        callableFactory.createUnaryCallable(
+            generateAwsClusterAgentTokenTransportSettings,
+            settings.generateAwsClusterAgentTokenSettings(),
+            clientContext);
     this.generateAwsAccessTokenCallable =
         callableFactory.createUnaryCallable(
             generateAwsAccessTokenTransportSettings,
@@ -848,6 +1071,17 @@ protected HttpJsonAwsClustersStub(
             settings.updateAwsNodePoolOperationSettings(),
             clientContext,
             httpJsonOperationsStub);
+    this.rollbackAwsNodePoolUpdateCallable =
+        callableFactory.createUnaryCallable(
+            rollbackAwsNodePoolUpdateTransportSettings,
+            settings.rollbackAwsNodePoolUpdateSettings(),
+            clientContext);
+    this.rollbackAwsNodePoolUpdateOperationCallable =
+        callableFactory.createOperationCallable(
+            rollbackAwsNodePoolUpdateTransportSettings,
+            settings.rollbackAwsNodePoolUpdateOperationSettings(),
+            clientContext,
+            httpJsonOperationsStub);
     this.getAwsNodePoolCallable =
         callableFactory.createUnaryCallable(
             getAwsNodePoolTransportSettings, settings.getAwsNodePoolSettings(), clientContext);
@@ -868,6 +1102,16 @@ protected HttpJsonAwsClustersStub(
             settings.deleteAwsNodePoolOperationSettings(),
             clientContext,
             httpJsonOperationsStub);
+    this.getAwsOpenIdConfigCallable =
+        callableFactory.createUnaryCallable(
+            getAwsOpenIdConfigTransportSettings,
+            settings.getAwsOpenIdConfigSettings(),
+            clientContext);
+    this.getAwsJsonWebKeysCallable =
+        callableFactory.createUnaryCallable(
+            getAwsJsonWebKeysTransportSettings,
+            settings.getAwsJsonWebKeysSettings(),
+            clientContext);
     this.getAwsServerConfigCallable =
         callableFactory.createUnaryCallable(
             getAwsServerConfigTransportSettings,
@@ -886,12 +1130,16 @@ public static List<ApiMethodDescriptor> getMethodDescriptors() {
     methodDescriptors.add(getAwsClusterMethodDescriptor);
     methodDescriptors.add(listAwsClustersMethodDescriptor);
     methodDescriptors.add(deleteAwsClusterMethodDescriptor);
+    methodDescriptors.add(generateAwsClusterAgentTokenMethodDescriptor);
     methodDescriptors.add(generateAwsAccessTokenMethodDescriptor);
     methodDescriptors.add(createAwsNodePoolMethodDescriptor);
     methodDescriptors.add(updateAwsNodePoolMethodDescriptor);
+    methodDescriptors.add(rollbackAwsNodePoolUpdateMethodDescriptor);
     methodDescriptors.add(getAwsNodePoolMethodDescriptor);
     methodDescriptors.add(listAwsNodePoolsMethodDescriptor);
     methodDescriptors.add(deleteAwsNodePoolMethodDescriptor);
+    methodDescriptors.add(getAwsOpenIdConfigMethodDescriptor);
+    methodDescriptors.add(getAwsJsonWebKeysMethodDescriptor);
     methodDescriptors.add(getAwsServerConfigMethodDescriptor);
     return methodDescriptors;
   }
@@ -949,6 +1197,12 @@ public UnaryCallable<DeleteAwsClusterRequest, Operation> deleteAwsClusterCallabl
     return deleteAwsClusterOperationCallable;
   }
 
+  @Override
+  public UnaryCallable<GenerateAwsClusterAgentTokenRequest, GenerateAwsClusterAgentTokenResponse>
+      generateAwsClusterAgentTokenCallable() {
+    return generateAwsClusterAgentTokenCallable;
+  }
+
   @Override
   public UnaryCallable<GenerateAwsAccessTokenRequest, GenerateAwsAccessTokenResponse>
       generateAwsAccessTokenCallable() {
@@ -977,6 +1231,18 @@ public UnaryCallable<UpdateAwsNodePoolRequest, Operation> updateAwsNodePoolCalla
     return updateAwsNodePoolOperationCallable;
   }
 
+  @Override
+  public UnaryCallable<RollbackAwsNodePoolUpdateRequest, Operation>
+      rollbackAwsNodePoolUpdateCallable() {
+    return rollbackAwsNodePoolUpdateCallable;
+  }
+
+  @Override
+  public OperationCallable<RollbackAwsNodePoolUpdateRequest, AwsNodePool, OperationMetadata>
+      rollbackAwsNodePoolUpdateOperationCallable() {
+    return rollbackAwsNodePoolUpdateOperationCallable;
+  }
+
   @Override
   public UnaryCallable<GetAwsNodePoolRequest, AwsNodePool> getAwsNodePoolCallable() {
     return getAwsNodePoolCallable;
@@ -1005,6 +1271,16 @@ public UnaryCallable<DeleteAwsNodePoolRequest, Operation> deleteAwsNodePoolCalla
     return deleteAwsNodePoolOperationCallable;
   }
 
+  @Override
+  public UnaryCallable<GetAwsOpenIdConfigRequest, AwsOpenIdConfig> getAwsOpenIdConfigCallable() {
+    return getAwsOpenIdConfigCallable;
+  }
+
+  @Override
+  public UnaryCallable<GetAwsJsonWebKeysRequest, AwsJsonWebKeys> getAwsJsonWebKeysCallable() {
+    return getAwsJsonWebKeysCallable;
+  }
+
   @Override
   public UnaryCallable<GetAwsServerConfigRequest, AwsServerConfig> getAwsServerConfigCallable() {
     return getAwsServerConfigCallable;
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAzureClustersStub.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAzureClustersStub.java
index 353e4ea38d59..970fd883a3c3 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAzureClustersStub.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/java/com/google/cloud/gkemulticloud/v1/stub/HttpJsonAzureClustersStub.java
@@ -39,7 +39,9 @@
 import com.google.api.gax.rpc.UnaryCallable;
 import com.google.cloud.gkemulticloud.v1.AzureClient;
 import com.google.cloud.gkemulticloud.v1.AzureCluster;
+import com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys;
 import com.google.cloud.gkemulticloud.v1.AzureNodePool;
+import com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig;
 import com.google.cloud.gkemulticloud.v1.AzureServerConfig;
 import com.google.cloud.gkemulticloud.v1.CreateAzureClientRequest;
 import com.google.cloud.gkemulticloud.v1.CreateAzureClusterRequest;
@@ -49,9 +51,13 @@
 import com.google.cloud.gkemulticloud.v1.DeleteAzureNodePoolRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenResponse;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse;
 import com.google.cloud.gkemulticloud.v1.GetAzureClientRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureClusterRequest;
+import com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureNodePoolRequest;
+import com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest;
 import com.google.cloud.gkemulticloud.v1.GetAzureServerConfigRequest;
 import com.google.cloud.gkemulticloud.v1.ListAzureClientsRequest;
 import com.google.cloud.gkemulticloud.v1.ListAzureClientsResponse;
@@ -438,6 +444,49 @@ public class HttpJsonAzureClustersStub extends AzureClustersStub {
                       HttpJsonOperationSnapshot.create(response))
               .build();
 
+  private static final ApiMethodDescriptor<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenMethodDescriptor =
+          ApiMethodDescriptor
+              .<GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+                  newBuilder()
+              .setFullMethodName(
+                  "google.cloud.gkemulticloud.v1.AzureClusters/GenerateAzureClusterAgentToken")
+              .setHttpMethod("POST")
+              .setType(ApiMethodDescriptor.MethodType.UNARY)
+              .setRequestFormatter(
+                  ProtoMessageRequestFormatter.<GenerateAzureClusterAgentTokenRequest>newBuilder()
+                      .setPath(
+                          "/v1/{azureCluster=projects/*/locations/*/azureClusters/*}:generateAzureClusterAgentToken",
+                          request -> {
+                            Map<String, String> fields = new HashMap<>();
+                            ProtoRestSerializer<GenerateAzureClusterAgentTokenRequest> serializer =
+                                ProtoRestSerializer.create();
+                            serializer.putPathParam(
+                                fields, "azureCluster", request.getAzureCluster());
+                            return fields;
+                          })
+                      .setQueryParamsExtractor(
+                          request -> {
+                            Map<String, List<String>> fields = new HashMap<>();
+                            ProtoRestSerializer<GenerateAzureClusterAgentTokenRequest> serializer =
+                                ProtoRestSerializer.create();
+                            return fields;
+                          })
+                      .setRequestBodyExtractor(
+                          request ->
+                              ProtoRestSerializer.create()
+                                  .toBody(
+                                      "*", request.toBuilder().clearAzureCluster().build(), false))
+                      .build())
+              .setResponseParser(
+                  ProtoMessageResponseParser.<GenerateAzureClusterAgentTokenResponse>newBuilder()
+                      .setDefaultInstance(
+                          GenerateAzureClusterAgentTokenResponse.getDefaultInstance())
+                      .setDefaultTypeRegistry(typeRegistry)
+                      .build())
+              .build();
+
   private static final ApiMethodDescriptor<
           GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
       generateAzureAccessTokenMethodDescriptor =
@@ -670,6 +719,74 @@ public class HttpJsonAzureClustersStub extends AzureClustersStub {
                       HttpJsonOperationSnapshot.create(response))
               .build();
 
+  private static final ApiMethodDescriptor<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigMethodDescriptor =
+          ApiMethodDescriptor.<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>newBuilder()
+              .setFullMethodName("google.cloud.gkemulticloud.v1.AzureClusters/GetAzureOpenIdConfig")
+              .setHttpMethod("GET")
+              .setType(ApiMethodDescriptor.MethodType.UNARY)
+              .setRequestFormatter(
+                  ProtoMessageRequestFormatter.<GetAzureOpenIdConfigRequest>newBuilder()
+                      .setPath(
+                          "/v1/{azureCluster=projects/*/locations/*/azureClusters/*}/.well-known/openid-configuration",
+                          request -> {
+                            Map<String, String> fields = new HashMap<>();
+                            ProtoRestSerializer<GetAzureOpenIdConfigRequest> serializer =
+                                ProtoRestSerializer.create();
+                            serializer.putPathParam(
+                                fields, "azureCluster", request.getAzureCluster());
+                            return fields;
+                          })
+                      .setQueryParamsExtractor(
+                          request -> {
+                            Map<String, List<String>> fields = new HashMap<>();
+                            ProtoRestSerializer<GetAzureOpenIdConfigRequest> serializer =
+                                ProtoRestSerializer.create();
+                            return fields;
+                          })
+                      .setRequestBodyExtractor(request -> null)
+                      .build())
+              .setResponseParser(
+                  ProtoMessageResponseParser.<AzureOpenIdConfig>newBuilder()
+                      .setDefaultInstance(AzureOpenIdConfig.getDefaultInstance())
+                      .setDefaultTypeRegistry(typeRegistry)
+                      .build())
+              .build();
+
+  private static final ApiMethodDescriptor<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+      getAzureJsonWebKeysMethodDescriptor =
+          ApiMethodDescriptor.<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>newBuilder()
+              .setFullMethodName("google.cloud.gkemulticloud.v1.AzureClusters/GetAzureJsonWebKeys")
+              .setHttpMethod("GET")
+              .setType(ApiMethodDescriptor.MethodType.UNARY)
+              .setRequestFormatter(
+                  ProtoMessageRequestFormatter.<GetAzureJsonWebKeysRequest>newBuilder()
+                      .setPath(
+                          "/v1/{azureCluster=projects/*/locations/*/azureClusters/*}/jwks",
+                          request -> {
+                            Map<String, String> fields = new HashMap<>();
+                            ProtoRestSerializer<GetAzureJsonWebKeysRequest> serializer =
+                                ProtoRestSerializer.create();
+                            serializer.putPathParam(
+                                fields, "azureCluster", request.getAzureCluster());
+                            return fields;
+                          })
+                      .setQueryParamsExtractor(
+                          request -> {
+                            Map<String, List<String>> fields = new HashMap<>();
+                            ProtoRestSerializer<GetAzureJsonWebKeysRequest> serializer =
+                                ProtoRestSerializer.create();
+                            return fields;
+                          })
+                      .setRequestBodyExtractor(request -> null)
+                      .build())
+              .setResponseParser(
+                  ProtoMessageResponseParser.<AzureJsonWebKeys>newBuilder()
+                      .setDefaultInstance(AzureJsonWebKeys.getDefaultInstance())
+                      .setDefaultTypeRegistry(typeRegistry)
+                      .build())
+              .build();
+
   private static final ApiMethodDescriptor<GetAzureServerConfigRequest, AzureServerConfig>
       getAzureServerConfigMethodDescriptor =
           ApiMethodDescriptor.<GetAzureServerConfigRequest, AzureServerConfig>newBuilder()
@@ -728,6 +845,9 @@ public class HttpJsonAzureClustersStub extends AzureClustersStub {
   private final UnaryCallable<DeleteAzureClusterRequest, Operation> deleteAzureClusterCallable;
   private final OperationCallable<DeleteAzureClusterRequest, Empty, OperationMetadata>
       deleteAzureClusterOperationCallable;
+  private final UnaryCallable<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenCallable;
   private final UnaryCallable<GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
       generateAzureAccessTokenCallable;
   private final UnaryCallable<CreateAzureNodePoolRequest, Operation> createAzureNodePoolCallable;
@@ -744,6 +864,10 @@ public class HttpJsonAzureClustersStub extends AzureClustersStub {
   private final UnaryCallable<DeleteAzureNodePoolRequest, Operation> deleteAzureNodePoolCallable;
   private final OperationCallable<DeleteAzureNodePoolRequest, Empty, OperationMetadata>
       deleteAzureNodePoolOperationCallable;
+  private final UnaryCallable<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigCallable;
+  private final UnaryCallable<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+      getAzureJsonWebKeysCallable;
   private final UnaryCallable<GetAzureServerConfigRequest, AzureServerConfig>
       getAzureServerConfigCallable;
 
@@ -919,6 +1043,21 @@ protected HttpJsonAzureClustersStub(
                   return builder.build();
                 })
             .build();
+    HttpJsonCallSettings<
+            GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+        generateAzureClusterAgentTokenTransportSettings =
+            HttpJsonCallSettings
+                .<GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+                    newBuilder()
+                .setMethodDescriptor(generateAzureClusterAgentTokenMethodDescriptor)
+                .setTypeRegistry(typeRegistry)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("azure_cluster", String.valueOf(request.getAzureCluster()));
+                      return builder.build();
+                    })
+                .build();
     HttpJsonCallSettings<GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
         generateAzureAccessTokenTransportSettings =
             HttpJsonCallSettings
@@ -993,6 +1132,30 @@ protected HttpJsonAzureClustersStub(
                       return builder.build();
                     })
                 .build();
+    HttpJsonCallSettings<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+        getAzureOpenIdConfigTransportSettings =
+            HttpJsonCallSettings.<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>newBuilder()
+                .setMethodDescriptor(getAzureOpenIdConfigMethodDescriptor)
+                .setTypeRegistry(typeRegistry)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("azure_cluster", String.valueOf(request.getAzureCluster()));
+                      return builder.build();
+                    })
+                .build();
+    HttpJsonCallSettings<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>
+        getAzureJsonWebKeysTransportSettings =
+            HttpJsonCallSettings.<GetAzureJsonWebKeysRequest, AzureJsonWebKeys>newBuilder()
+                .setMethodDescriptor(getAzureJsonWebKeysMethodDescriptor)
+                .setTypeRegistry(typeRegistry)
+                .setParamsExtractor(
+                    request -> {
+                      RequestParamsBuilder builder = RequestParamsBuilder.create();
+                      builder.add("azure_cluster", String.valueOf(request.getAzureCluster()));
+                      return builder.build();
+                    })
+                .build();
     HttpJsonCallSettings<GetAzureServerConfigRequest, AzureServerConfig>
         getAzureServerConfigTransportSettings =
             HttpJsonCallSettings.<GetAzureServerConfigRequest, AzureServerConfig>newBuilder()
@@ -1083,6 +1246,11 @@ protected HttpJsonAzureClustersStub(
             settings.deleteAzureClusterOperationSettings(),
             clientContext,
             httpJsonOperationsStub);
+    this.generateAzureClusterAgentTokenCallable =
+        callableFactory.createUnaryCallable(
+            generateAzureClusterAgentTokenTransportSettings,
+            settings.generateAzureClusterAgentTokenSettings(),
+            clientContext);
     this.generateAzureAccessTokenCallable =
         callableFactory.createUnaryCallable(
             generateAzureAccessTokenTransportSettings,
@@ -1134,6 +1302,16 @@ protected HttpJsonAzureClustersStub(
             settings.deleteAzureNodePoolOperationSettings(),
             clientContext,
             httpJsonOperationsStub);
+    this.getAzureOpenIdConfigCallable =
+        callableFactory.createUnaryCallable(
+            getAzureOpenIdConfigTransportSettings,
+            settings.getAzureOpenIdConfigSettings(),
+            clientContext);
+    this.getAzureJsonWebKeysCallable =
+        callableFactory.createUnaryCallable(
+            getAzureJsonWebKeysTransportSettings,
+            settings.getAzureJsonWebKeysSettings(),
+            clientContext);
     this.getAzureServerConfigCallable =
         callableFactory.createUnaryCallable(
             getAzureServerConfigTransportSettings,
@@ -1156,12 +1334,15 @@ public static List<ApiMethodDescriptor> getMethodDescriptors() {
     methodDescriptors.add(getAzureClusterMethodDescriptor);
     methodDescriptors.add(listAzureClustersMethodDescriptor);
     methodDescriptors.add(deleteAzureClusterMethodDescriptor);
+    methodDescriptors.add(generateAzureClusterAgentTokenMethodDescriptor);
     methodDescriptors.add(generateAzureAccessTokenMethodDescriptor);
     methodDescriptors.add(createAzureNodePoolMethodDescriptor);
     methodDescriptors.add(updateAzureNodePoolMethodDescriptor);
     methodDescriptors.add(getAzureNodePoolMethodDescriptor);
     methodDescriptors.add(listAzureNodePoolsMethodDescriptor);
     methodDescriptors.add(deleteAzureNodePoolMethodDescriptor);
+    methodDescriptors.add(getAzureOpenIdConfigMethodDescriptor);
+    methodDescriptors.add(getAzureJsonWebKeysMethodDescriptor);
     methodDescriptors.add(getAzureServerConfigMethodDescriptor);
     return methodDescriptors;
   }
@@ -1259,6 +1440,13 @@ public UnaryCallable<DeleteAzureClusterRequest, Operation> deleteAzureClusterCal
     return deleteAzureClusterOperationCallable;
   }
 
+  @Override
+  public UnaryCallable<
+          GenerateAzureClusterAgentTokenRequest, GenerateAzureClusterAgentTokenResponse>
+      generateAzureClusterAgentTokenCallable() {
+    return generateAzureClusterAgentTokenCallable;
+  }
+
   @Override
   public UnaryCallable<GenerateAzureAccessTokenRequest, GenerateAzureAccessTokenResponse>
       generateAzureAccessTokenCallable() {
@@ -1315,6 +1503,17 @@ public UnaryCallable<DeleteAzureNodePoolRequest, Operation> deleteAzureNodePoolC
     return deleteAzureNodePoolOperationCallable;
   }
 
+  @Override
+  public UnaryCallable<GetAzureOpenIdConfigRequest, AzureOpenIdConfig>
+      getAzureOpenIdConfigCallable() {
+    return getAzureOpenIdConfigCallable;
+  }
+
+  @Override
+  public UnaryCallable<GetAzureJsonWebKeysRequest, AzureJsonWebKeys> getAzureJsonWebKeysCallable() {
+    return getAzureJsonWebKeysCallable;
+  }
+
   @Override
   public UnaryCallable<GetAzureServerConfigRequest, AzureServerConfig>
       getAzureServerConfigCallable() {
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/resources/META-INF/native-image/com.google.cloud.gkemulticloud.v1/reflect-config.json b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/resources/META-INF/native-image/com.google.cloud.gkemulticloud.v1/reflect-config.json
index 2565597c8fb8..971fa565b242 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/resources/META-INF/native-image/com.google.cloud.gkemulticloud.v1/reflect-config.json
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/main/resources/META-INF/native-image/com.google.cloud.gkemulticloud.v1/reflect-config.json
@@ -422,6 +422,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AttachedClusterGroup",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AttachedClusterGroup$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.AttachedClusterUser",
     "queryAllDeclaredConstructors": true,
@@ -494,6 +512,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AttachedProxyConfig",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AttachedProxyConfig$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.AttachedServerConfig",
     "queryAllDeclaredConstructors": true,
@@ -593,6 +629,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AwsClusterGroup",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AwsClusterGroup$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.AwsClusterNetworking",
     "queryAllDeclaredConstructors": true,
@@ -710,6 +764,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfo",
     "queryAllDeclaredConstructors": true,
@@ -746,6 +818,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AwsNodeManagement",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AwsNodeManagement$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.AwsNodePool",
     "queryAllDeclaredConstructors": true,
@@ -809,6 +899,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.AwsProxyConfig",
     "queryAllDeclaredConstructors": true,
@@ -989,6 +1097,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AzureClusterGroup",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AzureClusterGroup$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.AzureClusterNetworking",
     "queryAllDeclaredConstructors": true,
@@ -1115,6 +1241,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfo",
     "queryAllDeclaredConstructors": true,
@@ -1151,6 +1295,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AzureNodeManagement",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AzureNodeManagement$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.AzureNodePool",
     "queryAllDeclaredConstructors": true,
@@ -1214,6 +1376,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.AzureProxyConfig",
     "queryAllDeclaredConstructors": true,
@@ -1286,6 +1466,33 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.BinaryAuthorization",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.BinaryAuthorization$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.BinaryAuthorization$EvaluationMode",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.CreateAttachedClusterRequest",
     "queryAllDeclaredConstructors": true,
@@ -1520,6 +1727,42 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestRequest",
     "queryAllDeclaredConstructors": true,
@@ -1592,6 +1835,42 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenRequest",
     "queryAllDeclaredConstructors": true,
@@ -1628,6 +1907,42 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.GetAttachedClusterRequest",
     "queryAllDeclaredConstructors": true,
@@ -1682,6 +1997,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.GetAwsNodePoolRequest",
     "queryAllDeclaredConstructors": true,
@@ -1700,6 +2033,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.GetAwsServerConfigRequest",
     "queryAllDeclaredConstructors": true,
@@ -1754,6 +2105,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.GetAzureNodePoolRequest",
     "queryAllDeclaredConstructors": true,
@@ -1772,6 +2141,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.GetAzureServerConfigRequest",
     "queryAllDeclaredConstructors": true,
@@ -1808,6 +2195,42 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.Jwk",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.Jwk$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.KubernetesSecret",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.KubernetesSecret$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.ListAttachedClustersRequest",
     "queryAllDeclaredConstructors": true,
@@ -2186,6 +2609,60 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.SpotConfig",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.SpotConfig$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.SurgeSettings",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.SurgeSettings$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.UpdateAttachedClusterRequest",
     "queryAllDeclaredConstructors": true,
@@ -2276,6 +2753,24 @@
     "allDeclaredClasses": true,
     "allPublicClasses": true
   },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.UpdateSettings",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.cloud.gkemulticloud.v1.UpdateSettings$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
   {
     "name": "com.google.cloud.gkemulticloud.v1.WorkloadIdentityConfig",
     "queryAllDeclaredConstructors": true,
@@ -3139,5 +3634,23 @@
     "allPublicMethods": true,
     "allDeclaredClasses": true,
     "allPublicClasses": true
+  },
+  {
+    "name": "com.google.type.Date",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
+  },
+  {
+    "name": "com.google.type.Date$Builder",
+    "queryAllDeclaredConstructors": true,
+    "queryAllPublicConstructors": true,
+    "queryAllDeclaredMethods": true,
+    "allPublicMethods": true,
+    "allDeclaredClasses": true,
+    "allPublicClasses": true
   }
 ]
\ No newline at end of file
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClientHttpJsonTest.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClientHttpJsonTest.java
index 405099c85e94..a420e921af7a 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClientHttpJsonTest.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClientHttpJsonTest.java
@@ -107,6 +107,8 @@ public void createAttachedClusterTest() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -180,6 +182,8 @@ public void createAttachedClusterTest2() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -253,6 +257,8 @@ public void updateAttachedClusterTest() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -284,6 +290,8 @@ public void updateAttachedClusterTest() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     FieldMask updateMask = FieldMask.newBuilder().build();
 
@@ -337,6 +345,8 @@ public void updateAttachedClusterExceptionTest() throws Exception {
               .addAllErrors(new ArrayList<AttachedClusterError>())
               .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
               .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+              .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+              .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
               .build();
       FieldMask updateMask = FieldMask.newBuilder().build();
       client.updateAttachedClusterAsync(attachedCluster, updateMask).get();
@@ -369,6 +379,8 @@ public void importAttachedClusterTest() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -440,6 +452,8 @@ public void importAttachedClusterTest2() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -511,6 +525,8 @@ public void getAttachedClusterTest() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -576,6 +592,8 @@ public void getAttachedClusterTest2() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -994,4 +1012,76 @@ public void generateAttachedClusterInstallManifestExceptionTest2() throws Except
       // Expected exception.
     }
   }
+
+  @Test
+  public void generateAttachedClusterAgentTokenTest() throws Exception {
+    GenerateAttachedClusterAgentTokenResponse expectedResponse =
+        GenerateAttachedClusterAgentTokenResponse.newBuilder()
+            .setAccessToken("accessToken-1042689291")
+            .setExpiresIn(-833810928)
+            .setTokenType("tokenType141498579")
+            .build();
+    mockService.addResponse(expectedResponse);
+
+    GenerateAttachedClusterAgentTokenRequest request =
+        GenerateAttachedClusterAgentTokenRequest.newBuilder()
+            .setAttachedCluster(
+                AttachedClusterName.of("[PROJECT]", "[LOCATION]", "[ATTACHED_CLUSTER]").toString())
+            .setSubjectToken("subjectToken-1519661011")
+            .setSubjectTokenType("subjectTokenType1839592711")
+            .setVersion("version351608024")
+            .setGrantType("grantType-1219832202")
+            .setAudience("audience975628804")
+            .setScope("scope109264468")
+            .setRequestedTokenType("requestedTokenType1733106949")
+            .setOptions("options-1249474914")
+            .build();
+
+    GenerateAttachedClusterAgentTokenResponse actualResponse =
+        client.generateAttachedClusterAgentToken(request);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void generateAttachedClusterAgentTokenExceptionTest() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      GenerateAttachedClusterAgentTokenRequest request =
+          GenerateAttachedClusterAgentTokenRequest.newBuilder()
+              .setAttachedCluster(
+                  AttachedClusterName.of("[PROJECT]", "[LOCATION]", "[ATTACHED_CLUSTER]")
+                      .toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      client.generateAttachedClusterAgentToken(request);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
 }
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClientTest.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClientTest.java
index 65f12f238425..d8785b6df333 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClientTest.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AttachedClustersClientTest.java
@@ -111,6 +111,8 @@ public void createAttachedClusterTest() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -184,6 +186,8 @@ public void createAttachedClusterTest2() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -257,6 +261,8 @@ public void updateAttachedClusterTest() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -327,6 +333,8 @@ public void importAttachedClusterTest() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -397,6 +405,8 @@ public void importAttachedClusterTest2() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -467,6 +477,8 @@ public void getAttachedClusterTest() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     mockAttachedClusters.addResponse(expectedResponse);
 
@@ -526,6 +538,8 @@ public void getAttachedClusterTest2() throws Exception {
             .addAllErrors(new ArrayList<AttachedClusterError>())
             .setAuthorization(AttachedClustersAuthorization.newBuilder().build())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setProxyConfig(AttachedProxyConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     mockAttachedClusters.addResponse(expectedResponse);
 
@@ -902,4 +916,79 @@ public void generateAttachedClusterInstallManifestExceptionTest2() throws Except
       // Expected exception.
     }
   }
+
+  @Test
+  public void generateAttachedClusterAgentTokenTest() throws Exception {
+    GenerateAttachedClusterAgentTokenResponse expectedResponse =
+        GenerateAttachedClusterAgentTokenResponse.newBuilder()
+            .setAccessToken("accessToken-1042689291")
+            .setExpiresIn(-833810928)
+            .setTokenType("tokenType141498579")
+            .build();
+    mockAttachedClusters.addResponse(expectedResponse);
+
+    GenerateAttachedClusterAgentTokenRequest request =
+        GenerateAttachedClusterAgentTokenRequest.newBuilder()
+            .setAttachedCluster(
+                AttachedClusterName.of("[PROJECT]", "[LOCATION]", "[ATTACHED_CLUSTER]").toString())
+            .setSubjectToken("subjectToken-1519661011")
+            .setSubjectTokenType("subjectTokenType1839592711")
+            .setVersion("version351608024")
+            .setGrantType("grantType-1219832202")
+            .setAudience("audience975628804")
+            .setScope("scope109264468")
+            .setRequestedTokenType("requestedTokenType1733106949")
+            .setOptions("options-1249474914")
+            .build();
+
+    GenerateAttachedClusterAgentTokenResponse actualResponse =
+        client.generateAttachedClusterAgentToken(request);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAttachedClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    GenerateAttachedClusterAgentTokenRequest actualRequest =
+        ((GenerateAttachedClusterAgentTokenRequest) actualRequests.get(0));
+
+    Assert.assertEquals(request.getAttachedCluster(), actualRequest.getAttachedCluster());
+    Assert.assertEquals(request.getSubjectToken(), actualRequest.getSubjectToken());
+    Assert.assertEquals(request.getSubjectTokenType(), actualRequest.getSubjectTokenType());
+    Assert.assertEquals(request.getVersion(), actualRequest.getVersion());
+    Assert.assertEquals(request.getGrantType(), actualRequest.getGrantType());
+    Assert.assertEquals(request.getAudience(), actualRequest.getAudience());
+    Assert.assertEquals(request.getScope(), actualRequest.getScope());
+    Assert.assertEquals(request.getRequestedTokenType(), actualRequest.getRequestedTokenType());
+    Assert.assertEquals(request.getOptions(), actualRequest.getOptions());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void generateAttachedClusterAgentTokenExceptionTest() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAttachedClusters.addException(exception);
+
+    try {
+      GenerateAttachedClusterAgentTokenRequest request =
+          GenerateAttachedClusterAgentTokenRequest.newBuilder()
+              .setAttachedCluster(
+                  AttachedClusterName.of("[PROJECT]", "[LOCATION]", "[ATTACHED_CLUSTER]")
+                      .toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      client.generateAttachedClusterAgentToken(request);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
 }
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AwsClustersClientHttpJsonTest.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AwsClustersClientHttpJsonTest.java
index 52c8cb7fbc7a..c6f50f8f4749 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AwsClustersClientHttpJsonTest.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AwsClustersClientHttpJsonTest.java
@@ -107,6 +107,7 @@ public void createAwsClusterTest() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -179,6 +180,7 @@ public void createAwsClusterTest2() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -251,6 +253,7 @@ public void updateAwsClusterTest() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -281,6 +284,7 @@ public void updateAwsClusterTest() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     FieldMask updateMask = FieldMask.newBuilder().build();
 
@@ -331,6 +335,7 @@ public void updateAwsClusterExceptionTest() throws Exception {
               .setLoggingConfig(LoggingConfig.newBuilder().build())
               .addAllErrors(new ArrayList<AwsClusterError>())
               .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+              .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
               .build();
       FieldMask updateMask = FieldMask.newBuilder().build();
       client.updateAwsClusterAsync(awsCluster, updateMask).get();
@@ -362,6 +367,7 @@ public void getAwsClusterTest() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -424,6 +430,7 @@ public void getAwsClusterTest2() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -653,6 +660,78 @@ public void deleteAwsClusterExceptionTest2() throws Exception {
     }
   }
 
+  @Test
+  public void generateAwsClusterAgentTokenTest() throws Exception {
+    GenerateAwsClusterAgentTokenResponse expectedResponse =
+        GenerateAwsClusterAgentTokenResponse.newBuilder()
+            .setAccessToken("accessToken-1042689291")
+            .setExpiresIn(-833810928)
+            .setTokenType("tokenType141498579")
+            .build();
+    mockService.addResponse(expectedResponse);
+
+    GenerateAwsClusterAgentTokenRequest request =
+        GenerateAwsClusterAgentTokenRequest.newBuilder()
+            .setAwsCluster(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+            .setSubjectToken("subjectToken-1519661011")
+            .setSubjectTokenType("subjectTokenType1839592711")
+            .setVersion("version351608024")
+            .setNodePoolId("nodePoolId1121557241")
+            .setGrantType("grantType-1219832202")
+            .setAudience("audience975628804")
+            .setScope("scope109264468")
+            .setRequestedTokenType("requestedTokenType1733106949")
+            .setOptions("options-1249474914")
+            .build();
+
+    GenerateAwsClusterAgentTokenResponse actualResponse =
+        client.generateAwsClusterAgentToken(request);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void generateAwsClusterAgentTokenExceptionTest() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      GenerateAwsClusterAgentTokenRequest request =
+          GenerateAwsClusterAgentTokenRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setNodePoolId("nodePoolId1121557241")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      client.generateAwsClusterAgentToken(request);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
   @Test
   public void generateAwsAccessTokenTest() throws Exception {
     GenerateAwsAccessTokenResponse expectedResponse =
@@ -724,6 +803,8 @@ public void createAwsNodePoolTest() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -792,6 +873,8 @@ public void createAwsNodePoolTest2() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -860,6 +943,8 @@ public void updateAwsNodePoolTest() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -886,6 +971,8 @@ public void updateAwsNodePoolTest() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     FieldMask updateMask = FieldMask.newBuilder().build();
 
@@ -932,6 +1019,8 @@ public void updateAwsNodePoolExceptionTest() throws Exception {
               .putAllAnnotations(new HashMap<String, String>())
               .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
               .addAllErrors(new ArrayList<AwsNodePoolError>())
+              .setManagement(AwsNodeManagement.newBuilder().build())
+              .setUpdateSettings(UpdateSettings.newBuilder().build())
               .build();
       FieldMask updateMask = FieldMask.newBuilder().build();
       client.updateAwsNodePoolAsync(awsNodePool, updateMask).get();
@@ -940,6 +1029,140 @@ public void updateAwsNodePoolExceptionTest() throws Exception {
     }
   }
 
+  @Test
+  public void rollbackAwsNodePoolUpdateTest() throws Exception {
+    AwsNodePool expectedResponse =
+        AwsNodePool.newBuilder()
+            .setName(
+                AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+                    .toString())
+            .setVersion("version351608024")
+            .setConfig(AwsNodeConfig.newBuilder().build())
+            .setAutoscaling(AwsNodePoolAutoscaling.newBuilder().build())
+            .setSubnetId("subnetId-2066159272")
+            .setUid("uid115792")
+            .setReconciling(true)
+            .setCreateTime(Timestamp.newBuilder().build())
+            .setUpdateTime(Timestamp.newBuilder().build())
+            .setEtag("etag3123477")
+            .putAllAnnotations(new HashMap<String, String>())
+            .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
+            .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
+            .build();
+    Operation resultOperation =
+        Operation.newBuilder()
+            .setName("rollbackAwsNodePoolUpdateTest")
+            .setDone(true)
+            .setResponse(Any.pack(expectedResponse))
+            .build();
+    mockService.addResponse(resultOperation);
+
+    AwsNodePoolName name =
+        AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]");
+
+    AwsNodePool actualResponse = client.rollbackAwsNodePoolUpdateAsync(name).get();
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void rollbackAwsNodePoolUpdateExceptionTest() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      AwsNodePoolName name =
+          AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]");
+      client.rollbackAwsNodePoolUpdateAsync(name).get();
+      Assert.fail("No exception raised");
+    } catch (ExecutionException e) {
+    }
+  }
+
+  @Test
+  public void rollbackAwsNodePoolUpdateTest2() throws Exception {
+    AwsNodePool expectedResponse =
+        AwsNodePool.newBuilder()
+            .setName(
+                AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+                    .toString())
+            .setVersion("version351608024")
+            .setConfig(AwsNodeConfig.newBuilder().build())
+            .setAutoscaling(AwsNodePoolAutoscaling.newBuilder().build())
+            .setSubnetId("subnetId-2066159272")
+            .setUid("uid115792")
+            .setReconciling(true)
+            .setCreateTime(Timestamp.newBuilder().build())
+            .setUpdateTime(Timestamp.newBuilder().build())
+            .setEtag("etag3123477")
+            .putAllAnnotations(new HashMap<String, String>())
+            .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
+            .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
+            .build();
+    Operation resultOperation =
+        Operation.newBuilder()
+            .setName("rollbackAwsNodePoolUpdateTest")
+            .setDone(true)
+            .setResponse(Any.pack(expectedResponse))
+            .build();
+    mockService.addResponse(resultOperation);
+
+    String name =
+        "projects/project-9334/locations/location-9334/awsClusters/awsCluster-9334/awsNodePools/awsNodePool-9334";
+
+    AwsNodePool actualResponse = client.rollbackAwsNodePoolUpdateAsync(name).get();
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void rollbackAwsNodePoolUpdateExceptionTest2() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      String name =
+          "projects/project-9334/locations/location-9334/awsClusters/awsCluster-9334/awsNodePools/awsNodePool-9334";
+      client.rollbackAwsNodePoolUpdateAsync(name).get();
+      Assert.fail("No exception raised");
+    } catch (ExecutionException e) {
+    }
+  }
+
   @Test
   public void getAwsNodePoolTest() throws Exception {
     AwsNodePool expectedResponse =
@@ -959,6 +1182,8 @@ public void getAwsNodePoolTest() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -1019,6 +1244,8 @@ public void getAwsNodePoolTest2() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -1254,6 +1481,112 @@ public void deleteAwsNodePoolExceptionTest2() throws Exception {
     }
   }
 
+  @Test
+  public void getAwsOpenIdConfigTest() throws Exception {
+    AwsOpenIdConfig expectedResponse =
+        AwsOpenIdConfig.newBuilder()
+            .setIssuer("issuer-1179159879")
+            .setJwksUri("jwksUri-1199660617")
+            .addAllResponseTypesSupported(new ArrayList<String>())
+            .addAllSubjectTypesSupported(new ArrayList<String>())
+            .addAllIdTokenSigningAlgValuesSupported(new ArrayList<String>())
+            .addAllClaimsSupported(new ArrayList<String>())
+            .addAllGrantTypes(new ArrayList<String>())
+            .build();
+    mockService.addResponse(expectedResponse);
+
+    GetAwsOpenIdConfigRequest request =
+        GetAwsOpenIdConfigRequest.newBuilder()
+            .setAwsCluster(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+            .build();
+
+    AwsOpenIdConfig actualResponse = client.getAwsOpenIdConfig(request);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void getAwsOpenIdConfigExceptionTest() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      GetAwsOpenIdConfigRequest request =
+          GetAwsOpenIdConfigRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .build();
+      client.getAwsOpenIdConfig(request);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
+  @Test
+  public void getAwsJsonWebKeysTest() throws Exception {
+    AwsJsonWebKeys expectedResponse =
+        AwsJsonWebKeys.newBuilder().addAllKeys(new ArrayList<Jwk>()).build();
+    mockService.addResponse(expectedResponse);
+
+    GetAwsJsonWebKeysRequest request =
+        GetAwsJsonWebKeysRequest.newBuilder()
+            .setAwsCluster(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+            .build();
+
+    AwsJsonWebKeys actualResponse = client.getAwsJsonWebKeys(request);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void getAwsJsonWebKeysExceptionTest() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      GetAwsJsonWebKeysRequest request =
+          GetAwsJsonWebKeysRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .build();
+      client.getAwsJsonWebKeys(request);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
   @Test
   public void getAwsServerConfigTest() throws Exception {
     AwsServerConfig expectedResponse =
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AwsClustersClientTest.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AwsClustersClientTest.java
index 38c63b3c110c..b9c08cd58262 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AwsClustersClientTest.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AwsClustersClientTest.java
@@ -111,6 +111,7 @@ public void createAwsClusterTest() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -182,6 +183,7 @@ public void createAwsClusterTest2() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -253,6 +255,7 @@ public void updateAwsClusterTest() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -320,6 +323,7 @@ public void getAwsClusterTest() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     mockAwsClusters.addResponse(expectedResponse);
 
@@ -376,6 +380,7 @@ public void getAwsClusterTest2() throws Exception {
             .setLoggingConfig(LoggingConfig.newBuilder().build())
             .addAllErrors(new ArrayList<AwsClusterError>())
             .setMonitoringConfig(MonitoringConfig.newBuilder().build())
+            .setBinaryAuthorization(BinaryAuthorization.newBuilder().build())
             .build();
     mockAwsClusters.addResponse(expectedResponse);
 
@@ -581,6 +586,82 @@ public void deleteAwsClusterExceptionTest2() throws Exception {
     }
   }
 
+  @Test
+  public void generateAwsClusterAgentTokenTest() throws Exception {
+    GenerateAwsClusterAgentTokenResponse expectedResponse =
+        GenerateAwsClusterAgentTokenResponse.newBuilder()
+            .setAccessToken("accessToken-1042689291")
+            .setExpiresIn(-833810928)
+            .setTokenType("tokenType141498579")
+            .build();
+    mockAwsClusters.addResponse(expectedResponse);
+
+    GenerateAwsClusterAgentTokenRequest request =
+        GenerateAwsClusterAgentTokenRequest.newBuilder()
+            .setAwsCluster(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+            .setSubjectToken("subjectToken-1519661011")
+            .setSubjectTokenType("subjectTokenType1839592711")
+            .setVersion("version351608024")
+            .setNodePoolId("nodePoolId1121557241")
+            .setGrantType("grantType-1219832202")
+            .setAudience("audience975628804")
+            .setScope("scope109264468")
+            .setRequestedTokenType("requestedTokenType1733106949")
+            .setOptions("options-1249474914")
+            .build();
+
+    GenerateAwsClusterAgentTokenResponse actualResponse =
+        client.generateAwsClusterAgentToken(request);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAwsClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    GenerateAwsClusterAgentTokenRequest actualRequest =
+        ((GenerateAwsClusterAgentTokenRequest) actualRequests.get(0));
+
+    Assert.assertEquals(request.getAwsCluster(), actualRequest.getAwsCluster());
+    Assert.assertEquals(request.getSubjectToken(), actualRequest.getSubjectToken());
+    Assert.assertEquals(request.getSubjectTokenType(), actualRequest.getSubjectTokenType());
+    Assert.assertEquals(request.getVersion(), actualRequest.getVersion());
+    Assert.assertEquals(request.getNodePoolId(), actualRequest.getNodePoolId());
+    Assert.assertEquals(request.getGrantType(), actualRequest.getGrantType());
+    Assert.assertEquals(request.getAudience(), actualRequest.getAudience());
+    Assert.assertEquals(request.getScope(), actualRequest.getScope());
+    Assert.assertEquals(request.getRequestedTokenType(), actualRequest.getRequestedTokenType());
+    Assert.assertEquals(request.getOptions(), actualRequest.getOptions());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void generateAwsClusterAgentTokenExceptionTest() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAwsClusters.addException(exception);
+
+    try {
+      GenerateAwsClusterAgentTokenRequest request =
+          GenerateAwsClusterAgentTokenRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setNodePoolId("nodePoolId1121557241")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      client.generateAwsClusterAgentToken(request);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
   @Test
   public void generateAwsAccessTokenTest() throws Exception {
     GenerateAwsAccessTokenResponse expectedResponse =
@@ -647,6 +728,8 @@ public void createAwsNodePoolTest() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -714,6 +797,8 @@ public void createAwsNodePoolTest2() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -781,6 +866,8 @@ public void updateAwsNodePoolTest() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -825,6 +912,134 @@ public void updateAwsNodePoolExceptionTest() throws Exception {
     }
   }
 
+  @Test
+  public void rollbackAwsNodePoolUpdateTest() throws Exception {
+    AwsNodePool expectedResponse =
+        AwsNodePool.newBuilder()
+            .setName(
+                AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+                    .toString())
+            .setVersion("version351608024")
+            .setConfig(AwsNodeConfig.newBuilder().build())
+            .setAutoscaling(AwsNodePoolAutoscaling.newBuilder().build())
+            .setSubnetId("subnetId-2066159272")
+            .setUid("uid115792")
+            .setReconciling(true)
+            .setCreateTime(Timestamp.newBuilder().build())
+            .setUpdateTime(Timestamp.newBuilder().build())
+            .setEtag("etag3123477")
+            .putAllAnnotations(new HashMap<String, String>())
+            .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
+            .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
+            .build();
+    Operation resultOperation =
+        Operation.newBuilder()
+            .setName("rollbackAwsNodePoolUpdateTest")
+            .setDone(true)
+            .setResponse(Any.pack(expectedResponse))
+            .build();
+    mockAwsClusters.addResponse(resultOperation);
+
+    AwsNodePoolName name =
+        AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]");
+
+    AwsNodePool actualResponse = client.rollbackAwsNodePoolUpdateAsync(name).get();
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAwsClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    RollbackAwsNodePoolUpdateRequest actualRequest =
+        ((RollbackAwsNodePoolUpdateRequest) actualRequests.get(0));
+
+    Assert.assertEquals(name.toString(), actualRequest.getName());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void rollbackAwsNodePoolUpdateExceptionTest() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAwsClusters.addException(exception);
+
+    try {
+      AwsNodePoolName name =
+          AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]");
+      client.rollbackAwsNodePoolUpdateAsync(name).get();
+      Assert.fail("No exception raised");
+    } catch (ExecutionException e) {
+      Assert.assertEquals(InvalidArgumentException.class, e.getCause().getClass());
+      InvalidArgumentException apiException = ((InvalidArgumentException) e.getCause());
+      Assert.assertEquals(StatusCode.Code.INVALID_ARGUMENT, apiException.getStatusCode().getCode());
+    }
+  }
+
+  @Test
+  public void rollbackAwsNodePoolUpdateTest2() throws Exception {
+    AwsNodePool expectedResponse =
+        AwsNodePool.newBuilder()
+            .setName(
+                AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+                    .toString())
+            .setVersion("version351608024")
+            .setConfig(AwsNodeConfig.newBuilder().build())
+            .setAutoscaling(AwsNodePoolAutoscaling.newBuilder().build())
+            .setSubnetId("subnetId-2066159272")
+            .setUid("uid115792")
+            .setReconciling(true)
+            .setCreateTime(Timestamp.newBuilder().build())
+            .setUpdateTime(Timestamp.newBuilder().build())
+            .setEtag("etag3123477")
+            .putAllAnnotations(new HashMap<String, String>())
+            .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
+            .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
+            .build();
+    Operation resultOperation =
+        Operation.newBuilder()
+            .setName("rollbackAwsNodePoolUpdateTest")
+            .setDone(true)
+            .setResponse(Any.pack(expectedResponse))
+            .build();
+    mockAwsClusters.addResponse(resultOperation);
+
+    String name = "name3373707";
+
+    AwsNodePool actualResponse = client.rollbackAwsNodePoolUpdateAsync(name).get();
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAwsClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    RollbackAwsNodePoolUpdateRequest actualRequest =
+        ((RollbackAwsNodePoolUpdateRequest) actualRequests.get(0));
+
+    Assert.assertEquals(name, actualRequest.getName());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void rollbackAwsNodePoolUpdateExceptionTest2() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAwsClusters.addException(exception);
+
+    try {
+      String name = "name3373707";
+      client.rollbackAwsNodePoolUpdateAsync(name).get();
+      Assert.fail("No exception raised");
+    } catch (ExecutionException e) {
+      Assert.assertEquals(InvalidArgumentException.class, e.getCause().getClass());
+      InvalidArgumentException apiException = ((InvalidArgumentException) e.getCause());
+      Assert.assertEquals(StatusCode.Code.INVALID_ARGUMENT, apiException.getStatusCode().getCode());
+    }
+  }
+
   @Test
   public void getAwsNodePoolTest() throws Exception {
     AwsNodePool expectedResponse =
@@ -844,6 +1059,8 @@ public void getAwsNodePoolTest() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     mockAwsClusters.addResponse(expectedResponse);
 
@@ -898,6 +1115,8 @@ public void getAwsNodePoolTest2() throws Exception {
             .putAllAnnotations(new HashMap<String, String>())
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .addAllErrors(new ArrayList<AwsNodePoolError>())
+            .setManagement(AwsNodeManagement.newBuilder().build())
+            .setUpdateSettings(UpdateSettings.newBuilder().build())
             .build();
     mockAwsClusters.addResponse(expectedResponse);
 
@@ -1105,6 +1324,100 @@ public void deleteAwsNodePoolExceptionTest2() throws Exception {
     }
   }
 
+  @Test
+  public void getAwsOpenIdConfigTest() throws Exception {
+    AwsOpenIdConfig expectedResponse =
+        AwsOpenIdConfig.newBuilder()
+            .setIssuer("issuer-1179159879")
+            .setJwksUri("jwksUri-1199660617")
+            .addAllResponseTypesSupported(new ArrayList<String>())
+            .addAllSubjectTypesSupported(new ArrayList<String>())
+            .addAllIdTokenSigningAlgValuesSupported(new ArrayList<String>())
+            .addAllClaimsSupported(new ArrayList<String>())
+            .addAllGrantTypes(new ArrayList<String>())
+            .build();
+    mockAwsClusters.addResponse(expectedResponse);
+
+    GetAwsOpenIdConfigRequest request =
+        GetAwsOpenIdConfigRequest.newBuilder()
+            .setAwsCluster(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+            .build();
+
+    AwsOpenIdConfig actualResponse = client.getAwsOpenIdConfig(request);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAwsClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    GetAwsOpenIdConfigRequest actualRequest = ((GetAwsOpenIdConfigRequest) actualRequests.get(0));
+
+    Assert.assertEquals(request.getAwsCluster(), actualRequest.getAwsCluster());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void getAwsOpenIdConfigExceptionTest() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAwsClusters.addException(exception);
+
+    try {
+      GetAwsOpenIdConfigRequest request =
+          GetAwsOpenIdConfigRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .build();
+      client.getAwsOpenIdConfig(request);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
+  @Test
+  public void getAwsJsonWebKeysTest() throws Exception {
+    AwsJsonWebKeys expectedResponse =
+        AwsJsonWebKeys.newBuilder().addAllKeys(new ArrayList<Jwk>()).build();
+    mockAwsClusters.addResponse(expectedResponse);
+
+    GetAwsJsonWebKeysRequest request =
+        GetAwsJsonWebKeysRequest.newBuilder()
+            .setAwsCluster(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+            .build();
+
+    AwsJsonWebKeys actualResponse = client.getAwsJsonWebKeys(request);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAwsClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    GetAwsJsonWebKeysRequest actualRequest = ((GetAwsJsonWebKeysRequest) actualRequests.get(0));
+
+    Assert.assertEquals(request.getAwsCluster(), actualRequest.getAwsCluster());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void getAwsJsonWebKeysExceptionTest() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAwsClusters.addException(exception);
+
+    try {
+      GetAwsJsonWebKeysRequest request =
+          GetAwsJsonWebKeysRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .build();
+      client.getAwsJsonWebKeys(request);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
   @Test
   public void getAwsServerConfigTest() throws Exception {
     AwsServerConfig expectedResponse =
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AzureClustersClientHttpJsonTest.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AzureClustersClientHttpJsonTest.java
index b4defb4bef1a..3c454a4c85d3 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AzureClustersClientHttpJsonTest.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AzureClustersClientHttpJsonTest.java
@@ -1100,6 +1100,79 @@ public void deleteAzureClusterExceptionTest2() throws Exception {
     }
   }
 
+  @Test
+  public void generateAzureClusterAgentTokenTest() throws Exception {
+    GenerateAzureClusterAgentTokenResponse expectedResponse =
+        GenerateAzureClusterAgentTokenResponse.newBuilder()
+            .setAccessToken("accessToken-1042689291")
+            .setExpiresIn(-833810928)
+            .setTokenType("tokenType141498579")
+            .build();
+    mockService.addResponse(expectedResponse);
+
+    GenerateAzureClusterAgentTokenRequest request =
+        GenerateAzureClusterAgentTokenRequest.newBuilder()
+            .setAzureCluster(
+                AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+            .setSubjectToken("subjectToken-1519661011")
+            .setSubjectTokenType("subjectTokenType1839592711")
+            .setVersion("version351608024")
+            .setNodePoolId("nodePoolId1121557241")
+            .setGrantType("grantType-1219832202")
+            .setAudience("audience975628804")
+            .setScope("scope109264468")
+            .setRequestedTokenType("requestedTokenType1733106949")
+            .setOptions("options-1249474914")
+            .build();
+
+    GenerateAzureClusterAgentTokenResponse actualResponse =
+        client.generateAzureClusterAgentToken(request);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void generateAzureClusterAgentTokenExceptionTest() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      GenerateAzureClusterAgentTokenRequest request =
+          GenerateAzureClusterAgentTokenRequest.newBuilder()
+              .setAzureCluster(
+                  AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setNodePoolId("nodePoolId1121557241")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      client.generateAzureClusterAgentToken(request);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
   @Test
   public void generateAzureAccessTokenTest() throws Exception {
     GenerateAzureAccessTokenResponse expectedResponse =
@@ -1174,6 +1247,7 @@ public void createAzureNodePoolTest() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -1244,6 +1318,7 @@ public void createAzureNodePoolTest2() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -1315,6 +1390,7 @@ public void updateAzureNodePoolTest() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -1343,6 +1419,7 @@ public void updateAzureNodePoolTest() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     FieldMask updateMask = FieldMask.newBuilder().build();
 
@@ -1391,6 +1468,7 @@ public void updateAzureNodePoolExceptionTest() throws Exception {
               .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
               .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
               .addAllErrors(new ArrayList<AzureNodePoolError>())
+              .setManagement(AzureNodeManagement.newBuilder().build())
               .build();
       FieldMask updateMask = FieldMask.newBuilder().build();
       client.updateAzureNodePoolAsync(azureNodePool, updateMask).get();
@@ -1420,6 +1498,7 @@ public void getAzureNodePoolTest() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -1482,6 +1561,7 @@ public void getAzureNodePoolTest2() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -1718,6 +1798,198 @@ public void deleteAzureNodePoolExceptionTest2() throws Exception {
     }
   }
 
+  @Test
+  public void getAzureOpenIdConfigTest() throws Exception {
+    AzureOpenIdConfig expectedResponse =
+        AzureOpenIdConfig.newBuilder()
+            .setIssuer("issuer-1179159879")
+            .setJwksUri("jwksUri-1199660617")
+            .addAllResponseTypesSupported(new ArrayList<String>())
+            .addAllSubjectTypesSupported(new ArrayList<String>())
+            .addAllIdTokenSigningAlgValuesSupported(new ArrayList<String>())
+            .addAllClaimsSupported(new ArrayList<String>())
+            .addAllGrantTypes(new ArrayList<String>())
+            .build();
+    mockService.addResponse(expectedResponse);
+
+    AzureClusterName azureCluster =
+        AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+
+    AzureOpenIdConfig actualResponse = client.getAzureOpenIdConfig(azureCluster);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void getAzureOpenIdConfigExceptionTest() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      AzureClusterName azureCluster =
+          AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+      client.getAzureOpenIdConfig(azureCluster);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
+  @Test
+  public void getAzureOpenIdConfigTest2() throws Exception {
+    AzureOpenIdConfig expectedResponse =
+        AzureOpenIdConfig.newBuilder()
+            .setIssuer("issuer-1179159879")
+            .setJwksUri("jwksUri-1199660617")
+            .addAllResponseTypesSupported(new ArrayList<String>())
+            .addAllSubjectTypesSupported(new ArrayList<String>())
+            .addAllIdTokenSigningAlgValuesSupported(new ArrayList<String>())
+            .addAllClaimsSupported(new ArrayList<String>())
+            .addAllGrantTypes(new ArrayList<String>())
+            .build();
+    mockService.addResponse(expectedResponse);
+
+    String azureCluster =
+        "projects/project-3970/locations/location-3970/azureClusters/azureCluster-3970";
+
+    AzureOpenIdConfig actualResponse = client.getAzureOpenIdConfig(azureCluster);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void getAzureOpenIdConfigExceptionTest2() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      String azureCluster =
+          "projects/project-3970/locations/location-3970/azureClusters/azureCluster-3970";
+      client.getAzureOpenIdConfig(azureCluster);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
+  @Test
+  public void getAzureJsonWebKeysTest() throws Exception {
+    AzureJsonWebKeys expectedResponse =
+        AzureJsonWebKeys.newBuilder().addAllKeys(new ArrayList<Jwk>()).build();
+    mockService.addResponse(expectedResponse);
+
+    AzureClusterName azureCluster =
+        AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+
+    AzureJsonWebKeys actualResponse = client.getAzureJsonWebKeys(azureCluster);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void getAzureJsonWebKeysExceptionTest() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      AzureClusterName azureCluster =
+          AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+      client.getAzureJsonWebKeys(azureCluster);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
+  @Test
+  public void getAzureJsonWebKeysTest2() throws Exception {
+    AzureJsonWebKeys expectedResponse =
+        AzureJsonWebKeys.newBuilder().addAllKeys(new ArrayList<Jwk>()).build();
+    mockService.addResponse(expectedResponse);
+
+    String azureCluster =
+        "projects/project-3970/locations/location-3970/azureClusters/azureCluster-3970";
+
+    AzureJsonWebKeys actualResponse = client.getAzureJsonWebKeys(azureCluster);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<String> actualRequests = mockService.getRequestPaths();
+    Assert.assertEquals(1, actualRequests.size());
+
+    String apiClientHeaderKey =
+        mockService
+            .getRequestHeaders()
+            .get(ApiClientHeaderProvider.getDefaultApiClientHeaderKey())
+            .iterator()
+            .next();
+    Assert.assertTrue(
+        GaxHttpJsonProperties.getDefaultApiClientHeaderPattern()
+            .matcher(apiClientHeaderKey)
+            .matches());
+  }
+
+  @Test
+  public void getAzureJsonWebKeysExceptionTest2() throws Exception {
+    ApiException exception =
+        ApiExceptionFactory.createException(
+            new Exception(), FakeStatusCode.of(StatusCode.Code.INVALID_ARGUMENT), false);
+    mockService.addException(exception);
+
+    try {
+      String azureCluster =
+          "projects/project-3970/locations/location-3970/azureClusters/azureCluster-3970";
+      client.getAzureJsonWebKeys(azureCluster);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
   @Test
   public void getAzureServerConfigTest() throws Exception {
     AzureServerConfig expectedResponse =
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AzureClustersClientTest.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AzureClustersClientTest.java
index cbe1f661a679..652f9fc6ed78 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AzureClustersClientTest.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/AzureClustersClientTest.java
@@ -988,6 +988,83 @@ public void deleteAzureClusterExceptionTest2() throws Exception {
     }
   }
 
+  @Test
+  public void generateAzureClusterAgentTokenTest() throws Exception {
+    GenerateAzureClusterAgentTokenResponse expectedResponse =
+        GenerateAzureClusterAgentTokenResponse.newBuilder()
+            .setAccessToken("accessToken-1042689291")
+            .setExpiresIn(-833810928)
+            .setTokenType("tokenType141498579")
+            .build();
+    mockAzureClusters.addResponse(expectedResponse);
+
+    GenerateAzureClusterAgentTokenRequest request =
+        GenerateAzureClusterAgentTokenRequest.newBuilder()
+            .setAzureCluster(
+                AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+            .setSubjectToken("subjectToken-1519661011")
+            .setSubjectTokenType("subjectTokenType1839592711")
+            .setVersion("version351608024")
+            .setNodePoolId("nodePoolId1121557241")
+            .setGrantType("grantType-1219832202")
+            .setAudience("audience975628804")
+            .setScope("scope109264468")
+            .setRequestedTokenType("requestedTokenType1733106949")
+            .setOptions("options-1249474914")
+            .build();
+
+    GenerateAzureClusterAgentTokenResponse actualResponse =
+        client.generateAzureClusterAgentToken(request);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAzureClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    GenerateAzureClusterAgentTokenRequest actualRequest =
+        ((GenerateAzureClusterAgentTokenRequest) actualRequests.get(0));
+
+    Assert.assertEquals(request.getAzureCluster(), actualRequest.getAzureCluster());
+    Assert.assertEquals(request.getSubjectToken(), actualRequest.getSubjectToken());
+    Assert.assertEquals(request.getSubjectTokenType(), actualRequest.getSubjectTokenType());
+    Assert.assertEquals(request.getVersion(), actualRequest.getVersion());
+    Assert.assertEquals(request.getNodePoolId(), actualRequest.getNodePoolId());
+    Assert.assertEquals(request.getGrantType(), actualRequest.getGrantType());
+    Assert.assertEquals(request.getAudience(), actualRequest.getAudience());
+    Assert.assertEquals(request.getScope(), actualRequest.getScope());
+    Assert.assertEquals(request.getRequestedTokenType(), actualRequest.getRequestedTokenType());
+    Assert.assertEquals(request.getOptions(), actualRequest.getOptions());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void generateAzureClusterAgentTokenExceptionTest() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAzureClusters.addException(exception);
+
+    try {
+      GenerateAzureClusterAgentTokenRequest request =
+          GenerateAzureClusterAgentTokenRequest.newBuilder()
+              .setAzureCluster(
+                  AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setNodePoolId("nodePoolId1121557241")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      client.generateAzureClusterAgentToken(request);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
   @Test
   public void generateAzureAccessTokenTest() throws Exception {
     GenerateAzureAccessTokenResponse expectedResponse =
@@ -1057,6 +1134,7 @@ public void createAzureNodePoolTest() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -1126,6 +1204,7 @@ public void createAzureNodePoolTest2() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -1195,6 +1274,7 @@ public void updateAzureNodePoolTest() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     Operation resultOperation =
         Operation.newBuilder()
@@ -1260,6 +1340,7 @@ public void getAzureNodePoolTest() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     mockAzureClusters.addResponse(expectedResponse);
 
@@ -1316,6 +1397,7 @@ public void getAzureNodePoolTest2() throws Exception {
             .setMaxPodsConstraint(MaxPodsConstraint.newBuilder().build())
             .setAzureAvailabilityZone("azureAvailabilityZone-304222122")
             .addAllErrors(new ArrayList<AzureNodePoolError>())
+            .setManagement(AzureNodeManagement.newBuilder().build())
             .build();
     mockAzureClusters.addResponse(expectedResponse);
 
@@ -1523,6 +1605,172 @@ public void deleteAzureNodePoolExceptionTest2() throws Exception {
     }
   }
 
+  @Test
+  public void getAzureOpenIdConfigTest() throws Exception {
+    AzureOpenIdConfig expectedResponse =
+        AzureOpenIdConfig.newBuilder()
+            .setIssuer("issuer-1179159879")
+            .setJwksUri("jwksUri-1199660617")
+            .addAllResponseTypesSupported(new ArrayList<String>())
+            .addAllSubjectTypesSupported(new ArrayList<String>())
+            .addAllIdTokenSigningAlgValuesSupported(new ArrayList<String>())
+            .addAllClaimsSupported(new ArrayList<String>())
+            .addAllGrantTypes(new ArrayList<String>())
+            .build();
+    mockAzureClusters.addResponse(expectedResponse);
+
+    AzureClusterName azureCluster =
+        AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+
+    AzureOpenIdConfig actualResponse = client.getAzureOpenIdConfig(azureCluster);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAzureClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    GetAzureOpenIdConfigRequest actualRequest =
+        ((GetAzureOpenIdConfigRequest) actualRequests.get(0));
+
+    Assert.assertEquals(azureCluster.toString(), actualRequest.getAzureCluster());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void getAzureOpenIdConfigExceptionTest() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAzureClusters.addException(exception);
+
+    try {
+      AzureClusterName azureCluster =
+          AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+      client.getAzureOpenIdConfig(azureCluster);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
+  @Test
+  public void getAzureOpenIdConfigTest2() throws Exception {
+    AzureOpenIdConfig expectedResponse =
+        AzureOpenIdConfig.newBuilder()
+            .setIssuer("issuer-1179159879")
+            .setJwksUri("jwksUri-1199660617")
+            .addAllResponseTypesSupported(new ArrayList<String>())
+            .addAllSubjectTypesSupported(new ArrayList<String>())
+            .addAllIdTokenSigningAlgValuesSupported(new ArrayList<String>())
+            .addAllClaimsSupported(new ArrayList<String>())
+            .addAllGrantTypes(new ArrayList<String>())
+            .build();
+    mockAzureClusters.addResponse(expectedResponse);
+
+    String azureCluster = "azureCluster509696107";
+
+    AzureOpenIdConfig actualResponse = client.getAzureOpenIdConfig(azureCluster);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAzureClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    GetAzureOpenIdConfigRequest actualRequest =
+        ((GetAzureOpenIdConfigRequest) actualRequests.get(0));
+
+    Assert.assertEquals(azureCluster, actualRequest.getAzureCluster());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void getAzureOpenIdConfigExceptionTest2() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAzureClusters.addException(exception);
+
+    try {
+      String azureCluster = "azureCluster509696107";
+      client.getAzureOpenIdConfig(azureCluster);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
+  @Test
+  public void getAzureJsonWebKeysTest() throws Exception {
+    AzureJsonWebKeys expectedResponse =
+        AzureJsonWebKeys.newBuilder().addAllKeys(new ArrayList<Jwk>()).build();
+    mockAzureClusters.addResponse(expectedResponse);
+
+    AzureClusterName azureCluster =
+        AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+
+    AzureJsonWebKeys actualResponse = client.getAzureJsonWebKeys(azureCluster);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAzureClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    GetAzureJsonWebKeysRequest actualRequest = ((GetAzureJsonWebKeysRequest) actualRequests.get(0));
+
+    Assert.assertEquals(azureCluster.toString(), actualRequest.getAzureCluster());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void getAzureJsonWebKeysExceptionTest() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAzureClusters.addException(exception);
+
+    try {
+      AzureClusterName azureCluster =
+          AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+      client.getAzureJsonWebKeys(azureCluster);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
+  @Test
+  public void getAzureJsonWebKeysTest2() throws Exception {
+    AzureJsonWebKeys expectedResponse =
+        AzureJsonWebKeys.newBuilder().addAllKeys(new ArrayList<Jwk>()).build();
+    mockAzureClusters.addResponse(expectedResponse);
+
+    String azureCluster = "azureCluster509696107";
+
+    AzureJsonWebKeys actualResponse = client.getAzureJsonWebKeys(azureCluster);
+    Assert.assertEquals(expectedResponse, actualResponse);
+
+    List<AbstractMessage> actualRequests = mockAzureClusters.getRequests();
+    Assert.assertEquals(1, actualRequests.size());
+    GetAzureJsonWebKeysRequest actualRequest = ((GetAzureJsonWebKeysRequest) actualRequests.get(0));
+
+    Assert.assertEquals(azureCluster, actualRequest.getAzureCluster());
+    Assert.assertTrue(
+        channelProvider.isHeaderSent(
+            ApiClientHeaderProvider.getDefaultApiClientHeaderKey(),
+            GaxGrpcProperties.getDefaultApiClientHeaderPattern()));
+  }
+
+  @Test
+  public void getAzureJsonWebKeysExceptionTest2() throws Exception {
+    StatusRuntimeException exception = new StatusRuntimeException(io.grpc.Status.INVALID_ARGUMENT);
+    mockAzureClusters.addException(exception);
+
+    try {
+      String azureCluster = "azureCluster509696107";
+      client.getAzureJsonWebKeys(azureCluster);
+      Assert.fail("No exception raised");
+    } catch (InvalidArgumentException e) {
+      // Expected exception.
+    }
+  }
+
   @Test
   public void getAzureServerConfigTest() throws Exception {
     AzureServerConfig expectedResponse =
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAttachedClustersImpl.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAttachedClustersImpl.java
index 7fea50198328..6329318c3a94 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAttachedClustersImpl.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAttachedClustersImpl.java
@@ -229,4 +229,26 @@ public void generateAttachedClusterInstallManifest(
                   Exception.class.getName())));
     }
   }
+
+  @Override
+  public void generateAttachedClusterAgentToken(
+      GenerateAttachedClusterAgentTokenRequest request,
+      StreamObserver<GenerateAttachedClusterAgentTokenResponse> responseObserver) {
+    Object response = responses.poll();
+    if (response instanceof GenerateAttachedClusterAgentTokenResponse) {
+      requests.add(request);
+      responseObserver.onNext(((GenerateAttachedClusterAgentTokenResponse) response));
+      responseObserver.onCompleted();
+    } else if (response instanceof Exception) {
+      responseObserver.onError(((Exception) response));
+    } else {
+      responseObserver.onError(
+          new IllegalArgumentException(
+              String.format(
+                  "Unrecognized response type %s for method GenerateAttachedClusterAgentToken, expected %s or %s",
+                  response == null ? "null" : response.getClass().getName(),
+                  GenerateAttachedClusterAgentTokenResponse.class.getName(),
+                  Exception.class.getName())));
+    }
+  }
 }
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAwsClustersImpl.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAwsClustersImpl.java
index ec329ddf2f9c..030fd75341a0 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAwsClustersImpl.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAwsClustersImpl.java
@@ -164,6 +164,28 @@ public void deleteAwsCluster(
     }
   }
 
+  @Override
+  public void generateAwsClusterAgentToken(
+      GenerateAwsClusterAgentTokenRequest request,
+      StreamObserver<GenerateAwsClusterAgentTokenResponse> responseObserver) {
+    Object response = responses.poll();
+    if (response instanceof GenerateAwsClusterAgentTokenResponse) {
+      requests.add(request);
+      responseObserver.onNext(((GenerateAwsClusterAgentTokenResponse) response));
+      responseObserver.onCompleted();
+    } else if (response instanceof Exception) {
+      responseObserver.onError(((Exception) response));
+    } else {
+      responseObserver.onError(
+          new IllegalArgumentException(
+              String.format(
+                  "Unrecognized response type %s for method GenerateAwsClusterAgentToken, expected %s or %s",
+                  response == null ? "null" : response.getClass().getName(),
+                  GenerateAwsClusterAgentTokenResponse.class.getName(),
+                  Exception.class.getName())));
+    }
+  }
+
   @Override
   public void generateAwsAccessToken(
       GenerateAwsAccessTokenRequest request,
@@ -228,6 +250,27 @@ public void updateAwsNodePool(
     }
   }
 
+  @Override
+  public void rollbackAwsNodePoolUpdate(
+      RollbackAwsNodePoolUpdateRequest request, StreamObserver<Operation> responseObserver) {
+    Object response = responses.poll();
+    if (response instanceof Operation) {
+      requests.add(request);
+      responseObserver.onNext(((Operation) response));
+      responseObserver.onCompleted();
+    } else if (response instanceof Exception) {
+      responseObserver.onError(((Exception) response));
+    } else {
+      responseObserver.onError(
+          new IllegalArgumentException(
+              String.format(
+                  "Unrecognized response type %s for method RollbackAwsNodePoolUpdate, expected %s or %s",
+                  response == null ? "null" : response.getClass().getName(),
+                  Operation.class.getName(),
+                  Exception.class.getName())));
+    }
+  }
+
   @Override
   public void getAwsNodePool(
       GetAwsNodePoolRequest request, StreamObserver<AwsNodePool> responseObserver) {
@@ -291,6 +334,48 @@ public void deleteAwsNodePool(
     }
   }
 
+  @Override
+  public void getAwsOpenIdConfig(
+      GetAwsOpenIdConfigRequest request, StreamObserver<AwsOpenIdConfig> responseObserver) {
+    Object response = responses.poll();
+    if (response instanceof AwsOpenIdConfig) {
+      requests.add(request);
+      responseObserver.onNext(((AwsOpenIdConfig) response));
+      responseObserver.onCompleted();
+    } else if (response instanceof Exception) {
+      responseObserver.onError(((Exception) response));
+    } else {
+      responseObserver.onError(
+          new IllegalArgumentException(
+              String.format(
+                  "Unrecognized response type %s for method GetAwsOpenIdConfig, expected %s or %s",
+                  response == null ? "null" : response.getClass().getName(),
+                  AwsOpenIdConfig.class.getName(),
+                  Exception.class.getName())));
+    }
+  }
+
+  @Override
+  public void getAwsJsonWebKeys(
+      GetAwsJsonWebKeysRequest request, StreamObserver<AwsJsonWebKeys> responseObserver) {
+    Object response = responses.poll();
+    if (response instanceof AwsJsonWebKeys) {
+      requests.add(request);
+      responseObserver.onNext(((AwsJsonWebKeys) response));
+      responseObserver.onCompleted();
+    } else if (response instanceof Exception) {
+      responseObserver.onError(((Exception) response));
+    } else {
+      responseObserver.onError(
+          new IllegalArgumentException(
+              String.format(
+                  "Unrecognized response type %s for method GetAwsJsonWebKeys, expected %s or %s",
+                  response == null ? "null" : response.getClass().getName(),
+                  AwsJsonWebKeys.class.getName(),
+                  Exception.class.getName())));
+    }
+  }
+
   @Override
   public void getAwsServerConfig(
       GetAwsServerConfigRequest request, StreamObserver<AwsServerConfig> responseObserver) {
diff --git a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAzureClustersImpl.java b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAzureClustersImpl.java
index 1ddd15328264..9c760cc98e39 100644
--- a/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAzureClustersImpl.java
+++ b/java-gke-multi-cloud/google-cloud-gke-multi-cloud/src/test/java/com/google/cloud/gkemulticloud/v1/MockAzureClustersImpl.java
@@ -249,6 +249,28 @@ public void deleteAzureCluster(
     }
   }
 
+  @Override
+  public void generateAzureClusterAgentToken(
+      GenerateAzureClusterAgentTokenRequest request,
+      StreamObserver<GenerateAzureClusterAgentTokenResponse> responseObserver) {
+    Object response = responses.poll();
+    if (response instanceof GenerateAzureClusterAgentTokenResponse) {
+      requests.add(request);
+      responseObserver.onNext(((GenerateAzureClusterAgentTokenResponse) response));
+      responseObserver.onCompleted();
+    } else if (response instanceof Exception) {
+      responseObserver.onError(((Exception) response));
+    } else {
+      responseObserver.onError(
+          new IllegalArgumentException(
+              String.format(
+                  "Unrecognized response type %s for method GenerateAzureClusterAgentToken, expected %s or %s",
+                  response == null ? "null" : response.getClass().getName(),
+                  GenerateAzureClusterAgentTokenResponse.class.getName(),
+                  Exception.class.getName())));
+    }
+  }
+
   @Override
   public void generateAzureAccessToken(
       GenerateAzureAccessTokenRequest request,
@@ -377,6 +399,48 @@ public void deleteAzureNodePool(
     }
   }
 
+  @Override
+  public void getAzureOpenIdConfig(
+      GetAzureOpenIdConfigRequest request, StreamObserver<AzureOpenIdConfig> responseObserver) {
+    Object response = responses.poll();
+    if (response instanceof AzureOpenIdConfig) {
+      requests.add(request);
+      responseObserver.onNext(((AzureOpenIdConfig) response));
+      responseObserver.onCompleted();
+    } else if (response instanceof Exception) {
+      responseObserver.onError(((Exception) response));
+    } else {
+      responseObserver.onError(
+          new IllegalArgumentException(
+              String.format(
+                  "Unrecognized response type %s for method GetAzureOpenIdConfig, expected %s or %s",
+                  response == null ? "null" : response.getClass().getName(),
+                  AzureOpenIdConfig.class.getName(),
+                  Exception.class.getName())));
+    }
+  }
+
+  @Override
+  public void getAzureJsonWebKeys(
+      GetAzureJsonWebKeysRequest request, StreamObserver<AzureJsonWebKeys> responseObserver) {
+    Object response = responses.poll();
+    if (response instanceof AzureJsonWebKeys) {
+      requests.add(request);
+      responseObserver.onNext(((AzureJsonWebKeys) response));
+      responseObserver.onCompleted();
+    } else if (response instanceof Exception) {
+      responseObserver.onError(((Exception) response));
+    } else {
+      responseObserver.onError(
+          new IllegalArgumentException(
+              String.format(
+                  "Unrecognized response type %s for method GetAzureJsonWebKeys, expected %s or %s",
+                  response == null ? "null" : response.getClass().getName(),
+                  AzureJsonWebKeys.class.getName(),
+                  Exception.class.getName())));
+    }
+  }
+
   @Override
   public void getAzureServerConfig(
       GetAzureServerConfigRequest request, StreamObserver<AzureServerConfig> responseObserver) {
diff --git a/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersGrpc.java b/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersGrpc.java
index 61fa49f5b2c0..229c0c3a83a6 100644
--- a/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersGrpc.java
+++ b/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersGrpc.java
@@ -443,6 +443,62 @@ private AttachedClustersGrpc() {}
     return getGenerateAttachedClusterInstallManifestMethod;
   }
 
+  private static volatile io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest,
+          com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse>
+      getGenerateAttachedClusterAgentTokenMethod;
+
+  @io.grpc.stub.annotations.RpcMethod(
+      fullMethodName = SERVICE_NAME + '/' + "GenerateAttachedClusterAgentToken",
+      requestType =
+          com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest.class,
+      responseType =
+          com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse.class,
+      methodType = io.grpc.MethodDescriptor.MethodType.UNARY)
+  public static io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest,
+          com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse>
+      getGenerateAttachedClusterAgentTokenMethod() {
+    io.grpc.MethodDescriptor<
+            com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest,
+            com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse>
+        getGenerateAttachedClusterAgentTokenMethod;
+    if ((getGenerateAttachedClusterAgentTokenMethod =
+            AttachedClustersGrpc.getGenerateAttachedClusterAgentTokenMethod)
+        == null) {
+      synchronized (AttachedClustersGrpc.class) {
+        if ((getGenerateAttachedClusterAgentTokenMethod =
+                AttachedClustersGrpc.getGenerateAttachedClusterAgentTokenMethod)
+            == null) {
+          AttachedClustersGrpc.getGenerateAttachedClusterAgentTokenMethod =
+              getGenerateAttachedClusterAgentTokenMethod =
+                  io.grpc.MethodDescriptor
+                      .<com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest,
+                          com.google.cloud.gkemulticloud.v1
+                              .GenerateAttachedClusterAgentTokenResponse>
+                          newBuilder()
+                      .setType(io.grpc.MethodDescriptor.MethodType.UNARY)
+                      .setFullMethodName(
+                          generateFullMethodName(SERVICE_NAME, "GenerateAttachedClusterAgentToken"))
+                      .setSampledToLocalTracing(true)
+                      .setRequestMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1
+                                  .GenerateAttachedClusterAgentTokenRequest.getDefaultInstance()))
+                      .setResponseMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1
+                                  .GenerateAttachedClusterAgentTokenResponse.getDefaultInstance()))
+                      .setSchemaDescriptor(
+                          new AttachedClustersMethodDescriptorSupplier(
+                              "GenerateAttachedClusterAgentToken"))
+                      .build();
+        }
+      }
+    }
+    return getGenerateAttachedClusterAgentTokenMethod;
+  }
+
   /** Creates a new async stub that supports all call types for the service */
   public static AttachedClustersStub newStub(io.grpc.Channel channel) {
     io.grpc.stub.AbstractStub.StubFactory<AttachedClustersStub> factory =
@@ -631,6 +687,22 @@ default void generateAttachedClusterInstallManifest(
       io.grpc.stub.ServerCalls.asyncUnimplementedUnaryCall(
           getGenerateAttachedClusterInstallManifestMethod(), responseObserver);
     }
+
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    default void generateAttachedClusterAgentToken(
+        com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest request,
+        io.grpc.stub.StreamObserver<
+                com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse>
+            responseObserver) {
+      io.grpc.stub.ServerCalls.asyncUnimplementedUnaryCall(
+          getGenerateAttachedClusterAgentTokenMethod(), responseObserver);
+    }
   }
 
   /**
@@ -823,6 +895,24 @@ public void generateAttachedClusterInstallManifest(
           request,
           responseObserver);
     }
+
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    public void generateAttachedClusterAgentToken(
+        com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest request,
+        io.grpc.stub.StreamObserver<
+                com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse>
+            responseObserver) {
+      io.grpc.stub.ClientCalls.asyncUnaryCall(
+          getChannel().newCall(getGenerateAttachedClusterAgentTokenMethod(), getCallOptions()),
+          request,
+          responseObserver);
+    }
   }
 
   /**
@@ -974,6 +1064,20 @@ public com.google.cloud.gkemulticloud.v1.AttachedServerConfig getAttachedServerC
           getCallOptions(),
           request);
     }
+
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    public com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+        generateAttachedClusterAgentToken(
+            com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest request) {
+      return io.grpc.stub.ClientCalls.blockingUnaryCall(
+          getChannel(), getGenerateAttachedClusterAgentTokenMethod(), getCallOptions(), request);
+    }
   }
 
   /**
@@ -1133,6 +1237,22 @@ protected AttachedClustersFutureStub build(
           getChannel().newCall(getGenerateAttachedClusterInstallManifestMethod(), getCallOptions()),
           request);
     }
+
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    public com.google.common.util.concurrent.ListenableFuture<
+            com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse>
+        generateAttachedClusterAgentToken(
+            com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest request) {
+      return io.grpc.stub.ClientCalls.futureUnaryCall(
+          getChannel().newCall(getGenerateAttachedClusterAgentTokenMethod(), getCallOptions()),
+          request);
+    }
   }
 
   private static final int METHODID_CREATE_ATTACHED_CLUSTER = 0;
@@ -1143,6 +1263,7 @@ protected AttachedClustersFutureStub build(
   private static final int METHODID_DELETE_ATTACHED_CLUSTER = 5;
   private static final int METHODID_GET_ATTACHED_SERVER_CONFIG = 6;
   private static final int METHODID_GENERATE_ATTACHED_CLUSTER_INSTALL_MANIFEST = 7;
+  private static final int METHODID_GENERATE_ATTACHED_CLUSTER_AGENT_TOKEN = 8;
 
   private static final class MethodHandlers<Req, Resp>
       implements io.grpc.stub.ServerCalls.UnaryMethod<Req, Resp>,
@@ -1209,6 +1330,13 @@ public void invoke(Req request, io.grpc.stub.StreamObserver<Resp> responseObserv
                           .GenerateAttachedClusterInstallManifestResponse>)
                   responseObserver);
           break;
+        case METHODID_GENERATE_ATTACHED_CLUSTER_AGENT_TOKEN:
+          serviceImpl.generateAttachedClusterAgentToken(
+              (com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest) request,
+              (io.grpc.stub.StreamObserver<
+                      com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse>)
+                  responseObserver);
+          break;
         default:
           throw new AssertionError();
       }
@@ -1280,6 +1408,13 @@ public static final io.grpc.ServerServiceDefinition bindService(AsyncService ser
                     com.google.cloud.gkemulticloud.v1
                         .GenerateAttachedClusterInstallManifestResponse>(
                     service, METHODID_GENERATE_ATTACHED_CLUSTER_INSTALL_MANIFEST)))
+        .addMethod(
+            getGenerateAttachedClusterAgentTokenMethod(),
+            io.grpc.stub.ServerCalls.asyncUnaryCall(
+                new MethodHandlers<
+                    com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest,
+                    com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse>(
+                    service, METHODID_GENERATE_ATTACHED_CLUSTER_AGENT_TOKEN)))
         .build();
   }
 
@@ -1339,6 +1474,7 @@ public static io.grpc.ServiceDescriptor getServiceDescriptor() {
                       .addMethod(getDeleteAttachedClusterMethod())
                       .addMethod(getGetAttachedServerConfigMethod())
                       .addMethod(getGenerateAttachedClusterInstallManifestMethod())
+                      .addMethod(getGenerateAttachedClusterAgentTokenMethod())
                       .build();
         }
       }
diff --git a/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersGrpc.java b/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersGrpc.java
index d186be914c72..9a93cb6b2abe 100644
--- a/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersGrpc.java
+++ b/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClustersGrpc.java
@@ -266,6 +266,58 @@ private AwsClustersGrpc() {}
     return getDeleteAwsClusterMethod;
   }
 
+  private static volatile io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest,
+          com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse>
+      getGenerateAwsClusterAgentTokenMethod;
+
+  @io.grpc.stub.annotations.RpcMethod(
+      fullMethodName = SERVICE_NAME + '/' + "GenerateAwsClusterAgentToken",
+      requestType = com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest.class,
+      responseType = com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse.class,
+      methodType = io.grpc.MethodDescriptor.MethodType.UNARY)
+  public static io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest,
+          com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse>
+      getGenerateAwsClusterAgentTokenMethod() {
+    io.grpc.MethodDescriptor<
+            com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest,
+            com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse>
+        getGenerateAwsClusterAgentTokenMethod;
+    if ((getGenerateAwsClusterAgentTokenMethod =
+            AwsClustersGrpc.getGenerateAwsClusterAgentTokenMethod)
+        == null) {
+      synchronized (AwsClustersGrpc.class) {
+        if ((getGenerateAwsClusterAgentTokenMethod =
+                AwsClustersGrpc.getGenerateAwsClusterAgentTokenMethod)
+            == null) {
+          AwsClustersGrpc.getGenerateAwsClusterAgentTokenMethod =
+              getGenerateAwsClusterAgentTokenMethod =
+                  io.grpc.MethodDescriptor
+                      .<com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest,
+                          com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse>
+                          newBuilder()
+                      .setType(io.grpc.MethodDescriptor.MethodType.UNARY)
+                      .setFullMethodName(
+                          generateFullMethodName(SERVICE_NAME, "GenerateAwsClusterAgentToken"))
+                      .setSampledToLocalTracing(true)
+                      .setRequestMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest
+                                  .getDefaultInstance()))
+                      .setResponseMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse
+                                  .getDefaultInstance()))
+                      .setSchemaDescriptor(
+                          new AwsClustersMethodDescriptorSupplier("GenerateAwsClusterAgentToken"))
+                      .build();
+        }
+      }
+    }
+    return getGenerateAwsClusterAgentTokenMethod;
+  }
+
   private static volatile io.grpc.MethodDescriptor<
           com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenRequest,
           com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenResponse>
@@ -408,6 +460,56 @@ private AwsClustersGrpc() {}
     return getUpdateAwsNodePoolMethod;
   }
 
+  private static volatile io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest,
+          com.google.longrunning.Operation>
+      getRollbackAwsNodePoolUpdateMethod;
+
+  @io.grpc.stub.annotations.RpcMethod(
+      fullMethodName = SERVICE_NAME + '/' + "RollbackAwsNodePoolUpdate",
+      requestType = com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest.class,
+      responseType = com.google.longrunning.Operation.class,
+      methodType = io.grpc.MethodDescriptor.MethodType.UNARY)
+  public static io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest,
+          com.google.longrunning.Operation>
+      getRollbackAwsNodePoolUpdateMethod() {
+    io.grpc.MethodDescriptor<
+            com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest,
+            com.google.longrunning.Operation>
+        getRollbackAwsNodePoolUpdateMethod;
+    if ((getRollbackAwsNodePoolUpdateMethod = AwsClustersGrpc.getRollbackAwsNodePoolUpdateMethod)
+        == null) {
+      synchronized (AwsClustersGrpc.class) {
+        if ((getRollbackAwsNodePoolUpdateMethod =
+                AwsClustersGrpc.getRollbackAwsNodePoolUpdateMethod)
+            == null) {
+          AwsClustersGrpc.getRollbackAwsNodePoolUpdateMethod =
+              getRollbackAwsNodePoolUpdateMethod =
+                  io.grpc.MethodDescriptor
+                      .<com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest,
+                          com.google.longrunning.Operation>
+                          newBuilder()
+                      .setType(io.grpc.MethodDescriptor.MethodType.UNARY)
+                      .setFullMethodName(
+                          generateFullMethodName(SERVICE_NAME, "RollbackAwsNodePoolUpdate"))
+                      .setSampledToLocalTracing(true)
+                      .setRequestMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest
+                                  .getDefaultInstance()))
+                      .setResponseMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.longrunning.Operation.getDefaultInstance()))
+                      .setSchemaDescriptor(
+                          new AwsClustersMethodDescriptorSupplier("RollbackAwsNodePoolUpdate"))
+                      .build();
+        }
+      }
+    }
+    return getRollbackAwsNodePoolUpdateMethod;
+  }
+
   private static volatile io.grpc.MethodDescriptor<
           com.google.cloud.gkemulticloud.v1.GetAwsNodePoolRequest,
           com.google.cloud.gkemulticloud.v1.AwsNodePool>
@@ -547,6 +649,100 @@ private AwsClustersGrpc() {}
     return getDeleteAwsNodePoolMethod;
   }
 
+  private static volatile io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest,
+          com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig>
+      getGetAwsOpenIdConfigMethod;
+
+  @io.grpc.stub.annotations.RpcMethod(
+      fullMethodName = SERVICE_NAME + '/' + "GetAwsOpenIdConfig",
+      requestType = com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest.class,
+      responseType = com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig.class,
+      methodType = io.grpc.MethodDescriptor.MethodType.UNARY)
+  public static io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest,
+          com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig>
+      getGetAwsOpenIdConfigMethod() {
+    io.grpc.MethodDescriptor<
+            com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest,
+            com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig>
+        getGetAwsOpenIdConfigMethod;
+    if ((getGetAwsOpenIdConfigMethod = AwsClustersGrpc.getGetAwsOpenIdConfigMethod) == null) {
+      synchronized (AwsClustersGrpc.class) {
+        if ((getGetAwsOpenIdConfigMethod = AwsClustersGrpc.getGetAwsOpenIdConfigMethod) == null) {
+          AwsClustersGrpc.getGetAwsOpenIdConfigMethod =
+              getGetAwsOpenIdConfigMethod =
+                  io.grpc.MethodDescriptor
+                      .<com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest,
+                          com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig>
+                          newBuilder()
+                      .setType(io.grpc.MethodDescriptor.MethodType.UNARY)
+                      .setFullMethodName(generateFullMethodName(SERVICE_NAME, "GetAwsOpenIdConfig"))
+                      .setSampledToLocalTracing(true)
+                      .setRequestMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest
+                                  .getDefaultInstance()))
+                      .setResponseMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig
+                                  .getDefaultInstance()))
+                      .setSchemaDescriptor(
+                          new AwsClustersMethodDescriptorSupplier("GetAwsOpenIdConfig"))
+                      .build();
+        }
+      }
+    }
+    return getGetAwsOpenIdConfigMethod;
+  }
+
+  private static volatile io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest,
+          com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys>
+      getGetAwsJsonWebKeysMethod;
+
+  @io.grpc.stub.annotations.RpcMethod(
+      fullMethodName = SERVICE_NAME + '/' + "GetAwsJsonWebKeys",
+      requestType = com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest.class,
+      responseType = com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys.class,
+      methodType = io.grpc.MethodDescriptor.MethodType.UNARY)
+  public static io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest,
+          com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys>
+      getGetAwsJsonWebKeysMethod() {
+    io.grpc.MethodDescriptor<
+            com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest,
+            com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys>
+        getGetAwsJsonWebKeysMethod;
+    if ((getGetAwsJsonWebKeysMethod = AwsClustersGrpc.getGetAwsJsonWebKeysMethod) == null) {
+      synchronized (AwsClustersGrpc.class) {
+        if ((getGetAwsJsonWebKeysMethod = AwsClustersGrpc.getGetAwsJsonWebKeysMethod) == null) {
+          AwsClustersGrpc.getGetAwsJsonWebKeysMethod =
+              getGetAwsJsonWebKeysMethod =
+                  io.grpc.MethodDescriptor
+                      .<com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest,
+                          com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys>
+                          newBuilder()
+                      .setType(io.grpc.MethodDescriptor.MethodType.UNARY)
+                      .setFullMethodName(generateFullMethodName(SERVICE_NAME, "GetAwsJsonWebKeys"))
+                      .setSampledToLocalTracing(true)
+                      .setRequestMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest
+                                  .getDefaultInstance()))
+                      .setResponseMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys
+                                  .getDefaultInstance()))
+                      .setSchemaDescriptor(
+                          new AwsClustersMethodDescriptorSupplier("GetAwsJsonWebKeys"))
+                      .build();
+        }
+      }
+    }
+    return getGetAwsJsonWebKeysMethod;
+  }
+
   private static volatile io.grpc.MethodDescriptor<
           com.google.cloud.gkemulticloud.v1.GetAwsServerConfigRequest,
           com.google.cloud.gkemulticloud.v1.AwsServerConfig>
@@ -728,6 +924,22 @@ default void deleteAwsCluster(
           getDeleteAwsClusterMethod(), responseObserver);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    default void generateAwsClusterAgentToken(
+        com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest request,
+        io.grpc.stub.StreamObserver<
+                com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse>
+            responseObserver) {
+      io.grpc.stub.ServerCalls.asyncUnimplementedUnaryCall(
+          getGenerateAwsClusterAgentTokenMethod(), responseObserver);
+    }
+
     /**
      *
      *
@@ -777,6 +989,25 @@ default void updateAwsNodePool(
           getUpdateAwsNodePoolMethod(), responseObserver);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Rolls back a previously aborted or failed
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] update request.
+     * Makes no changes if the last update request successfully finished.
+     * If an update request is in progress, you cannot rollback the update.
+     * You must first cancel or let it finish unsuccessfully before you can
+     * rollback.
+     * </pre>
+     */
+    default void rollbackAwsNodePoolUpdate(
+        com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest request,
+        io.grpc.stub.StreamObserver<com.google.longrunning.Operation> responseObserver) {
+      io.grpc.stub.ServerCalls.asyncUnimplementedUnaryCall(
+          getRollbackAwsNodePoolUpdateMethod(), responseObserver);
+    }
+
     /**
      *
      *
@@ -828,6 +1059,41 @@ default void deleteAwsNodePool(
           getDeleteAwsNodePoolMethod(), responseObserver);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Gets the OIDC discovery document for the cluster.
+     * See the
+     * [OpenID Connect Discovery 1.0
+     * specification](https://openid.net/specs/openid-connect-discovery-1_0.html)
+     * for details.
+     * </pre>
+     */
+    default void getAwsOpenIdConfig(
+        com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest request,
+        io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig>
+            responseObserver) {
+      io.grpc.stub.ServerCalls.asyncUnimplementedUnaryCall(
+          getGetAwsOpenIdConfigMethod(), responseObserver);
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Gets the public component of the cluster signing keys in
+     * JSON Web Key format.
+     * </pre>
+     */
+    default void getAwsJsonWebKeys(
+        com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest request,
+        io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys>
+            responseObserver) {
+      io.grpc.stub.ServerCalls.asyncUnimplementedUnaryCall(
+          getGetAwsJsonWebKeysMethod(), responseObserver);
+    }
+
     /**
      *
      *
@@ -975,6 +1241,24 @@ public void deleteAwsCluster(
           responseObserver);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    public void generateAwsClusterAgentToken(
+        com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest request,
+        io.grpc.stub.StreamObserver<
+                com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse>
+            responseObserver) {
+      io.grpc.stub.ClientCalls.asyncUnaryCall(
+          getChannel().newCall(getGenerateAwsClusterAgentTokenMethod(), getCallOptions()),
+          request,
+          responseObserver);
+    }
+
     /**
      *
      *
@@ -1030,6 +1314,27 @@ public void updateAwsNodePool(
           responseObserver);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Rolls back a previously aborted or failed
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] update request.
+     * Makes no changes if the last update request successfully finished.
+     * If an update request is in progress, you cannot rollback the update.
+     * You must first cancel or let it finish unsuccessfully before you can
+     * rollback.
+     * </pre>
+     */
+    public void rollbackAwsNodePoolUpdate(
+        com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest request,
+        io.grpc.stub.StreamObserver<com.google.longrunning.Operation> responseObserver) {
+      io.grpc.stub.ClientCalls.asyncUnaryCall(
+          getChannel().newCall(getRollbackAwsNodePoolUpdateMethod(), getCallOptions()),
+          request,
+          responseObserver);
+    }
+
     /**
      *
      *
@@ -1087,6 +1392,45 @@ public void deleteAwsNodePool(
           responseObserver);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Gets the OIDC discovery document for the cluster.
+     * See the
+     * [OpenID Connect Discovery 1.0
+     * specification](https://openid.net/specs/openid-connect-discovery-1_0.html)
+     * for details.
+     * </pre>
+     */
+    public void getAwsOpenIdConfig(
+        com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest request,
+        io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig>
+            responseObserver) {
+      io.grpc.stub.ClientCalls.asyncUnaryCall(
+          getChannel().newCall(getGetAwsOpenIdConfigMethod(), getCallOptions()),
+          request,
+          responseObserver);
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Gets the public component of the cluster signing keys in
+     * JSON Web Key format.
+     * </pre>
+     */
+    public void getAwsJsonWebKeys(
+        com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest request,
+        io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys>
+            responseObserver) {
+      io.grpc.stub.ClientCalls.asyncUnaryCall(
+          getChannel().newCall(getGetAwsJsonWebKeysMethod(), getCallOptions()),
+          request,
+          responseObserver);
+    }
+
     /**
      *
      *
@@ -1203,6 +1547,20 @@ public com.google.longrunning.Operation deleteAwsCluster(
           getChannel(), getDeleteAwsClusterMethod(), getCallOptions(), request);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    public com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse
+        generateAwsClusterAgentToken(
+            com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest request) {
+      return io.grpc.stub.ClientCalls.blockingUnaryCall(
+          getChannel(), getGenerateAwsClusterAgentTokenMethod(), getCallOptions(), request);
+    }
+
     /**
      *
      *
@@ -1247,6 +1605,24 @@ public com.google.longrunning.Operation updateAwsNodePool(
           getChannel(), getUpdateAwsNodePoolMethod(), getCallOptions(), request);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Rolls back a previously aborted or failed
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] update request.
+     * Makes no changes if the last update request successfully finished.
+     * If an update request is in progress, you cannot rollback the update.
+     * You must first cancel or let it finish unsuccessfully before you can
+     * rollback.
+     * </pre>
+     */
+    public com.google.longrunning.Operation rollbackAwsNodePoolUpdate(
+        com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest request) {
+      return io.grpc.stub.ClientCalls.blockingUnaryCall(
+          getChannel(), getRollbackAwsNodePoolUpdateMethod(), getCallOptions(), request);
+    }
+
     /**
      *
      *
@@ -1293,6 +1669,37 @@ public com.google.longrunning.Operation deleteAwsNodePool(
           getChannel(), getDeleteAwsNodePoolMethod(), getCallOptions(), request);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Gets the OIDC discovery document for the cluster.
+     * See the
+     * [OpenID Connect Discovery 1.0
+     * specification](https://openid.net/specs/openid-connect-discovery-1_0.html)
+     * for details.
+     * </pre>
+     */
+    public com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig getAwsOpenIdConfig(
+        com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest request) {
+      return io.grpc.stub.ClientCalls.blockingUnaryCall(
+          getChannel(), getGetAwsOpenIdConfigMethod(), getCallOptions(), request);
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Gets the public component of the cluster signing keys in
+     * JSON Web Key format.
+     * </pre>
+     */
+    public com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys getAwsJsonWebKeys(
+        com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest request) {
+      return io.grpc.stub.ClientCalls.blockingUnaryCall(
+          getChannel(), getGetAwsJsonWebKeysMethod(), getCallOptions(), request);
+    }
+
     /**
      *
      *
@@ -1407,6 +1814,21 @@ protected AwsClustersFutureStub build(
           getChannel().newCall(getDeleteAwsClusterMethod(), getCallOptions()), request);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    public com.google.common.util.concurrent.ListenableFuture<
+            com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse>
+        generateAwsClusterAgentToken(
+            com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest request) {
+      return io.grpc.stub.ClientCalls.futureUnaryCall(
+          getChannel().newCall(getGenerateAwsClusterAgentTokenMethod(), getCallOptions()), request);
+    }
+
     /**
      *
      *
@@ -1453,6 +1875,25 @@ protected AwsClustersFutureStub build(
           getChannel().newCall(getUpdateAwsNodePoolMethod(), getCallOptions()), request);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Rolls back a previously aborted or failed
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] update request.
+     * Makes no changes if the last update request successfully finished.
+     * If an update request is in progress, you cannot rollback the update.
+     * You must first cancel or let it finish unsuccessfully before you can
+     * rollback.
+     * </pre>
+     */
+    public com.google.common.util.concurrent.ListenableFuture<com.google.longrunning.Operation>
+        rollbackAwsNodePoolUpdate(
+            com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest request) {
+      return io.grpc.stub.ClientCalls.futureUnaryCall(
+          getChannel().newCall(getRollbackAwsNodePoolUpdateMethod(), getCallOptions()), request);
+    }
+
     /**
      *
      *
@@ -1501,6 +1942,39 @@ protected AwsClustersFutureStub build(
           getChannel().newCall(getDeleteAwsNodePoolMethod(), getCallOptions()), request);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Gets the OIDC discovery document for the cluster.
+     * See the
+     * [OpenID Connect Discovery 1.0
+     * specification](https://openid.net/specs/openid-connect-discovery-1_0.html)
+     * for details.
+     * </pre>
+     */
+    public com.google.common.util.concurrent.ListenableFuture<
+            com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig>
+        getAwsOpenIdConfig(com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest request) {
+      return io.grpc.stub.ClientCalls.futureUnaryCall(
+          getChannel().newCall(getGetAwsOpenIdConfigMethod(), getCallOptions()), request);
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Gets the public component of the cluster signing keys in
+     * JSON Web Key format.
+     * </pre>
+     */
+    public com.google.common.util.concurrent.ListenableFuture<
+            com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys>
+        getAwsJsonWebKeys(com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest request) {
+      return io.grpc.stub.ClientCalls.futureUnaryCall(
+          getChannel().newCall(getGetAwsJsonWebKeysMethod(), getCallOptions()), request);
+    }
+
     /**
      *
      *
@@ -1522,13 +1996,17 @@ protected AwsClustersFutureStub build(
   private static final int METHODID_GET_AWS_CLUSTER = 2;
   private static final int METHODID_LIST_AWS_CLUSTERS = 3;
   private static final int METHODID_DELETE_AWS_CLUSTER = 4;
-  private static final int METHODID_GENERATE_AWS_ACCESS_TOKEN = 5;
-  private static final int METHODID_CREATE_AWS_NODE_POOL = 6;
-  private static final int METHODID_UPDATE_AWS_NODE_POOL = 7;
-  private static final int METHODID_GET_AWS_NODE_POOL = 8;
-  private static final int METHODID_LIST_AWS_NODE_POOLS = 9;
-  private static final int METHODID_DELETE_AWS_NODE_POOL = 10;
-  private static final int METHODID_GET_AWS_SERVER_CONFIG = 11;
+  private static final int METHODID_GENERATE_AWS_CLUSTER_AGENT_TOKEN = 5;
+  private static final int METHODID_GENERATE_AWS_ACCESS_TOKEN = 6;
+  private static final int METHODID_CREATE_AWS_NODE_POOL = 7;
+  private static final int METHODID_UPDATE_AWS_NODE_POOL = 8;
+  private static final int METHODID_ROLLBACK_AWS_NODE_POOL_UPDATE = 9;
+  private static final int METHODID_GET_AWS_NODE_POOL = 10;
+  private static final int METHODID_LIST_AWS_NODE_POOLS = 11;
+  private static final int METHODID_DELETE_AWS_NODE_POOL = 12;
+  private static final int METHODID_GET_AWS_OPEN_ID_CONFIG = 13;
+  private static final int METHODID_GET_AWS_JSON_WEB_KEYS = 14;
+  private static final int METHODID_GET_AWS_SERVER_CONFIG = 15;
 
   private static final class MethodHandlers<Req, Resp>
       implements io.grpc.stub.ServerCalls.UnaryMethod<Req, Resp>,
@@ -1575,6 +2053,13 @@ public void invoke(Req request, io.grpc.stub.StreamObserver<Resp> responseObserv
               (com.google.cloud.gkemulticloud.v1.DeleteAwsClusterRequest) request,
               (io.grpc.stub.StreamObserver<com.google.longrunning.Operation>) responseObserver);
           break;
+        case METHODID_GENERATE_AWS_CLUSTER_AGENT_TOKEN:
+          serviceImpl.generateAwsClusterAgentToken(
+              (com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest) request,
+              (io.grpc.stub.StreamObserver<
+                      com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse>)
+                  responseObserver);
+          break;
         case METHODID_GENERATE_AWS_ACCESS_TOKEN:
           serviceImpl.generateAwsAccessToken(
               (com.google.cloud.gkemulticloud.v1.GenerateAwsAccessTokenRequest) request,
@@ -1592,6 +2077,11 @@ public void invoke(Req request, io.grpc.stub.StreamObserver<Resp> responseObserv
               (com.google.cloud.gkemulticloud.v1.UpdateAwsNodePoolRequest) request,
               (io.grpc.stub.StreamObserver<com.google.longrunning.Operation>) responseObserver);
           break;
+        case METHODID_ROLLBACK_AWS_NODE_POOL_UPDATE:
+          serviceImpl.rollbackAwsNodePoolUpdate(
+              (com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest) request,
+              (io.grpc.stub.StreamObserver<com.google.longrunning.Operation>) responseObserver);
+          break;
         case METHODID_GET_AWS_NODE_POOL:
           serviceImpl.getAwsNodePool(
               (com.google.cloud.gkemulticloud.v1.GetAwsNodePoolRequest) request,
@@ -1610,6 +2100,18 @@ public void invoke(Req request, io.grpc.stub.StreamObserver<Resp> responseObserv
               (com.google.cloud.gkemulticloud.v1.DeleteAwsNodePoolRequest) request,
               (io.grpc.stub.StreamObserver<com.google.longrunning.Operation>) responseObserver);
           break;
+        case METHODID_GET_AWS_OPEN_ID_CONFIG:
+          serviceImpl.getAwsOpenIdConfig(
+              (com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest) request,
+              (io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig>)
+                  responseObserver);
+          break;
+        case METHODID_GET_AWS_JSON_WEB_KEYS:
+          serviceImpl.getAwsJsonWebKeys(
+              (com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest) request,
+              (io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys>)
+                  responseObserver);
+          break;
         case METHODID_GET_AWS_SERVER_CONFIG:
           serviceImpl.getAwsServerConfig(
               (com.google.cloud.gkemulticloud.v1.GetAwsServerConfigRequest) request,
@@ -1666,6 +2168,13 @@ public static final io.grpc.ServerServiceDefinition bindService(AsyncService ser
                 new MethodHandlers<
                     com.google.cloud.gkemulticloud.v1.DeleteAwsClusterRequest,
                     com.google.longrunning.Operation>(service, METHODID_DELETE_AWS_CLUSTER)))
+        .addMethod(
+            getGenerateAwsClusterAgentTokenMethod(),
+            io.grpc.stub.ServerCalls.asyncUnaryCall(
+                new MethodHandlers<
+                    com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest,
+                    com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse>(
+                    service, METHODID_GENERATE_AWS_CLUSTER_AGENT_TOKEN)))
         .addMethod(
             getGenerateAwsAccessTokenMethod(),
             io.grpc.stub.ServerCalls.asyncUnaryCall(
@@ -1685,6 +2194,13 @@ public static final io.grpc.ServerServiceDefinition bindService(AsyncService ser
                 new MethodHandlers<
                     com.google.cloud.gkemulticloud.v1.UpdateAwsNodePoolRequest,
                     com.google.longrunning.Operation>(service, METHODID_UPDATE_AWS_NODE_POOL)))
+        .addMethod(
+            getRollbackAwsNodePoolUpdateMethod(),
+            io.grpc.stub.ServerCalls.asyncUnaryCall(
+                new MethodHandlers<
+                    com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest,
+                    com.google.longrunning.Operation>(
+                    service, METHODID_ROLLBACK_AWS_NODE_POOL_UPDATE)))
         .addMethod(
             getGetAwsNodePoolMethod(),
             io.grpc.stub.ServerCalls.asyncUnaryCall(
@@ -1705,6 +2221,20 @@ public static final io.grpc.ServerServiceDefinition bindService(AsyncService ser
                 new MethodHandlers<
                     com.google.cloud.gkemulticloud.v1.DeleteAwsNodePoolRequest,
                     com.google.longrunning.Operation>(service, METHODID_DELETE_AWS_NODE_POOL)))
+        .addMethod(
+            getGetAwsOpenIdConfigMethod(),
+            io.grpc.stub.ServerCalls.asyncUnaryCall(
+                new MethodHandlers<
+                    com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest,
+                    com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig>(
+                    service, METHODID_GET_AWS_OPEN_ID_CONFIG)))
+        .addMethod(
+            getGetAwsJsonWebKeysMethod(),
+            io.grpc.stub.ServerCalls.asyncUnaryCall(
+                new MethodHandlers<
+                    com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest,
+                    com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys>(
+                    service, METHODID_GET_AWS_JSON_WEB_KEYS)))
         .addMethod(
             getGetAwsServerConfigMethod(),
             io.grpc.stub.ServerCalls.asyncUnaryCall(
@@ -1768,12 +2298,16 @@ public static io.grpc.ServiceDescriptor getServiceDescriptor() {
                       .addMethod(getGetAwsClusterMethod())
                       .addMethod(getListAwsClustersMethod())
                       .addMethod(getDeleteAwsClusterMethod())
+                      .addMethod(getGenerateAwsClusterAgentTokenMethod())
                       .addMethod(getGenerateAwsAccessTokenMethod())
                       .addMethod(getCreateAwsNodePoolMethod())
                       .addMethod(getUpdateAwsNodePoolMethod())
+                      .addMethod(getRollbackAwsNodePoolUpdateMethod())
                       .addMethod(getGetAwsNodePoolMethod())
                       .addMethod(getListAwsNodePoolsMethod())
                       .addMethod(getDeleteAwsNodePoolMethod())
+                      .addMethod(getGetAwsOpenIdConfigMethod())
+                      .addMethod(getGetAwsJsonWebKeysMethod())
                       .addMethod(getGetAwsServerConfigMethod())
                       .build();
         }
diff --git a/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersGrpc.java b/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersGrpc.java
index 2cd97d132215..5f4f0f9fe152 100644
--- a/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersGrpc.java
+++ b/java-gke-multi-cloud/grpc-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClustersGrpc.java
@@ -452,6 +452,59 @@ private AzureClustersGrpc() {}
     return getDeleteAzureClusterMethod;
   }
 
+  private static volatile io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest,
+          com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse>
+      getGenerateAzureClusterAgentTokenMethod;
+
+  @io.grpc.stub.annotations.RpcMethod(
+      fullMethodName = SERVICE_NAME + '/' + "GenerateAzureClusterAgentToken",
+      requestType = com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest.class,
+      responseType = com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse.class,
+      methodType = io.grpc.MethodDescriptor.MethodType.UNARY)
+  public static io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest,
+          com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse>
+      getGenerateAzureClusterAgentTokenMethod() {
+    io.grpc.MethodDescriptor<
+            com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest,
+            com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse>
+        getGenerateAzureClusterAgentTokenMethod;
+    if ((getGenerateAzureClusterAgentTokenMethod =
+            AzureClustersGrpc.getGenerateAzureClusterAgentTokenMethod)
+        == null) {
+      synchronized (AzureClustersGrpc.class) {
+        if ((getGenerateAzureClusterAgentTokenMethod =
+                AzureClustersGrpc.getGenerateAzureClusterAgentTokenMethod)
+            == null) {
+          AzureClustersGrpc.getGenerateAzureClusterAgentTokenMethod =
+              getGenerateAzureClusterAgentTokenMethod =
+                  io.grpc.MethodDescriptor
+                      .<com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest,
+                          com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse>
+                          newBuilder()
+                      .setType(io.grpc.MethodDescriptor.MethodType.UNARY)
+                      .setFullMethodName(
+                          generateFullMethodName(SERVICE_NAME, "GenerateAzureClusterAgentToken"))
+                      .setSampledToLocalTracing(true)
+                      .setRequestMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1
+                                  .GenerateAzureClusterAgentTokenRequest.getDefaultInstance()))
+                      .setResponseMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1
+                                  .GenerateAzureClusterAgentTokenResponse.getDefaultInstance()))
+                      .setSchemaDescriptor(
+                          new AzureClustersMethodDescriptorSupplier(
+                              "GenerateAzureClusterAgentToken"))
+                      .build();
+        }
+      }
+    }
+    return getGenerateAzureClusterAgentTokenMethod;
+  }
+
   private static volatile io.grpc.MethodDescriptor<
           com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenRequest,
           com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenResponse>
@@ -740,6 +793,104 @@ private AzureClustersGrpc() {}
     return getDeleteAzureNodePoolMethod;
   }
 
+  private static volatile io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest,
+          com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig>
+      getGetAzureOpenIdConfigMethod;
+
+  @io.grpc.stub.annotations.RpcMethod(
+      fullMethodName = SERVICE_NAME + '/' + "GetAzureOpenIdConfig",
+      requestType = com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest.class,
+      responseType = com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig.class,
+      methodType = io.grpc.MethodDescriptor.MethodType.UNARY)
+  public static io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest,
+          com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig>
+      getGetAzureOpenIdConfigMethod() {
+    io.grpc.MethodDescriptor<
+            com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest,
+            com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig>
+        getGetAzureOpenIdConfigMethod;
+    if ((getGetAzureOpenIdConfigMethod = AzureClustersGrpc.getGetAzureOpenIdConfigMethod) == null) {
+      synchronized (AzureClustersGrpc.class) {
+        if ((getGetAzureOpenIdConfigMethod = AzureClustersGrpc.getGetAzureOpenIdConfigMethod)
+            == null) {
+          AzureClustersGrpc.getGetAzureOpenIdConfigMethod =
+              getGetAzureOpenIdConfigMethod =
+                  io.grpc.MethodDescriptor
+                      .<com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest,
+                          com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig>
+                          newBuilder()
+                      .setType(io.grpc.MethodDescriptor.MethodType.UNARY)
+                      .setFullMethodName(
+                          generateFullMethodName(SERVICE_NAME, "GetAzureOpenIdConfig"))
+                      .setSampledToLocalTracing(true)
+                      .setRequestMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest
+                                  .getDefaultInstance()))
+                      .setResponseMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig
+                                  .getDefaultInstance()))
+                      .setSchemaDescriptor(
+                          new AzureClustersMethodDescriptorSupplier("GetAzureOpenIdConfig"))
+                      .build();
+        }
+      }
+    }
+    return getGetAzureOpenIdConfigMethod;
+  }
+
+  private static volatile io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest,
+          com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys>
+      getGetAzureJsonWebKeysMethod;
+
+  @io.grpc.stub.annotations.RpcMethod(
+      fullMethodName = SERVICE_NAME + '/' + "GetAzureJsonWebKeys",
+      requestType = com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest.class,
+      responseType = com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys.class,
+      methodType = io.grpc.MethodDescriptor.MethodType.UNARY)
+  public static io.grpc.MethodDescriptor<
+          com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest,
+          com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys>
+      getGetAzureJsonWebKeysMethod() {
+    io.grpc.MethodDescriptor<
+            com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest,
+            com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys>
+        getGetAzureJsonWebKeysMethod;
+    if ((getGetAzureJsonWebKeysMethod = AzureClustersGrpc.getGetAzureJsonWebKeysMethod) == null) {
+      synchronized (AzureClustersGrpc.class) {
+        if ((getGetAzureJsonWebKeysMethod = AzureClustersGrpc.getGetAzureJsonWebKeysMethod)
+            == null) {
+          AzureClustersGrpc.getGetAzureJsonWebKeysMethod =
+              getGetAzureJsonWebKeysMethod =
+                  io.grpc.MethodDescriptor
+                      .<com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest,
+                          com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys>
+                          newBuilder()
+                      .setType(io.grpc.MethodDescriptor.MethodType.UNARY)
+                      .setFullMethodName(
+                          generateFullMethodName(SERVICE_NAME, "GetAzureJsonWebKeys"))
+                      .setSampledToLocalTracing(true)
+                      .setRequestMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest
+                                  .getDefaultInstance()))
+                      .setResponseMarshaller(
+                          io.grpc.protobuf.ProtoUtils.marshaller(
+                              com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys
+                                  .getDefaultInstance()))
+                      .setSchemaDescriptor(
+                          new AzureClustersMethodDescriptorSupplier("GetAzureJsonWebKeys"))
+                      .build();
+        }
+      }
+    }
+    return getGetAzureJsonWebKeysMethod;
+  }
+
   private static volatile io.grpc.MethodDescriptor<
           com.google.cloud.gkemulticloud.v1.GetAzureServerConfigRequest,
           com.google.cloud.gkemulticloud.v1.AzureServerConfig>
@@ -997,6 +1148,22 @@ default void deleteAzureCluster(
           getDeleteAzureClusterMethod(), responseObserver);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    default void generateAzureClusterAgentToken(
+        com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest request,
+        io.grpc.stub.StreamObserver<
+                com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse>
+            responseObserver) {
+      io.grpc.stub.ServerCalls.asyncUnimplementedUnaryCall(
+          getGenerateAzureClusterAgentTokenMethod(), responseObserver);
+    }
+
     /**
      *
      *
@@ -1098,6 +1265,41 @@ default void deleteAzureNodePool(
           getDeleteAzureNodePoolMethod(), responseObserver);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Gets the OIDC discovery document for the cluster.
+     * See the
+     * [OpenID Connect Discovery 1.0
+     * specification](https://openid.net/specs/openid-connect-discovery-1_0.html)
+     * for details.
+     * </pre>
+     */
+    default void getAzureOpenIdConfig(
+        com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest request,
+        io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig>
+            responseObserver) {
+      io.grpc.stub.ServerCalls.asyncUnimplementedUnaryCall(
+          getGetAzureOpenIdConfigMethod(), responseObserver);
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Gets the public component of the cluster signing keys in
+     * JSON Web Key format.
+     * </pre>
+     */
+    default void getAzureJsonWebKeys(
+        com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest request,
+        io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys>
+            responseObserver) {
+      io.grpc.stub.ServerCalls.asyncUnimplementedUnaryCall(
+          getGetAzureJsonWebKeysMethod(), responseObserver);
+    }
+
     /**
      *
      *
@@ -1326,6 +1528,24 @@ public void deleteAzureCluster(
           responseObserver);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    public void generateAzureClusterAgentToken(
+        com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest request,
+        io.grpc.stub.StreamObserver<
+                com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse>
+            responseObserver) {
+      io.grpc.stub.ClientCalls.asyncUnaryCall(
+          getChannel().newCall(getGenerateAzureClusterAgentTokenMethod(), getCallOptions()),
+          request,
+          responseObserver);
+    }
+
     /**
      *
      *
@@ -1439,6 +1659,45 @@ public void deleteAzureNodePool(
           responseObserver);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Gets the OIDC discovery document for the cluster.
+     * See the
+     * [OpenID Connect Discovery 1.0
+     * specification](https://openid.net/specs/openid-connect-discovery-1_0.html)
+     * for details.
+     * </pre>
+     */
+    public void getAzureOpenIdConfig(
+        com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest request,
+        io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig>
+            responseObserver) {
+      io.grpc.stub.ClientCalls.asyncUnaryCall(
+          getChannel().newCall(getGetAzureOpenIdConfigMethod(), getCallOptions()),
+          request,
+          responseObserver);
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Gets the public component of the cluster signing keys in
+     * JSON Web Key format.
+     * </pre>
+     */
+    public void getAzureJsonWebKeys(
+        com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest request,
+        io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys>
+            responseObserver) {
+      io.grpc.stub.ClientCalls.asyncUnaryCall(
+          getChannel().newCall(getGetAzureJsonWebKeysMethod(), getCallOptions()),
+          request,
+          responseObserver);
+    }
+
     /**
      *
      *
@@ -1622,6 +1881,20 @@ public com.google.longrunning.Operation deleteAzureCluster(
           getChannel(), getDeleteAzureClusterMethod(), getCallOptions(), request);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    public com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse
+        generateAzureClusterAgentToken(
+            com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest request) {
+      return io.grpc.stub.ClientCalls.blockingUnaryCall(
+          getChannel(), getGenerateAzureClusterAgentTokenMethod(), getCallOptions(), request);
+    }
+
     /**
      *
      *
@@ -1714,6 +1987,37 @@ public com.google.longrunning.Operation deleteAzureNodePool(
           getChannel(), getDeleteAzureNodePoolMethod(), getCallOptions(), request);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Gets the OIDC discovery document for the cluster.
+     * See the
+     * [OpenID Connect Discovery 1.0
+     * specification](https://openid.net/specs/openid-connect-discovery-1_0.html)
+     * for details.
+     * </pre>
+     */
+    public com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig getAzureOpenIdConfig(
+        com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest request) {
+      return io.grpc.stub.ClientCalls.blockingUnaryCall(
+          getChannel(), getGetAzureOpenIdConfigMethod(), getCallOptions(), request);
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Gets the public component of the cluster signing keys in
+     * JSON Web Key format.
+     * </pre>
+     */
+    public com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys getAzureJsonWebKeys(
+        com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest request) {
+      return io.grpc.stub.ClientCalls.blockingUnaryCall(
+          getChannel(), getGetAzureJsonWebKeysMethod(), getCallOptions(), request);
+    }
+
     /**
      *
      *
@@ -1897,6 +2201,22 @@ protected AzureClustersFutureStub build(
           getChannel().newCall(getDeleteAzureClusterMethod(), getCallOptions()), request);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Generates an access token for a cluster agent.
+     * </pre>
+     */
+    public com.google.common.util.concurrent.ListenableFuture<
+            com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse>
+        generateAzureClusterAgentToken(
+            com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest request) {
+      return io.grpc.stub.ClientCalls.futureUnaryCall(
+          getChannel().newCall(getGenerateAzureClusterAgentTokenMethod(), getCallOptions()),
+          request);
+    }
+
     /**
      *
      *
@@ -1992,6 +2312,40 @@ protected AzureClustersFutureStub build(
           getChannel().newCall(getDeleteAzureNodePoolMethod(), getCallOptions()), request);
     }
 
+    /**
+     *
+     *
+     * <pre>
+     * Gets the OIDC discovery document for the cluster.
+     * See the
+     * [OpenID Connect Discovery 1.0
+     * specification](https://openid.net/specs/openid-connect-discovery-1_0.html)
+     * for details.
+     * </pre>
+     */
+    public com.google.common.util.concurrent.ListenableFuture<
+            com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig>
+        getAzureOpenIdConfig(
+            com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest request) {
+      return io.grpc.stub.ClientCalls.futureUnaryCall(
+          getChannel().newCall(getGetAzureOpenIdConfigMethod(), getCallOptions()), request);
+    }
+
+    /**
+     *
+     *
+     * <pre>
+     * Gets the public component of the cluster signing keys in
+     * JSON Web Key format.
+     * </pre>
+     */
+    public com.google.common.util.concurrent.ListenableFuture<
+            com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys>
+        getAzureJsonWebKeys(com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest request) {
+      return io.grpc.stub.ClientCalls.futureUnaryCall(
+          getChannel().newCall(getGetAzureJsonWebKeysMethod(), getCallOptions()), request);
+    }
+
     /**
      *
      *
@@ -2018,13 +2372,16 @@ protected AzureClustersFutureStub build(
   private static final int METHODID_GET_AZURE_CLUSTER = 6;
   private static final int METHODID_LIST_AZURE_CLUSTERS = 7;
   private static final int METHODID_DELETE_AZURE_CLUSTER = 8;
-  private static final int METHODID_GENERATE_AZURE_ACCESS_TOKEN = 9;
-  private static final int METHODID_CREATE_AZURE_NODE_POOL = 10;
-  private static final int METHODID_UPDATE_AZURE_NODE_POOL = 11;
-  private static final int METHODID_GET_AZURE_NODE_POOL = 12;
-  private static final int METHODID_LIST_AZURE_NODE_POOLS = 13;
-  private static final int METHODID_DELETE_AZURE_NODE_POOL = 14;
-  private static final int METHODID_GET_AZURE_SERVER_CONFIG = 15;
+  private static final int METHODID_GENERATE_AZURE_CLUSTER_AGENT_TOKEN = 9;
+  private static final int METHODID_GENERATE_AZURE_ACCESS_TOKEN = 10;
+  private static final int METHODID_CREATE_AZURE_NODE_POOL = 11;
+  private static final int METHODID_UPDATE_AZURE_NODE_POOL = 12;
+  private static final int METHODID_GET_AZURE_NODE_POOL = 13;
+  private static final int METHODID_LIST_AZURE_NODE_POOLS = 14;
+  private static final int METHODID_DELETE_AZURE_NODE_POOL = 15;
+  private static final int METHODID_GET_AZURE_OPEN_ID_CONFIG = 16;
+  private static final int METHODID_GET_AZURE_JSON_WEB_KEYS = 17;
+  private static final int METHODID_GET_AZURE_SERVER_CONFIG = 18;
 
   private static final class MethodHandlers<Req, Resp>
       implements io.grpc.stub.ServerCalls.UnaryMethod<Req, Resp>,
@@ -2094,6 +2451,13 @@ public void invoke(Req request, io.grpc.stub.StreamObserver<Resp> responseObserv
               (com.google.cloud.gkemulticloud.v1.DeleteAzureClusterRequest) request,
               (io.grpc.stub.StreamObserver<com.google.longrunning.Operation>) responseObserver);
           break;
+        case METHODID_GENERATE_AZURE_CLUSTER_AGENT_TOKEN:
+          serviceImpl.generateAzureClusterAgentToken(
+              (com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest) request,
+              (io.grpc.stub.StreamObserver<
+                      com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse>)
+                  responseObserver);
+          break;
         case METHODID_GENERATE_AZURE_ACCESS_TOKEN:
           serviceImpl.generateAzureAccessToken(
               (com.google.cloud.gkemulticloud.v1.GenerateAzureAccessTokenRequest) request,
@@ -2129,6 +2493,18 @@ public void invoke(Req request, io.grpc.stub.StreamObserver<Resp> responseObserv
               (com.google.cloud.gkemulticloud.v1.DeleteAzureNodePoolRequest) request,
               (io.grpc.stub.StreamObserver<com.google.longrunning.Operation>) responseObserver);
           break;
+        case METHODID_GET_AZURE_OPEN_ID_CONFIG:
+          serviceImpl.getAzureOpenIdConfig(
+              (com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest) request,
+              (io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig>)
+                  responseObserver);
+          break;
+        case METHODID_GET_AZURE_JSON_WEB_KEYS:
+          serviceImpl.getAzureJsonWebKeys(
+              (com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest) request,
+              (io.grpc.stub.StreamObserver<com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys>)
+                  responseObserver);
+          break;
         case METHODID_GET_AZURE_SERVER_CONFIG:
           serviceImpl.getAzureServerConfig(
               (com.google.cloud.gkemulticloud.v1.GetAzureServerConfigRequest) request,
@@ -2211,6 +2587,13 @@ public static final io.grpc.ServerServiceDefinition bindService(AsyncService ser
                 new MethodHandlers<
                     com.google.cloud.gkemulticloud.v1.DeleteAzureClusterRequest,
                     com.google.longrunning.Operation>(service, METHODID_DELETE_AZURE_CLUSTER)))
+        .addMethod(
+            getGenerateAzureClusterAgentTokenMethod(),
+            io.grpc.stub.ServerCalls.asyncUnaryCall(
+                new MethodHandlers<
+                    com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest,
+                    com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse>(
+                    service, METHODID_GENERATE_AZURE_CLUSTER_AGENT_TOKEN)))
         .addMethod(
             getGenerateAzureAccessTokenMethod(),
             io.grpc.stub.ServerCalls.asyncUnaryCall(
@@ -2250,6 +2633,20 @@ public static final io.grpc.ServerServiceDefinition bindService(AsyncService ser
                 new MethodHandlers<
                     com.google.cloud.gkemulticloud.v1.DeleteAzureNodePoolRequest,
                     com.google.longrunning.Operation>(service, METHODID_DELETE_AZURE_NODE_POOL)))
+        .addMethod(
+            getGetAzureOpenIdConfigMethod(),
+            io.grpc.stub.ServerCalls.asyncUnaryCall(
+                new MethodHandlers<
+                    com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest,
+                    com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig>(
+                    service, METHODID_GET_AZURE_OPEN_ID_CONFIG)))
+        .addMethod(
+            getGetAzureJsonWebKeysMethod(),
+            io.grpc.stub.ServerCalls.asyncUnaryCall(
+                new MethodHandlers<
+                    com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest,
+                    com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys>(
+                    service, METHODID_GET_AZURE_JSON_WEB_KEYS)))
         .addMethod(
             getGetAzureServerConfigMethod(),
             io.grpc.stub.ServerCalls.asyncUnaryCall(
@@ -2317,12 +2714,15 @@ public static io.grpc.ServiceDescriptor getServiceDescriptor() {
                       .addMethod(getGetAzureClusterMethod())
                       .addMethod(getListAzureClustersMethod())
                       .addMethod(getDeleteAzureClusterMethod())
+                      .addMethod(getGenerateAzureClusterAgentTokenMethod())
                       .addMethod(getGenerateAzureAccessTokenMethod())
                       .addMethod(getCreateAzureNodePoolMethod())
                       .addMethod(getUpdateAzureNodePoolMethod())
                       .addMethod(getGetAzureNodePoolMethod())
                       .addMethod(getListAzureNodePoolsMethod())
                       .addMethod(getDeleteAzureNodePoolMethod())
+                      .addMethod(getGetAzureOpenIdConfigMethod())
+                      .addMethod(getGetAzureJsonWebKeysMethod())
                       .addMethod(getGetAzureServerConfigMethod())
                       .build();
         }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedCluster.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedCluster.java
index 103bef619579..ef35f9dafb0e 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedCluster.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedCluster.java
@@ -578,7 +578,7 @@ public com.google.protobuf.ByteString getPlatformVersionBytes() {
    * <pre>
    * Required. The Kubernetes distribution of the underlying attached cluster.
    *
-   * Supported values: ["eks", "aks"].
+   * Supported values: ["eks", "aks", "generic"].
    * </pre>
    *
    * <code>string distribution = 16 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -603,7 +603,7 @@ public java.lang.String getDistribution() {
    * <pre>
    * Required. The Kubernetes distribution of the underlying attached cluster.
    *
-   * Supported values: ["eks", "aks"].
+   * Supported values: ["eks", "aks", "generic"].
    * </pre>
    *
    * <code>string distribution = 16 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -1495,6 +1495,119 @@ public com.google.cloud.gkemulticloud.v1.MonitoringConfig getMonitoringConfig()
         : monitoringConfig_;
   }
 
+  public static final int PROXY_CONFIG_FIELD_NUMBER = 24;
+  private com.google.cloud.gkemulticloud.v1.AttachedProxyConfig proxyConfig_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the proxyConfig field is set.
+   */
+  @java.lang.Override
+  public boolean hasProxyConfig() {
+    return proxyConfig_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The proxyConfig.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getProxyConfig() {
+    return proxyConfig_ == null
+        ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+        : proxyConfig_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder getProxyConfigOrBuilder() {
+    return proxyConfig_ == null
+        ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+        : proxyConfig_;
+  }
+
+  public static final int BINARY_AUTHORIZATION_FIELD_NUMBER = 25;
+  private com.google.cloud.gkemulticloud.v1.BinaryAuthorization binaryAuthorization_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the binaryAuthorization field is set.
+   */
+  @java.lang.Override
+  public boolean hasBinaryAuthorization() {
+    return binaryAuthorization_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The binaryAuthorization.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.BinaryAuthorization getBinaryAuthorization() {
+    return binaryAuthorization_ == null
+        ? com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance()
+        : binaryAuthorization_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder
+      getBinaryAuthorizationOrBuilder() {
+    return binaryAuthorization_ == null
+        ? com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance()
+        : binaryAuthorization_;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -1569,6 +1682,12 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (monitoringConfig_ != null) {
       output.writeMessage(23, getMonitoringConfig());
     }
+    if (proxyConfig_ != null) {
+      output.writeMessage(24, getProxyConfig());
+    }
+    if (binaryAuthorization_ != null) {
+      output.writeMessage(25, getBinaryAuthorization());
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -1647,6 +1766,13 @@ public int getSerializedSize() {
     if (monitoringConfig_ != null) {
       size += com.google.protobuf.CodedOutputStream.computeMessageSize(23, getMonitoringConfig());
     }
+    if (proxyConfig_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(24, getProxyConfig());
+    }
+    if (binaryAuthorization_ != null) {
+      size +=
+          com.google.protobuf.CodedOutputStream.computeMessageSize(25, getBinaryAuthorization());
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -1707,6 +1833,14 @@ public boolean equals(final java.lang.Object obj) {
     if (hasMonitoringConfig()) {
       if (!getMonitoringConfig().equals(other.getMonitoringConfig())) return false;
     }
+    if (hasProxyConfig() != other.hasProxyConfig()) return false;
+    if (hasProxyConfig()) {
+      if (!getProxyConfig().equals(other.getProxyConfig())) return false;
+    }
+    if (hasBinaryAuthorization() != other.hasBinaryAuthorization()) return false;
+    if (hasBinaryAuthorization()) {
+      if (!getBinaryAuthorization().equals(other.getBinaryAuthorization())) return false;
+    }
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -1778,6 +1912,14 @@ public int hashCode() {
       hash = (37 * hash) + MONITORING_CONFIG_FIELD_NUMBER;
       hash = (53 * hash) + getMonitoringConfig().hashCode();
     }
+    if (hasProxyConfig()) {
+      hash = (37 * hash) + PROXY_CONFIG_FIELD_NUMBER;
+      hash = (53 * hash) + getProxyConfig().hashCode();
+    }
+    if (hasBinaryAuthorization()) {
+      hash = (37 * hash) + BINARY_AUTHORIZATION_FIELD_NUMBER;
+      hash = (53 * hash) + getBinaryAuthorization().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -1995,6 +2137,16 @@ public Builder clear() {
         monitoringConfigBuilder_.dispose();
         monitoringConfigBuilder_ = null;
       }
+      proxyConfig_ = null;
+      if (proxyConfigBuilder_ != null) {
+        proxyConfigBuilder_.dispose();
+        proxyConfigBuilder_ = null;
+      }
+      binaryAuthorization_ = null;
+      if (binaryAuthorizationBuilder_ != null) {
+        binaryAuthorizationBuilder_.dispose();
+        binaryAuthorizationBuilder_ = null;
+      }
       return this;
     }
 
@@ -2109,6 +2261,16 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.AttachedCluster res
         result.monitoringConfig_ =
             monitoringConfigBuilder_ == null ? monitoringConfig_ : monitoringConfigBuilder_.build();
       }
+      if (((from_bitField0_ & 0x00100000) != 0)) {
+        result.proxyConfig_ =
+            proxyConfigBuilder_ == null ? proxyConfig_ : proxyConfigBuilder_.build();
+      }
+      if (((from_bitField0_ & 0x00200000) != 0)) {
+        result.binaryAuthorization_ =
+            binaryAuthorizationBuilder_ == null
+                ? binaryAuthorization_
+                : binaryAuthorizationBuilder_.build();
+      }
     }
 
     @java.lang.Override
@@ -2256,6 +2418,12 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AttachedCluster other
       if (other.hasMonitoringConfig()) {
         mergeMonitoringConfig(other.getMonitoringConfig());
       }
+      if (other.hasProxyConfig()) {
+        mergeProxyConfig(other.getProxyConfig());
+      }
+      if (other.hasBinaryAuthorization()) {
+        mergeBinaryAuthorization(other.getBinaryAuthorization());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -2418,6 +2586,19 @@ public Builder mergeFrom(
                 bitField0_ |= 0x00080000;
                 break;
               } // case 186
+            case 194:
+              {
+                input.readMessage(getProxyConfigFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00100000;
+                break;
+              } // case 194
+            case 202:
+              {
+                input.readMessage(
+                    getBinaryAuthorizationFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00200000;
+                break;
+              } // case 202
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -3020,7 +3201,7 @@ public Builder setPlatformVersionBytes(com.google.protobuf.ByteString value) {
      * <pre>
      * Required. The Kubernetes distribution of the underlying attached cluster.
      *
-     * Supported values: ["eks", "aks"].
+     * Supported values: ["eks", "aks", "generic"].
      * </pre>
      *
      * <code>string distribution = 16 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -3044,7 +3225,7 @@ public java.lang.String getDistribution() {
      * <pre>
      * Required. The Kubernetes distribution of the underlying attached cluster.
      *
-     * Supported values: ["eks", "aks"].
+     * Supported values: ["eks", "aks", "generic"].
      * </pre>
      *
      * <code>string distribution = 16 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -3068,7 +3249,7 @@ public com.google.protobuf.ByteString getDistributionBytes() {
      * <pre>
      * Required. The Kubernetes distribution of the underlying attached cluster.
      *
-     * Supported values: ["eks", "aks"].
+     * Supported values: ["eks", "aks", "generic"].
      * </pre>
      *
      * <code>string distribution = 16 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -3091,7 +3272,7 @@ public Builder setDistribution(java.lang.String value) {
      * <pre>
      * Required. The Kubernetes distribution of the underlying attached cluster.
      *
-     * Supported values: ["eks", "aks"].
+     * Supported values: ["eks", "aks", "generic"].
      * </pre>
      *
      * <code>string distribution = 16 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -3110,7 +3291,7 @@ public Builder clearDistribution() {
      * <pre>
      * Required. The Kubernetes distribution of the underlying attached cluster.
      *
-     * Supported values: ["eks", "aks"].
+     * Supported values: ["eks", "aks", "generic"].
      * </pre>
      *
      * <code>string distribution = 16 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -5792,6 +5973,417 @@ public com.google.cloud.gkemulticloud.v1.MonitoringConfig.Builder getMonitoringC
       return monitoringConfigBuilder_;
     }
 
+    private com.google.cloud.gkemulticloud.v1.AttachedProxyConfig proxyConfig_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder>
+        proxyConfigBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the proxyConfig field is set.
+     */
+    public boolean hasProxyConfig() {
+      return ((bitField0_ & 0x00100000) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The proxyConfig.
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getProxyConfig() {
+      if (proxyConfigBuilder_ == null) {
+        return proxyConfig_ == null
+            ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+            : proxyConfig_;
+      } else {
+        return proxyConfigBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setProxyConfig(com.google.cloud.gkemulticloud.v1.AttachedProxyConfig value) {
+      if (proxyConfigBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        proxyConfig_ = value;
+      } else {
+        proxyConfigBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00100000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setProxyConfig(
+        com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder builderForValue) {
+      if (proxyConfigBuilder_ == null) {
+        proxyConfig_ = builderForValue.build();
+      } else {
+        proxyConfigBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00100000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeProxyConfig(com.google.cloud.gkemulticloud.v1.AttachedProxyConfig value) {
+      if (proxyConfigBuilder_ == null) {
+        if (((bitField0_ & 0x00100000) != 0)
+            && proxyConfig_ != null
+            && proxyConfig_
+                != com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()) {
+          getProxyConfigBuilder().mergeFrom(value);
+        } else {
+          proxyConfig_ = value;
+        }
+      } else {
+        proxyConfigBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00100000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearProxyConfig() {
+      bitField0_ = (bitField0_ & ~0x00100000);
+      proxyConfig_ = null;
+      if (proxyConfigBuilder_ != null) {
+        proxyConfigBuilder_.dispose();
+        proxyConfigBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder getProxyConfigBuilder() {
+      bitField0_ |= 0x00100000;
+      onChanged();
+      return getProxyConfigFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder
+        getProxyConfigOrBuilder() {
+      if (proxyConfigBuilder_ != null) {
+        return proxyConfigBuilder_.getMessageOrBuilder();
+      } else {
+        return proxyConfig_ == null
+            ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+            : proxyConfig_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder>
+        getProxyConfigFieldBuilder() {
+      if (proxyConfigBuilder_ == null) {
+        proxyConfigBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.AttachedProxyConfig,
+                com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder,
+                com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder>(
+                getProxyConfig(), getParentForChildren(), isClean());
+        proxyConfig_ = null;
+      }
+      return proxyConfigBuilder_;
+    }
+
+    private com.google.cloud.gkemulticloud.v1.BinaryAuthorization binaryAuthorization_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorization,
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder,
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder>
+        binaryAuthorizationBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the binaryAuthorization field is set.
+     */
+    public boolean hasBinaryAuthorization() {
+      return ((bitField0_ & 0x00200000) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The binaryAuthorization.
+     */
+    public com.google.cloud.gkemulticloud.v1.BinaryAuthorization getBinaryAuthorization() {
+      if (binaryAuthorizationBuilder_ == null) {
+        return binaryAuthorization_ == null
+            ? com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance()
+            : binaryAuthorization_;
+      } else {
+        return binaryAuthorizationBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setBinaryAuthorization(
+        com.google.cloud.gkemulticloud.v1.BinaryAuthorization value) {
+      if (binaryAuthorizationBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        binaryAuthorization_ = value;
+      } else {
+        binaryAuthorizationBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00200000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setBinaryAuthorization(
+        com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder builderForValue) {
+      if (binaryAuthorizationBuilder_ == null) {
+        binaryAuthorization_ = builderForValue.build();
+      } else {
+        binaryAuthorizationBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00200000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeBinaryAuthorization(
+        com.google.cloud.gkemulticloud.v1.BinaryAuthorization value) {
+      if (binaryAuthorizationBuilder_ == null) {
+        if (((bitField0_ & 0x00200000) != 0)
+            && binaryAuthorization_ != null
+            && binaryAuthorization_
+                != com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance()) {
+          getBinaryAuthorizationBuilder().mergeFrom(value);
+        } else {
+          binaryAuthorization_ = value;
+        }
+      } else {
+        binaryAuthorizationBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00200000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearBinaryAuthorization() {
+      bitField0_ = (bitField0_ & ~0x00200000);
+      binaryAuthorization_ = null;
+      if (binaryAuthorizationBuilder_ != null) {
+        binaryAuthorizationBuilder_.dispose();
+        binaryAuthorizationBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder
+        getBinaryAuthorizationBuilder() {
+      bitField0_ |= 0x00200000;
+      onChanged();
+      return getBinaryAuthorizationFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder
+        getBinaryAuthorizationOrBuilder() {
+      if (binaryAuthorizationBuilder_ != null) {
+        return binaryAuthorizationBuilder_.getMessageOrBuilder();
+      } else {
+        return binaryAuthorization_ == null
+            ? com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance()
+            : binaryAuthorization_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorization,
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder,
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder>
+        getBinaryAuthorizationFieldBuilder() {
+      if (binaryAuthorizationBuilder_ == null) {
+        binaryAuthorizationBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.BinaryAuthorization,
+                com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder,
+                com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder>(
+                getBinaryAuthorization(), getParentForChildren(), isClean());
+        binaryAuthorization_ = null;
+      }
+      return binaryAuthorizationBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClusterGroup.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClusterGroup.java
new file mode 100644
index 000000000000..3ca9e1d60c95
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClusterGroup.java
@@ -0,0 +1,625 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/attached_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * Identities of a group-type subject for Attached clusters.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.AttachedClusterGroup}
+ */
+public final class AttachedClusterGroup extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.AttachedClusterGroup)
+    AttachedClusterGroupOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use AttachedClusterGroup.newBuilder() to construct.
+  private AttachedClusterGroup(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private AttachedClusterGroup() {
+    group_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new AttachedClusterGroup();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AttachedClusterGroup_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AttachedClusterGroup_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.class,
+            com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder.class);
+  }
+
+  public static final int GROUP_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object group_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The group.
+   */
+  @java.lang.Override
+  public java.lang.String getGroup() {
+    java.lang.Object ref = group_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      group_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for group.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getGroupBytes() {
+    java.lang.Object ref = group_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      group_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(group_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, group_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(group_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, group_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.AttachedClusterGroup)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.AttachedClusterGroup other =
+        (com.google.cloud.gkemulticloud.v1.AttachedClusterGroup) obj;
+
+    if (!getGroup().equals(other.getGroup())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + GROUP_FIELD_NUMBER;
+    hash = (53 * hash) + getGroup().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.AttachedClusterGroup prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Identities of a group-type subject for Attached clusters.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.AttachedClusterGroup}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.AttachedClusterGroup)
+      com.google.cloud.gkemulticloud.v1.AttachedClusterGroupOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AttachedClusterGroup_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AttachedClusterGroup_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.class,
+              com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      group_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AttachedClusterGroup_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AttachedClusterGroup getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AttachedClusterGroup build() {
+      com.google.cloud.gkemulticloud.v1.AttachedClusterGroup result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AttachedClusterGroup buildPartial() {
+      com.google.cloud.gkemulticloud.v1.AttachedClusterGroup result =
+          new com.google.cloud.gkemulticloud.v1.AttachedClusterGroup(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.AttachedClusterGroup result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.group_ = group_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.AttachedClusterGroup) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.AttachedClusterGroup) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AttachedClusterGroup other) {
+      if (other == com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.getDefaultInstance())
+        return this;
+      if (!other.getGroup().isEmpty()) {
+        group_ = other.group_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                group_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object group_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The group.
+     */
+    public java.lang.String getGroup() {
+      java.lang.Object ref = group_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        group_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for group.
+     */
+    public com.google.protobuf.ByteString getGroupBytes() {
+      java.lang.Object ref = group_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        group_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The group to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGroup(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      group_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearGroup() {
+      group_ = getDefaultInstance().getGroup();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for group to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGroupBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      group_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.AttachedClusterGroup)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.AttachedClusterGroup)
+  private static final com.google.cloud.gkemulticloud.v1.AttachedClusterGroup DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.AttachedClusterGroup();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedClusterGroup getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<AttachedClusterGroup> PARSER =
+      new com.google.protobuf.AbstractParser<AttachedClusterGroup>() {
+        @java.lang.Override
+        public AttachedClusterGroup parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<AttachedClusterGroup> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<AttachedClusterGroup> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AttachedClusterGroup getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClusterGroupOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClusterGroupOrBuilder.java
new file mode 100644
index 000000000000..b19c83560419
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClusterGroupOrBuilder.java
@@ -0,0 +1,50 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/attached_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface AttachedClusterGroupOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.AttachedClusterGroup)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The group.
+   */
+  java.lang.String getGroup();
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for group.
+   */
+  com.google.protobuf.ByteString getGroupBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClusterOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClusterOrBuilder.java
index 58242483a84d..5959a94fa63b 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClusterOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClusterOrBuilder.java
@@ -167,7 +167,7 @@ public interface AttachedClusterOrBuilder
    * <pre>
    * Required. The Kubernetes distribution of the underlying attached cluster.
    *
-   * Supported values: ["eks", "aks"].
+   * Supported values: ["eks", "aks", "generic"].
    * </pre>
    *
    * <code>string distribution = 16 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -181,7 +181,7 @@ public interface AttachedClusterOrBuilder
    * <pre>
    * Required. The Kubernetes distribution of the underlying attached cluster.
    *
-   * Supported values: ["eks", "aks"].
+   * Supported values: ["eks", "aks", "generic"].
    * </pre>
    *
    * <code>string distribution = 16 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -790,4 +790,86 @@ java.lang.String getAnnotationsOrDefault(
    * </code>
    */
   com.google.cloud.gkemulticloud.v1.MonitoringConfigOrBuilder getMonitoringConfigOrBuilder();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the proxyConfig field is set.
+   */
+  boolean hasProxyConfig();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The proxyConfig.
+   */
+  com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getProxyConfig();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 24 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder getProxyConfigOrBuilder();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the binaryAuthorization field is set.
+   */
+  boolean hasBinaryAuthorization();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The binaryAuthorization.
+   */
+  com.google.cloud.gkemulticloud.v1.BinaryAuthorization getBinaryAuthorization();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 25 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder getBinaryAuthorizationOrBuilder();
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersAuthorization.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersAuthorization.java
index 397672e37c75..6f1e615c9f20 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersAuthorization.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersAuthorization.java
@@ -39,6 +39,7 @@ private AttachedClustersAuthorization(com.google.protobuf.GeneratedMessageV3.Bui
 
   private AttachedClustersAuthorization() {
     adminUsers_ = java.util.Collections.emptyList();
+    adminGroups_ = java.util.Collections.emptyList();
   }
 
   @java.lang.Override
@@ -70,7 +71,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -79,7 +80,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -90,7 +91,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterUser> get
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -99,7 +100,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterUser> get
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -111,7 +112,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterUser> get
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -120,7 +121,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterUser> get
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -131,7 +132,7 @@ public int getAdminUsersCount() {
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -140,7 +141,7 @@ public int getAdminUsersCount() {
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -151,7 +152,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser getAdminUsers(int i
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -160,7 +161,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser getAdminUsers(int i
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -169,6 +170,114 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUserOrBuilder getAdminUs
     return adminUsers_.get(index);
   }
 
+  public static final int ADMIN_GROUPS_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterGroup> adminGroups_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterGroup>
+      getAdminGroupsList() {
+    return adminGroups_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public java.util.List<? extends com.google.cloud.gkemulticloud.v1.AttachedClusterGroupOrBuilder>
+      getAdminGroupsOrBuilderList() {
+    return adminGroups_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public int getAdminGroupsCount() {
+    return adminGroups_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AttachedClusterGroup getAdminGroups(int index) {
+    return adminGroups_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AttachedClusterGroupOrBuilder getAdminGroupsOrBuilder(
+      int index) {
+    return adminGroups_.get(index);
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -186,6 +295,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     for (int i = 0; i < adminUsers_.size(); i++) {
       output.writeMessage(1, adminUsers_.get(i));
     }
+    for (int i = 0; i < adminGroups_.size(); i++) {
+      output.writeMessage(2, adminGroups_.get(i));
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -198,6 +310,9 @@ public int getSerializedSize() {
     for (int i = 0; i < adminUsers_.size(); i++) {
       size += com.google.protobuf.CodedOutputStream.computeMessageSize(1, adminUsers_.get(i));
     }
+    for (int i = 0; i < adminGroups_.size(); i++) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(2, adminGroups_.get(i));
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -215,6 +330,7 @@ public boolean equals(final java.lang.Object obj) {
         (com.google.cloud.gkemulticloud.v1.AttachedClustersAuthorization) obj;
 
     if (!getAdminUsersList().equals(other.getAdminUsersList())) return false;
+    if (!getAdminGroupsList().equals(other.getAdminGroupsList())) return false;
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -230,6 +346,10 @@ public int hashCode() {
       hash = (37 * hash) + ADMIN_USERS_FIELD_NUMBER;
       hash = (53 * hash) + getAdminUsersList().hashCode();
     }
+    if (getAdminGroupsCount() > 0) {
+      hash = (37 * hash) + ADMIN_GROUPS_FIELD_NUMBER;
+      hash = (53 * hash) + getAdminGroupsList().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -377,6 +497,13 @@ public Builder clear() {
         adminUsersBuilder_.clear();
       }
       bitField0_ = (bitField0_ & ~0x00000001);
+      if (adminGroupsBuilder_ == null) {
+        adminGroups_ = java.util.Collections.emptyList();
+      } else {
+        adminGroups_ = null;
+        adminGroupsBuilder_.clear();
+      }
+      bitField0_ = (bitField0_ & ~0x00000002);
       return this;
     }
 
@@ -424,6 +551,15 @@ private void buildPartialRepeatedFields(
       } else {
         result.adminUsers_ = adminUsersBuilder_.build();
       }
+      if (adminGroupsBuilder_ == null) {
+        if (((bitField0_ & 0x00000002) != 0)) {
+          adminGroups_ = java.util.Collections.unmodifiableList(adminGroups_);
+          bitField0_ = (bitField0_ & ~0x00000002);
+        }
+        result.adminGroups_ = adminGroups_;
+      } else {
+        result.adminGroups_ = adminGroupsBuilder_.build();
+      }
     }
 
     private void buildPartial0(
@@ -506,6 +642,33 @@ public Builder mergeFrom(
           }
         }
       }
+      if (adminGroupsBuilder_ == null) {
+        if (!other.adminGroups_.isEmpty()) {
+          if (adminGroups_.isEmpty()) {
+            adminGroups_ = other.adminGroups_;
+            bitField0_ = (bitField0_ & ~0x00000002);
+          } else {
+            ensureAdminGroupsIsMutable();
+            adminGroups_.addAll(other.adminGroups_);
+          }
+          onChanged();
+        }
+      } else {
+        if (!other.adminGroups_.isEmpty()) {
+          if (adminGroupsBuilder_.isEmpty()) {
+            adminGroupsBuilder_.dispose();
+            adminGroupsBuilder_ = null;
+            adminGroups_ = other.adminGroups_;
+            bitField0_ = (bitField0_ & ~0x00000002);
+            adminGroupsBuilder_ =
+                com.google.protobuf.GeneratedMessageV3.alwaysUseFieldBuilders
+                    ? getAdminGroupsFieldBuilder()
+                    : null;
+          } else {
+            adminGroupsBuilder_.addAllMessages(other.adminGroups_);
+          }
+        }
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -546,6 +709,20 @@ public Builder mergeFrom(
                 }
                 break;
               } // case 10
+            case 18:
+              {
+                com.google.cloud.gkemulticloud.v1.AttachedClusterGroup m =
+                    input.readMessage(
+                        com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.parser(),
+                        extensionRegistry);
+                if (adminGroupsBuilder_ == null) {
+                  ensureAdminGroupsIsMutable();
+                  adminGroups_.add(m);
+                } else {
+                  adminGroupsBuilder_.addMessage(m);
+                }
+                break;
+              } // case 18
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -587,7 +764,7 @@ private void ensureAdminUsersIsMutable() {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -596,7 +773,7 @@ private void ensureAdminUsersIsMutable() {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterUser>
@@ -611,7 +788,7 @@ private void ensureAdminUsersIsMutable() {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -620,7 +797,7 @@ private void ensureAdminUsersIsMutable() {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public int getAdminUsersCount() {
@@ -634,7 +811,7 @@ public int getAdminUsersCount() {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -643,7 +820,7 @@ public int getAdminUsersCount() {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AttachedClusterUser getAdminUsers(int index) {
@@ -657,7 +834,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser getAdminUsers(int i
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -666,7 +843,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser getAdminUsers(int i
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder setAdminUsers(
@@ -687,7 +864,7 @@ public Builder setAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -696,7 +873,7 @@ public Builder setAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder setAdminUsers(
@@ -714,7 +891,7 @@ public Builder setAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -723,7 +900,7 @@ public Builder setAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(com.google.cloud.gkemulticloud.v1.AttachedClusterUser value) {
@@ -743,7 +920,7 @@ public Builder addAdminUsers(com.google.cloud.gkemulticloud.v1.AttachedClusterUs
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -752,7 +929,7 @@ public Builder addAdminUsers(com.google.cloud.gkemulticloud.v1.AttachedClusterUs
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(
@@ -773,7 +950,7 @@ public Builder addAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -782,7 +959,7 @@ public Builder addAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(
@@ -800,7 +977,7 @@ public Builder addAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -809,7 +986,7 @@ public Builder addAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(
@@ -827,7 +1004,7 @@ public Builder addAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -836,7 +1013,7 @@ public Builder addAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAllAdminUsers(
@@ -855,7 +1032,7 @@ public Builder addAllAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -864,7 +1041,7 @@ public Builder addAllAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder clearAdminUsers() {
@@ -881,7 +1058,7 @@ public Builder clearAdminUsers() {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -890,7 +1067,7 @@ public Builder clearAdminUsers() {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder removeAdminUsers(int index) {
@@ -907,7 +1084,7 @@ public Builder removeAdminUsers(int index) {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -916,7 +1093,7 @@ public Builder removeAdminUsers(int index) {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder getAdminUsersBuilder(
@@ -927,7 +1104,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder getAdminUse
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -936,7 +1113,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder getAdminUse
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AttachedClusterUserOrBuilder getAdminUsersOrBuilder(
@@ -951,7 +1128,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUserOrBuilder getAdminUs
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -960,7 +1137,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUserOrBuilder getAdminUs
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public java.util.List<? extends com.google.cloud.gkemulticloud.v1.AttachedClusterUserOrBuilder>
@@ -975,7 +1152,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUserOrBuilder getAdminUs
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -984,7 +1161,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUserOrBuilder getAdminUs
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder addAdminUsersBuilder() {
@@ -995,7 +1172,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder addAdminUse
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -1004,7 +1181,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder addAdminUse
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder addAdminUsersBuilder(
@@ -1017,7 +1194,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder addAdminUse
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -1026,7 +1203,7 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder addAdminUse
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder>
@@ -1051,6 +1228,492 @@ public com.google.cloud.gkemulticloud.v1.AttachedClusterUser.Builder addAdminUse
       return adminUsersBuilder_;
     }
 
+    private java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterGroup> adminGroups_ =
+        java.util.Collections.emptyList();
+
+    private void ensureAdminGroupsIsMutable() {
+      if (!((bitField0_ & 0x00000002) != 0)) {
+        adminGroups_ =
+            new java.util.ArrayList<com.google.cloud.gkemulticloud.v1.AttachedClusterGroup>(
+                adminGroups_);
+        bitField0_ |= 0x00000002;
+      }
+    }
+
+    private com.google.protobuf.RepeatedFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AttachedClusterGroup,
+            com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder,
+            com.google.cloud.gkemulticloud.v1.AttachedClusterGroupOrBuilder>
+        adminGroupsBuilder_;
+
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterGroup>
+        getAdminGroupsList() {
+      if (adminGroupsBuilder_ == null) {
+        return java.util.Collections.unmodifiableList(adminGroups_);
+      } else {
+        return adminGroupsBuilder_.getMessageList();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public int getAdminGroupsCount() {
+      if (adminGroupsBuilder_ == null) {
+        return adminGroups_.size();
+      } else {
+        return adminGroupsBuilder_.getCount();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedClusterGroup getAdminGroups(int index) {
+      if (adminGroupsBuilder_ == null) {
+        return adminGroups_.get(index);
+      } else {
+        return adminGroupsBuilder_.getMessage(index);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AttachedClusterGroup value) {
+      if (adminGroupsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureAdminGroupsIsMutable();
+        adminGroups_.set(index, value);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.setMessage(index, value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder builderForValue) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.set(index, builderForValue.build());
+        onChanged();
+      } else {
+        adminGroupsBuilder_.setMessage(index, builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(com.google.cloud.gkemulticloud.v1.AttachedClusterGroup value) {
+      if (adminGroupsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(value);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AttachedClusterGroup value) {
+      if (adminGroupsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(index, value);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(index, value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(
+        com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder builderForValue) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(builderForValue.build());
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder builderForValue) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(index, builderForValue.build());
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(index, builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAllAdminGroups(
+        java.lang.Iterable<? extends com.google.cloud.gkemulticloud.v1.AttachedClusterGroup>
+            values) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        com.google.protobuf.AbstractMessageLite.Builder.addAll(values, adminGroups_);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addAllMessages(values);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearAdminGroups() {
+      if (adminGroupsBuilder_ == null) {
+        adminGroups_ = java.util.Collections.emptyList();
+        bitField0_ = (bitField0_ & ~0x00000002);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.clear();
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder removeAdminGroups(int index) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.remove(index);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.remove(index);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder getAdminGroupsBuilder(
+        int index) {
+      return getAdminGroupsFieldBuilder().getBuilder(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedClusterGroupOrBuilder getAdminGroupsOrBuilder(
+        int index) {
+      if (adminGroupsBuilder_ == null) {
+        return adminGroups_.get(index);
+      } else {
+        return adminGroupsBuilder_.getMessageOrBuilder(index);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public java.util.List<? extends com.google.cloud.gkemulticloud.v1.AttachedClusterGroupOrBuilder>
+        getAdminGroupsOrBuilderList() {
+      if (adminGroupsBuilder_ != null) {
+        return adminGroupsBuilder_.getMessageOrBuilderList();
+      } else {
+        return java.util.Collections.unmodifiableList(adminGroups_);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder addAdminGroupsBuilder() {
+      return getAdminGroupsFieldBuilder()
+          .addBuilder(com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.getDefaultInstance());
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder addAdminGroupsBuilder(
+        int index) {
+      return getAdminGroupsFieldBuilder()
+          .addBuilder(
+              index, com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.getDefaultInstance());
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder>
+        getAdminGroupsBuilderList() {
+      return getAdminGroupsFieldBuilder().getBuilderList();
+    }
+
+    private com.google.protobuf.RepeatedFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AttachedClusterGroup,
+            com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder,
+            com.google.cloud.gkemulticloud.v1.AttachedClusterGroupOrBuilder>
+        getAdminGroupsFieldBuilder() {
+      if (adminGroupsBuilder_ == null) {
+        adminGroupsBuilder_ =
+            new com.google.protobuf.RepeatedFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.AttachedClusterGroup,
+                com.google.cloud.gkemulticloud.v1.AttachedClusterGroup.Builder,
+                com.google.cloud.gkemulticloud.v1.AttachedClusterGroupOrBuilder>(
+                adminGroups_, ((bitField0_ & 0x00000002) != 0), getParentForChildren(), isClean());
+        adminGroups_ = null;
+      }
+      return adminGroupsBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersAuthorizationOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersAuthorizationOrBuilder.java
index b7f978ebf78d..052b7dbc5482 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersAuthorizationOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedClustersAuthorizationOrBuilder.java
@@ -27,7 +27,7 @@ public interface AttachedClustersAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -36,7 +36,7 @@ public interface AttachedClustersAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterUser> getAdminUsersList();
@@ -44,7 +44,7 @@ public interface AttachedClustersAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -53,7 +53,7 @@ public interface AttachedClustersAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   com.google.cloud.gkemulticloud.v1.AttachedClusterUser getAdminUsers(int index);
@@ -61,7 +61,7 @@ public interface AttachedClustersAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -70,7 +70,7 @@ public interface AttachedClustersAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   int getAdminUsersCount();
@@ -78,7 +78,7 @@ public interface AttachedClustersAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -87,7 +87,7 @@ public interface AttachedClustersAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   java.util.List<? extends com.google.cloud.gkemulticloud.v1.AttachedClusterUserOrBuilder>
@@ -96,7 +96,7 @@ public interface AttachedClustersAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -105,8 +105,96 @@ public interface AttachedClustersAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   com.google.cloud.gkemulticloud.v1.AttachedClusterUserOrBuilder getAdminUsersOrBuilder(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  java.util.List<com.google.cloud.gkemulticloud.v1.AttachedClusterGroup> getAdminGroupsList();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AttachedClusterGroup getAdminGroups(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  int getAdminGroupsCount();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  java.util.List<? extends com.google.cloud.gkemulticloud.v1.AttachedClusterGroupOrBuilder>
+      getAdminGroupsOrBuilderList();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AttachedClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AttachedClusterGroupOrBuilder getAdminGroupsOrBuilder(
+      int index);
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedProxyConfig.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedProxyConfig.java
new file mode 100644
index 000000000000..fdb942b48570
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedProxyConfig.java
@@ -0,0 +1,736 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/attached_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * Details of a proxy config.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.AttachedProxyConfig}
+ */
+public final class AttachedProxyConfig extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.AttachedProxyConfig)
+    AttachedProxyConfigOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use AttachedProxyConfig.newBuilder() to construct.
+  private AttachedProxyConfig(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private AttachedProxyConfig() {}
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new AttachedProxyConfig();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AttachedProxyConfig_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AttachedProxyConfig_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.class,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder.class);
+  }
+
+  public static final int KUBERNETES_SECRET_FIELD_NUMBER = 1;
+  private com.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetesSecret_;
+  /**
+   *
+   *
+   * <pre>
+   * The Kubernetes Secret resource that contains the HTTP(S) proxy
+   * configuration. The secret must be a JSON encoded proxy configuration
+   * as described in
+   * </pre>
+   *
+   * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+   *
+   * @return Whether the kubernetesSecret field is set.
+   */
+  @java.lang.Override
+  public boolean hasKubernetesSecret() {
+    return kubernetesSecret_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The Kubernetes Secret resource that contains the HTTP(S) proxy
+   * configuration. The secret must be a JSON encoded proxy configuration
+   * as described in
+   * </pre>
+   *
+   * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+   *
+   * @return The kubernetesSecret.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.KubernetesSecret getKubernetesSecret() {
+    return kubernetesSecret_ == null
+        ? com.google.cloud.gkemulticloud.v1.KubernetesSecret.getDefaultInstance()
+        : kubernetesSecret_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The Kubernetes Secret resource that contains the HTTP(S) proxy
+   * configuration. The secret must be a JSON encoded proxy configuration
+   * as described in
+   * </pre>
+   *
+   * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.KubernetesSecretOrBuilder
+      getKubernetesSecretOrBuilder() {
+    return kubernetesSecret_ == null
+        ? com.google.cloud.gkemulticloud.v1.KubernetesSecret.getDefaultInstance()
+        : kubernetesSecret_;
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (kubernetesSecret_ != null) {
+      output.writeMessage(1, getKubernetesSecret());
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (kubernetesSecret_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(1, getKubernetesSecret());
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.AttachedProxyConfig)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.AttachedProxyConfig other =
+        (com.google.cloud.gkemulticloud.v1.AttachedProxyConfig) obj;
+
+    if (hasKubernetesSecret() != other.hasKubernetesSecret()) return false;
+    if (hasKubernetesSecret()) {
+      if (!getKubernetesSecret().equals(other.getKubernetesSecret())) return false;
+    }
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    if (hasKubernetesSecret()) {
+      hash = (37 * hash) + KUBERNETES_SECRET_FIELD_NUMBER;
+      hash = (53 * hash) + getKubernetesSecret().hashCode();
+    }
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.AttachedProxyConfig prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Details of a proxy config.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.AttachedProxyConfig}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.AttachedProxyConfig)
+      com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AttachedProxyConfig_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AttachedProxyConfig_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.class,
+              com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      kubernetesSecret_ = null;
+      if (kubernetesSecretBuilder_ != null) {
+        kubernetesSecretBuilder_.dispose();
+        kubernetesSecretBuilder_ = null;
+      }
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AttachedProxyConfig_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig build() {
+      com.google.cloud.gkemulticloud.v1.AttachedProxyConfig result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig buildPartial() {
+      com.google.cloud.gkemulticloud.v1.AttachedProxyConfig result =
+          new com.google.cloud.gkemulticloud.v1.AttachedProxyConfig(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.AttachedProxyConfig result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.kubernetesSecret_ =
+            kubernetesSecretBuilder_ == null ? kubernetesSecret_ : kubernetesSecretBuilder_.build();
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.AttachedProxyConfig) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.AttachedProxyConfig) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AttachedProxyConfig other) {
+      if (other == com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance())
+        return this;
+      if (other.hasKubernetesSecret()) {
+        mergeKubernetesSecret(other.getKubernetesSecret());
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                input.readMessage(
+                    getKubernetesSecretFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private com.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetesSecret_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.KubernetesSecret,
+            com.google.cloud.gkemulticloud.v1.KubernetesSecret.Builder,
+            com.google.cloud.gkemulticloud.v1.KubernetesSecretOrBuilder>
+        kubernetesSecretBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * The Kubernetes Secret resource that contains the HTTP(S) proxy
+     * configuration. The secret must be a JSON encoded proxy configuration
+     * as described in
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+     *
+     * @return Whether the kubernetesSecret field is set.
+     */
+    public boolean hasKubernetesSecret() {
+      return ((bitField0_ & 0x00000001) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The Kubernetes Secret resource that contains the HTTP(S) proxy
+     * configuration. The secret must be a JSON encoded proxy configuration
+     * as described in
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+     *
+     * @return The kubernetesSecret.
+     */
+    public com.google.cloud.gkemulticloud.v1.KubernetesSecret getKubernetesSecret() {
+      if (kubernetesSecretBuilder_ == null) {
+        return kubernetesSecret_ == null
+            ? com.google.cloud.gkemulticloud.v1.KubernetesSecret.getDefaultInstance()
+            : kubernetesSecret_;
+      } else {
+        return kubernetesSecretBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The Kubernetes Secret resource that contains the HTTP(S) proxy
+     * configuration. The secret must be a JSON encoded proxy configuration
+     * as described in
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+     */
+    public Builder setKubernetesSecret(com.google.cloud.gkemulticloud.v1.KubernetesSecret value) {
+      if (kubernetesSecretBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        kubernetesSecret_ = value;
+      } else {
+        kubernetesSecretBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The Kubernetes Secret resource that contains the HTTP(S) proxy
+     * configuration. The secret must be a JSON encoded proxy configuration
+     * as described in
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+     */
+    public Builder setKubernetesSecret(
+        com.google.cloud.gkemulticloud.v1.KubernetesSecret.Builder builderForValue) {
+      if (kubernetesSecretBuilder_ == null) {
+        kubernetesSecret_ = builderForValue.build();
+      } else {
+        kubernetesSecretBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The Kubernetes Secret resource that contains the HTTP(S) proxy
+     * configuration. The secret must be a JSON encoded proxy configuration
+     * as described in
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+     */
+    public Builder mergeKubernetesSecret(com.google.cloud.gkemulticloud.v1.KubernetesSecret value) {
+      if (kubernetesSecretBuilder_ == null) {
+        if (((bitField0_ & 0x00000001) != 0)
+            && kubernetesSecret_ != null
+            && kubernetesSecret_
+                != com.google.cloud.gkemulticloud.v1.KubernetesSecret.getDefaultInstance()) {
+          getKubernetesSecretBuilder().mergeFrom(value);
+        } else {
+          kubernetesSecret_ = value;
+        }
+      } else {
+        kubernetesSecretBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The Kubernetes Secret resource that contains the HTTP(S) proxy
+     * configuration. The secret must be a JSON encoded proxy configuration
+     * as described in
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+     */
+    public Builder clearKubernetesSecret() {
+      bitField0_ = (bitField0_ & ~0x00000001);
+      kubernetesSecret_ = null;
+      if (kubernetesSecretBuilder_ != null) {
+        kubernetesSecretBuilder_.dispose();
+        kubernetesSecretBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The Kubernetes Secret resource that contains the HTTP(S) proxy
+     * configuration. The secret must be a JSON encoded proxy configuration
+     * as described in
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.KubernetesSecret.Builder getKubernetesSecretBuilder() {
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return getKubernetesSecretFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The Kubernetes Secret resource that contains the HTTP(S) proxy
+     * configuration. The secret must be a JSON encoded proxy configuration
+     * as described in
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.KubernetesSecretOrBuilder
+        getKubernetesSecretOrBuilder() {
+      if (kubernetesSecretBuilder_ != null) {
+        return kubernetesSecretBuilder_.getMessageOrBuilder();
+      } else {
+        return kubernetesSecret_ == null
+            ? com.google.cloud.gkemulticloud.v1.KubernetesSecret.getDefaultInstance()
+            : kubernetesSecret_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The Kubernetes Secret resource that contains the HTTP(S) proxy
+     * configuration. The secret must be a JSON encoded proxy configuration
+     * as described in
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.KubernetesSecret,
+            com.google.cloud.gkemulticloud.v1.KubernetesSecret.Builder,
+            com.google.cloud.gkemulticloud.v1.KubernetesSecretOrBuilder>
+        getKubernetesSecretFieldBuilder() {
+      if (kubernetesSecretBuilder_ == null) {
+        kubernetesSecretBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.KubernetesSecret,
+                com.google.cloud.gkemulticloud.v1.KubernetesSecret.Builder,
+                com.google.cloud.gkemulticloud.v1.KubernetesSecretOrBuilder>(
+                getKubernetesSecret(), getParentForChildren(), isClean());
+        kubernetesSecret_ = null;
+      }
+      return kubernetesSecretBuilder_;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.AttachedProxyConfig)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.AttachedProxyConfig)
+  private static final com.google.cloud.gkemulticloud.v1.AttachedProxyConfig DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.AttachedProxyConfig();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<AttachedProxyConfig> PARSER =
+      new com.google.protobuf.AbstractParser<AttachedProxyConfig>() {
+        @java.lang.Override
+        public AttachedProxyConfig parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<AttachedProxyConfig> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<AttachedProxyConfig> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedProxyConfigOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedProxyConfigOrBuilder.java
new file mode 100644
index 000000000000..999eb805e1a8
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedProxyConfigOrBuilder.java
@@ -0,0 +1,66 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/attached_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface AttachedProxyConfigOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.AttachedProxyConfig)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * The Kubernetes Secret resource that contains the HTTP(S) proxy
+   * configuration. The secret must be a JSON encoded proxy configuration
+   * as described in
+   * </pre>
+   *
+   * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+   *
+   * @return Whether the kubernetesSecret field is set.
+   */
+  boolean hasKubernetesSecret();
+  /**
+   *
+   *
+   * <pre>
+   * The Kubernetes Secret resource that contains the HTTP(S) proxy
+   * configuration. The secret must be a JSON encoded proxy configuration
+   * as described in
+   * </pre>
+   *
+   * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+   *
+   * @return The kubernetesSecret.
+   */
+  com.google.cloud.gkemulticloud.v1.KubernetesSecret getKubernetesSecret();
+  /**
+   *
+   *
+   * <pre>
+   * The Kubernetes Secret resource that contains the HTTP(S) proxy
+   * configuration. The secret must be a JSON encoded proxy configuration
+   * as described in
+   * </pre>
+   *
+   * <code>.google.cloud.gkemulticloud.v1.KubernetesSecret kubernetes_secret = 1;</code>
+   */
+  com.google.cloud.gkemulticloud.v1.KubernetesSecretOrBuilder getKubernetesSecretOrBuilder();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedResourcesProto.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedResourcesProto.java
index 03a7f31039dc..35291b3331bf 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedResourcesProto.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedResourcesProto.java
@@ -43,6 +43,10 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_AttachedClusterUser_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_AttachedClusterUser_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_AttachedClusterGroup_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_AttachedClusterGroup_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_AttachedOidcConfig_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -59,6 +63,14 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_AttachedClusterError_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_AttachedClusterError_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_AttachedProxyConfig_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_AttachedProxyConfig_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_KubernetesSecret_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_KubernetesSecret_fieldAccessorTable;
 
   public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     return descriptor;
@@ -73,7 +85,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "loud.v1\032\037google/api/field_behavior.proto"
           + "\032\031google/api/resource.proto\0324google/clou"
           + "d/gkemulticloud/v1/common_resources.prot"
-          + "o\032\037google/protobuf/timestamp.proto\"\336\n\n\017A"
+          + "o\032\037google/protobuf/timestamp.proto\"\206\014\n\017A"
           + "ttachedCluster\022\014\n\004name\030\001 \001(\t\022\031\n\013descript"
           + "ion\030\002 \001(\tB\004\342A\001\001\022L\n\013oidc_config\030\003 \001(\01321.g"
           + "oogle.cloud.gkemulticloud.v1.AttachedOid"
@@ -100,35 +112,46 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "(\0132<.google.cloud.gkemulticloud.v1.Attac"
           + "hedClustersAuthorizationB\004\342A\001\001\022P\n\021monito"
           + "ring_config\030\027 \001(\0132/.google.cloud.gkemult"
-          + "icloud.v1.MonitoringConfigB\004\342A\001\001\0322\n\020Anno"
-          + "tationsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t"
-          + ":\0028\001\"u\n\005State\022\025\n\021STATE_UNSPECIFIED\020\000\022\020\n\014"
-          + "PROVISIONING\020\001\022\013\n\007RUNNING\020\002\022\017\n\013RECONCILI"
-          + "NG\020\003\022\014\n\010STOPPING\020\004\022\t\n\005ERROR\020\005\022\014\n\010DEGRADE"
-          + "D\020\006:~\352A{\n,gkemulticloud.googleapis.com/A"
-          + "ttachedCluster\022Kprojects/{project}/locat"
-          + "ions/{location}/attachedClusters/{attach"
-          + "ed_cluster}\"n\n\035AttachedClustersAuthoriza"
-          + "tion\022M\n\013admin_users\030\001 \003(\01322.google.cloud"
-          + ".gkemulticloud.v1.AttachedClusterUserB\004\342"
-          + "A\001\002\"-\n\023AttachedClusterUser\022\026\n\010username\030\001"
-          + " \001(\tB\004\342A\001\002\"<\n\022AttachedOidcConfig\022\022\n\nissu"
-          + "er_url\030\001 \001(\t\022\022\n\004jwks\030\002 \001(\014B\004\342A\001\001\"\356\001\n\024Att"
-          + "achedServerConfig\022\014\n\004name\030\001 \001(\t\022R\n\016valid"
-          + "_versions\030\002 \003(\0132:.google.cloud.gkemultic"
-          + "loud.v1.AttachedPlatformVersionInfo:t\352Aq"
-          + "\n1gkemulticloud.googleapis.com/AttachedS"
-          + "erverConfig\022<projects/{project}/location"
-          + "s/{location}/attachedServerConfig\".\n\033Att"
-          + "achedPlatformVersionInfo\022\017\n\007version\030\001 \001("
-          + "\t\"\'\n\024AttachedClusterError\022\017\n\007message\030\001 \001"
-          + "(\tB\351\001\n!com.google.cloud.gkemulticloud.v1"
-          + "B\026AttachedResourcesProtoP\001ZGcloud.google"
-          + ".com/go/gkemulticloud/apiv1/gkemulticlou"
-          + "dpb;gkemulticloudpb\252\002\035Google.Cloud.GkeMu"
-          + "ltiCloud.V1\312\002\035Google\\Cloud\\GkeMultiCloud"
-          + "\\V1\352\002 Google::Cloud::GkeMultiCloud::V1b\006"
-          + "proto3"
+          + "icloud.v1.MonitoringConfigB\004\342A\001\001\022N\n\014prox"
+          + "y_config\030\030 \001(\01322.google.cloud.gkemulticl"
+          + "oud.v1.AttachedProxyConfigB\004\342A\001\001\022V\n\024bina"
+          + "ry_authorization\030\031 \001(\01322.google.cloud.gk"
+          + "emulticloud.v1.BinaryAuthorizationB\004\342A\001\001"
+          + "\0322\n\020AnnotationsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005val"
+          + "ue\030\002 \001(\t:\0028\001\"u\n\005State\022\025\n\021STATE_UNSPECIFI"
+          + "ED\020\000\022\020\n\014PROVISIONING\020\001\022\013\n\007RUNNING\020\002\022\017\n\013R"
+          + "ECONCILING\020\003\022\014\n\010STOPPING\020\004\022\t\n\005ERROR\020\005\022\014\n"
+          + "\010DEGRADED\020\006:~\352A{\n,gkemulticloud.googleap"
+          + "is.com/AttachedCluster\022Kprojects/{projec"
+          + "t}/locations/{location}/attachedClusters"
+          + "/{attached_cluster}\"\277\001\n\035AttachedClusters"
+          + "Authorization\022M\n\013admin_users\030\001 \003(\01322.goo"
+          + "gle.cloud.gkemulticloud.v1.AttachedClust"
+          + "erUserB\004\342A\001\001\022O\n\014admin_groups\030\002 \003(\01323.goo"
+          + "gle.cloud.gkemulticloud.v1.AttachedClust"
+          + "erGroupB\004\342A\001\001\"-\n\023AttachedClusterUser\022\026\n\010"
+          + "username\030\001 \001(\tB\004\342A\001\002\"+\n\024AttachedClusterG"
+          + "roup\022\023\n\005group\030\001 \001(\tB\004\342A\001\002\"<\n\022AttachedOid"
+          + "cConfig\022\022\n\nissuer_url\030\001 \001(\t\022\022\n\004jwks\030\002 \001("
+          + "\014B\004\342A\001\001\"\356\001\n\024AttachedServerConfig\022\014\n\004name"
+          + "\030\001 \001(\t\022R\n\016valid_versions\030\002 \003(\0132:.google."
+          + "cloud.gkemulticloud.v1.AttachedPlatformV"
+          + "ersionInfo:t\352Aq\n1gkemulticloud.googleapi"
+          + "s.com/AttachedServerConfig\022<projects/{pr"
+          + "oject}/locations/{location}/attachedServ"
+          + "erConfig\".\n\033AttachedPlatformVersionInfo\022"
+          + "\017\n\007version\030\001 \001(\t\"\'\n\024AttachedClusterError"
+          + "\022\017\n\007message\030\001 \001(\t\"a\n\023AttachedProxyConfig"
+          + "\022J\n\021kubernetes_secret\030\001 \001(\0132/.google.clo"
+          + "ud.gkemulticloud.v1.KubernetesSecret\"3\n\020"
+          + "KubernetesSecret\022\014\n\004name\030\001 \001(\t\022\021\n\tnamesp"
+          + "ace\030\002 \001(\tB\351\001\n!com.google.cloud.gkemultic"
+          + "loud.v1B\026AttachedResourcesProtoP\001ZGcloud"
+          + ".google.com/go/gkemulticloud/apiv1/gkemu"
+          + "lticloudpb;gkemulticloudpb\252\002\035Google.Clou"
+          + "d.GkeMultiCloud.V1\312\002\035Google\\Cloud\\GkeMul"
+          + "tiCloud\\V1\352\002 Google::Cloud::GkeMultiClou"
+          + "d::V1b\006proto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -165,6 +188,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Errors",
               "Authorization",
               "MonitoringConfig",
+              "ProxyConfig",
+              "BinaryAuthorization",
             });
     internal_static_google_cloud_gkemulticloud_v1_AttachedCluster_AnnotationsEntry_descriptor =
         internal_static_google_cloud_gkemulticloud_v1_AttachedCluster_descriptor
@@ -182,7 +207,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AttachedClustersAuthorization_descriptor,
             new java.lang.String[] {
-              "AdminUsers",
+              "AdminUsers", "AdminGroups",
             });
     internal_static_google_cloud_gkemulticloud_v1_AttachedClusterUser_descriptor =
         getDescriptor().getMessageTypes().get(2);
@@ -192,8 +217,16 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
             new java.lang.String[] {
               "Username",
             });
-    internal_static_google_cloud_gkemulticloud_v1_AttachedOidcConfig_descriptor =
+    internal_static_google_cloud_gkemulticloud_v1_AttachedClusterGroup_descriptor =
         getDescriptor().getMessageTypes().get(3);
+    internal_static_google_cloud_gkemulticloud_v1_AttachedClusterGroup_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_AttachedClusterGroup_descriptor,
+            new java.lang.String[] {
+              "Group",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_AttachedOidcConfig_descriptor =
+        getDescriptor().getMessageTypes().get(4);
     internal_static_google_cloud_gkemulticloud_v1_AttachedOidcConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AttachedOidcConfig_descriptor,
@@ -201,7 +234,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "IssuerUrl", "Jwks",
             });
     internal_static_google_cloud_gkemulticloud_v1_AttachedServerConfig_descriptor =
-        getDescriptor().getMessageTypes().get(4);
+        getDescriptor().getMessageTypes().get(5);
     internal_static_google_cloud_gkemulticloud_v1_AttachedServerConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AttachedServerConfig_descriptor,
@@ -209,7 +242,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Name", "ValidVersions",
             });
     internal_static_google_cloud_gkemulticloud_v1_AttachedPlatformVersionInfo_descriptor =
-        getDescriptor().getMessageTypes().get(5);
+        getDescriptor().getMessageTypes().get(6);
     internal_static_google_cloud_gkemulticloud_v1_AttachedPlatformVersionInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AttachedPlatformVersionInfo_descriptor,
@@ -217,13 +250,29 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Version",
             });
     internal_static_google_cloud_gkemulticloud_v1_AttachedClusterError_descriptor =
-        getDescriptor().getMessageTypes().get(6);
+        getDescriptor().getMessageTypes().get(7);
     internal_static_google_cloud_gkemulticloud_v1_AttachedClusterError_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AttachedClusterError_descriptor,
             new java.lang.String[] {
               "Message",
             });
+    internal_static_google_cloud_gkemulticloud_v1_AttachedProxyConfig_descriptor =
+        getDescriptor().getMessageTypes().get(8);
+    internal_static_google_cloud_gkemulticloud_v1_AttachedProxyConfig_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_AttachedProxyConfig_descriptor,
+            new java.lang.String[] {
+              "KubernetesSecret",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_KubernetesSecret_descriptor =
+        getDescriptor().getMessageTypes().get(9);
+    internal_static_google_cloud_gkemulticloud_v1_KubernetesSecret_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_KubernetesSecret_descriptor,
+            new java.lang.String[] {
+              "Name", "Namespace",
+            });
     com.google.protobuf.ExtensionRegistry registry =
         com.google.protobuf.ExtensionRegistry.newInstance();
     registry.add(com.google.api.FieldBehaviorProto.fieldBehavior);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedServiceProto.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedServiceProto.java
index 01e7c7a228a5..bb7abc136798 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedServiceProto.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AttachedServiceProto.java
@@ -67,6 +67,14 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_GetAttachedServerConfigRequest_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_GetAttachedServerConfigRequest_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenRequest_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenRequest_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenResponse_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenResponse_fieldAccessorTable;
 
   public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     return descriptor;
@@ -82,107 +90,131 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "gle/api/client.proto\032\037google/api/field_b"
           + "ehavior.proto\032\031google/api/resource.proto"
           + "\0326google/cloud/gkemulticloud/v1/attached"
-          + "_resources.proto\032#google/longrunning/ope"
-          + "rations.proto\032 google/protobuf/field_mas"
-          + "k.proto\"\271\001\n-GenerateAttachedClusterInsta"
-          + "llManifestRequest\022E\n\006parent\030\001 \001(\tB5\342A\001\002\372"
-          + "A.\022,gkemulticloud.googleapis.com/Attache"
-          + "dCluster\022!\n\023attached_cluster_id\030\002 \001(\tB\004\342"
-          + "A\001\002\022\036\n\020platform_version\030\003 \001(\tB\004\342A\001\002\"B\n.G"
-          + "enerateAttachedClusterInstallManifestRes"
-          + "ponse\022\020\n\010manifest\030\001 \001(\t\"\357\001\n\034CreateAttach"
-          + "edClusterRequest\022E\n\006parent\030\001 \001(\tB5\342A\001\002\372A"
-          + ".\022,gkemulticloud.googleapis.com/Attached"
-          + "Cluster\022N\n\020attached_cluster\030\002 \001(\0132..goog"
-          + "le.cloud.gkemulticloud.v1.AttachedCluste"
-          + "rB\004\342A\001\002\022!\n\023attached_cluster_id\030\003 \001(\tB\004\342A"
-          + "\001\002\022\025\n\rvalidate_only\030\004 \001(\010\"\330\001\n\034ImportAtta"
-          + "chedClusterRequest\022E\n\006parent\030\001 \001(\tB5\342A\001\002"
-          + "\372A.\022,gkemulticloud.googleapis.com/Attach"
-          + "edCluster\022\025\n\rvalidate_only\030\002 \001(\010\022\036\n\020flee"
-          + "t_membership\030\003 \001(\tB\004\342A\001\002\022\036\n\020platform_ver"
-          + "sion\030\004 \001(\tB\004\342A\001\002\022\032\n\014distribution\030\005 \001(\tB\004"
-          + "\342A\001\002\"\274\001\n\034UpdateAttachedClusterRequest\022N\n"
-          + "\020attached_cluster\030\001 \001(\0132..google.cloud.g"
-          + "kemulticloud.v1.AttachedClusterB\004\342A\001\002\022\025\n"
-          + "\rvalidate_only\030\002 \001(\010\0225\n\013update_mask\030\003 \001("
-          + "\0132\032.google.protobuf.FieldMaskB\004\342A\001\002\"`\n\031G"
-          + "etAttachedClusterRequest\022C\n\004name\030\001 \001(\tB5"
-          + "\342A\001\002\372A.\n,gkemulticloud.googleapis.com/At"
-          + "tachedCluster\"\213\001\n\033ListAttachedClustersRe"
-          + "quest\022E\n\006parent\030\001 \001(\tB5\342A\001\002\372A.\022,gkemulti"
-          + "cloud.googleapis.com/AttachedCluster\022\021\n\t"
-          + "page_size\030\002 \001(\005\022\022\n\npage_token\030\003 \001(\t\"\202\001\n\034"
-          + "ListAttachedClustersResponse\022I\n\021attached"
-          + "_clusters\030\001 \003(\0132..google.cloud.gkemultic"
-          + "loud.v1.AttachedCluster\022\027\n\017next_page_tok"
-          + "en\030\002 \001(\t\"\266\001\n\034DeleteAttachedClusterReques"
-          + "t\022C\n\004name\030\001 \001(\tB5\342A\001\002\372A.\n,gkemulticloud."
-          + "googleapis.com/AttachedCluster\022\025\n\rvalida"
-          + "te_only\030\002 \001(\010\022\025\n\rallow_missing\030\003 \001(\010\022\025\n\r"
-          + "ignore_errors\030\005 \001(\010\022\014\n\004etag\030\004 \001(\t\"j\n\036Get"
-          + "AttachedServerConfigRequest\022H\n\004name\030\001 \001("
-          + "\tB:\342A\001\002\372A3\n1gkemulticloud.googleapis.com"
-          + "/AttachedServerConfig2\265\020\n\020AttachedCluste"
-          + "rs\022\231\002\n\025CreateAttachedCluster\022;.google.cl"
-          + "oud.gkemulticloud.v1.CreateAttachedClust"
-          + "erRequest\032\035.google.longrunning.Operation"
-          + "\"\243\001\312A$\n\017AttachedCluster\022\021OperationMetada"
-          + "ta\332A+parent,attached_cluster,attached_cl"
-          + "uster_id\202\323\344\223\002H\"4/v1/{parent=projects/*/l"
-          + "ocations/*}/attachedClusters:\020attached_c"
-          + "luster\022\233\002\n\025UpdateAttachedCluster\022;.googl"
-          + "e.cloud.gkemulticloud.v1.UpdateAttachedC"
-          + "lusterRequest\032\035.google.longrunning.Opera"
-          + "tion\"\245\001\312A$\n\017AttachedCluster\022\021OperationMe"
-          + "tadata\332A\034attached_cluster,update_mask\202\323\344"
-          + "\223\002Y2E/v1/{attached_cluster.name=projects"
-          + "/*/locations/*/attachedClusters/*}:\020atta"
-          + "ched_cluster\022\375\001\n\025ImportAttachedCluster\022;"
-          + ".google.cloud.gkemulticloud.v1.ImportAtt"
-          + "achedClusterRequest\032\035.google.longrunning"
-          + ".Operation\"\207\001\312A$\n\017AttachedCluster\022\021Opera"
-          + "tionMetadata\332A\027parent,fleet_membership\202\323"
-          + "\344\223\002@\";/v1/{parent=projects/*/locations/*"
-          + "}/attachedClusters:import:\001*\022\303\001\n\022GetAtta"
-          + "chedCluster\0228.google.cloud.gkemulticloud"
-          + ".v1.GetAttachedClusterRequest\032..google.c"
-          + "loud.gkemulticloud.v1.AttachedCluster\"C\332"
-          + "A\004name\202\323\344\223\0026\0224/v1/{name=projects/*/locat"
-          + "ions/*/attachedClusters/*}\022\326\001\n\024ListAttac"
-          + "hedClusters\022:.google.cloud.gkemulticloud"
-          + ".v1.ListAttachedClustersRequest\032;.google"
-          + ".cloud.gkemulticloud.v1.ListAttachedClus"
-          + "tersResponse\"E\332A\006parent\202\323\344\223\0026\0224/v1/{pare"
-          + "nt=projects/*/locations/*}/attachedClust"
-          + "ers\022\345\001\n\025DeleteAttachedCluster\022;.google.c"
-          + "loud.gkemulticloud.v1.DeleteAttachedClus"
-          + "terRequest\032\035.google.longrunning.Operatio"
-          + "n\"p\312A*\n\025google.protobuf.Empty\022\021Operation"
-          + "Metadata\332A\004name\202\323\344\223\0026*4/v1/{name=project"
-          + "s/*/locations/*/attachedClusters/*}\022\324\001\n\027"
-          + "GetAttachedServerConfig\022=.google.cloud.g"
-          + "kemulticloud.v1.GetAttachedServerConfigR"
-          + "equest\0323.google.cloud.gkemulticloud.v1.A"
-          + "ttachedServerConfig\"E\332A\004name\202\323\344\223\0028\0226/v1/"
-          + "{name=projects/*/locations/*/attachedSer"
-          + "verConfig}\022\266\002\n&GenerateAttachedClusterIn"
-          + "stallManifest\022L.google.cloud.gkemulticlo"
-          + "ud.v1.GenerateAttachedClusterInstallMani"
-          + "festRequest\032M.google.cloud.gkemulticloud"
-          + ".v1.GenerateAttachedClusterInstallManife"
-          + "stResponse\"o\332A\032parent,attached_cluster_i"
-          + "d\202\323\344\223\002L\022J/v1/{parent=projects/*/location"
-          + "s/*}:generateAttachedClusterInstallManif"
-          + "est\032P\312A\034gkemulticloud.googleapis.com\322A.h"
-          + "ttps://www.googleapis.com/auth/cloud-pla"
-          + "tformB\347\001\n!com.google.cloud.gkemulticloud"
-          + ".v1B\024AttachedServiceProtoP\001ZGcloud.googl"
-          + "e.com/go/gkemulticloud/apiv1/gkemulticlo"
-          + "udpb;gkemulticloudpb\252\002\035Google.Cloud.GkeM"
-          + "ultiCloud.V1\312\002\035Google\\Cloud\\GkeMultiClou"
-          + "d\\V1\352\002 Google::Cloud::GkeMultiCloud::V1b"
-          + "\006proto3"
+          + "_resources.proto\0324google/cloud/gkemultic"
+          + "loud/v1/common_resources.proto\032#google/l"
+          + "ongrunning/operations.proto\032\033google/prot"
+          + "obuf/empty.proto\032 google/protobuf/field_"
+          + "mask.proto\"\211\002\n-GenerateAttachedClusterIn"
+          + "stallManifestRequest\022E\n\006parent\030\001 \001(\tB5\342A"
+          + "\001\002\372A.\022,gkemulticloud.googleapis.com/Atta"
+          + "chedCluster\022!\n\023attached_cluster_id\030\002 \001(\t"
+          + "B\004\342A\001\002\022\036\n\020platform_version\030\003 \001(\tB\004\342A\001\002\022N"
+          + "\n\014proxy_config\030\004 \001(\01322.google.cloud.gkem"
+          + "ulticloud.v1.AttachedProxyConfigB\004\342A\001\001\"B"
+          + "\n.GenerateAttachedClusterInstallManifest"
+          + "Response\022\020\n\010manifest\030\001 \001(\t\"\357\001\n\034CreateAtt"
+          + "achedClusterRequest\022E\n\006parent\030\001 \001(\tB5\342A\001"
+          + "\002\372A.\022,gkemulticloud.googleapis.com/Attac"
+          + "hedCluster\022N\n\020attached_cluster\030\002 \001(\0132..g"
+          + "oogle.cloud.gkemulticloud.v1.AttachedClu"
+          + "sterB\004\342A\001\002\022!\n\023attached_cluster_id\030\003 \001(\tB"
+          + "\004\342A\001\002\022\025\n\rvalidate_only\030\004 \001(\010\"\250\002\n\034ImportA"
+          + "ttachedClusterRequest\022E\n\006parent\030\001 \001(\tB5\342"
+          + "A\001\002\372A.\022,gkemulticloud.googleapis.com/Att"
+          + "achedCluster\022\025\n\rvalidate_only\030\002 \001(\010\022\036\n\020f"
+          + "leet_membership\030\003 \001(\tB\004\342A\001\002\022\036\n\020platform_"
+          + "version\030\004 \001(\tB\004\342A\001\002\022\032\n\014distribution\030\005 \001("
+          + "\tB\004\342A\001\002\022N\n\014proxy_config\030\006 \001(\01322.google.c"
+          + "loud.gkemulticloud.v1.AttachedProxyConfi"
+          + "gB\004\342A\001\001\"\274\001\n\034UpdateAttachedClusterRequest"
+          + "\022N\n\020attached_cluster\030\001 \001(\0132..google.clou"
+          + "d.gkemulticloud.v1.AttachedClusterB\004\342A\001\002"
+          + "\022\025\n\rvalidate_only\030\002 \001(\010\0225\n\013update_mask\030\003"
+          + " \001(\0132\032.google.protobuf.FieldMaskB\004\342A\001\002\"`"
+          + "\n\031GetAttachedClusterRequest\022C\n\004name\030\001 \001("
+          + "\tB5\342A\001\002\372A.\n,gkemulticloud.googleapis.com"
+          + "/AttachedCluster\"\213\001\n\033ListAttachedCluster"
+          + "sRequest\022E\n\006parent\030\001 \001(\tB5\342A\001\002\372A.\022,gkemu"
+          + "lticloud.googleapis.com/AttachedCluster\022"
+          + "\021\n\tpage_size\030\002 \001(\005\022\022\n\npage_token\030\003 \001(\t\"\202"
+          + "\001\n\034ListAttachedClustersResponse\022I\n\021attac"
+          + "hed_clusters\030\001 \003(\0132..google.cloud.gkemul"
+          + "ticloud.v1.AttachedCluster\022\027\n\017next_page_"
+          + "token\030\002 \001(\t\"\266\001\n\034DeleteAttachedClusterReq"
+          + "uest\022C\n\004name\030\001 \001(\tB5\342A\001\002\372A.\n,gkemulticlo"
+          + "ud.googleapis.com/AttachedCluster\022\025\n\rval"
+          + "idate_only\030\002 \001(\010\022\025\n\rallow_missing\030\003 \001(\010\022"
+          + "\025\n\rignore_errors\030\005 \001(\010\022\014\n\004etag\030\004 \001(\t\"j\n\036"
+          + "GetAttachedServerConfigRequest\022H\n\004name\030\001"
+          + " \001(\tB:\342A\001\002\372A3\n1gkemulticloud.googleapis."
+          + "com/AttachedServerConfig\"\323\002\n(GenerateAtt"
+          + "achedClusterAgentTokenRequest\022O\n\020attache"
+          + "d_cluster\030\001 \001(\tB5\342A\001\002\372A.\n,gkemulticloud."
+          + "googleapis.com/AttachedCluster\022\033\n\rsubjec"
+          + "t_token\030\002 \001(\tB\004\342A\001\002\022 \n\022subject_token_typ"
+          + "e\030\003 \001(\tB\004\342A\001\002\022\025\n\007version\030\004 \001(\tB\004\342A\001\002\022\030\n\n"
+          + "grant_type\030\006 \001(\tB\004\342A\001\001\022\026\n\010audience\030\007 \001(\t"
+          + "B\004\342A\001\001\022\023\n\005scope\030\010 \001(\tB\004\342A\001\001\022\"\n\024requested"
+          + "_token_type\030\t \001(\tB\004\342A\001\001\022\025\n\007options\030\n \001(\t"
+          + "B\004\342A\001\001\"i\n)GenerateAttachedClusterAgentTo"
+          + "kenResponse\022\024\n\014access_token\030\001 \001(\t\022\022\n\nexp"
+          + "ires_in\030\002 \001(\005\022\022\n\ntoken_type\030\003 \001(\t2\335\022\n\020At"
+          + "tachedClusters\022\231\002\n\025CreateAttachedCluster"
+          + "\022;.google.cloud.gkemulticloud.v1.CreateA"
+          + "ttachedClusterRequest\032\035.google.longrunni"
+          + "ng.Operation\"\243\001\312A$\n\017AttachedCluster\022\021Ope"
+          + "rationMetadata\332A+parent,attached_cluster"
+          + ",attached_cluster_id\202\323\344\223\002H\"4/v1/{parent="
+          + "projects/*/locations/*}/attachedClusters"
+          + ":\020attached_cluster\022\233\002\n\025UpdateAttachedClu"
+          + "ster\022;.google.cloud.gkemulticloud.v1.Upd"
+          + "ateAttachedClusterRequest\032\035.google.longr"
+          + "unning.Operation\"\245\001\312A$\n\017AttachedCluster\022"
+          + "\021OperationMetadata\332A\034attached_cluster,up"
+          + "date_mask\202\323\344\223\002Y2E/v1/{attached_cluster.n"
+          + "ame=projects/*/locations/*/attachedClust"
+          + "ers/*}:\020attached_cluster\022\375\001\n\025ImportAttac"
+          + "hedCluster\022;.google.cloud.gkemulticloud."
+          + "v1.ImportAttachedClusterRequest\032\035.google"
+          + ".longrunning.Operation\"\207\001\312A$\n\017AttachedCl"
+          + "uster\022\021OperationMetadata\332A\027parent,fleet_"
+          + "membership\202\323\344\223\002@\";/v1/{parent=projects/*"
+          + "/locations/*}/attachedClusters:import:\001*"
+          + "\022\303\001\n\022GetAttachedCluster\0228.google.cloud.g"
+          + "kemulticloud.v1.GetAttachedClusterReques"
+          + "t\032..google.cloud.gkemulticloud.v1.Attach"
+          + "edCluster\"C\332A\004name\202\323\344\223\0026\0224/v1/{name=proj"
+          + "ects/*/locations/*/attachedClusters/*}\022\326"
+          + "\001\n\024ListAttachedClusters\022:.google.cloud.g"
+          + "kemulticloud.v1.ListAttachedClustersRequ"
+          + "est\032;.google.cloud.gkemulticloud.v1.List"
+          + "AttachedClustersResponse\"E\332A\006parent\202\323\344\223\002"
+          + "6\0224/v1/{parent=projects/*/locations/*}/a"
+          + "ttachedClusters\022\345\001\n\025DeleteAttachedCluste"
+          + "r\022;.google.cloud.gkemulticloud.v1.Delete"
+          + "AttachedClusterRequest\032\035.google.longrunn"
+          + "ing.Operation\"p\312A*\n\025google.protobuf.Empt"
+          + "y\022\021OperationMetadata\332A\004name\202\323\344\223\0026*4/v1/{"
+          + "name=projects/*/locations/*/attachedClus"
+          + "ters/*}\022\324\001\n\027GetAttachedServerConfig\022=.go"
+          + "ogle.cloud.gkemulticloud.v1.GetAttachedS"
+          + "erverConfigRequest\0323.google.cloud.gkemul"
+          + "ticloud.v1.AttachedServerConfig\"E\332A\004name"
+          + "\202\323\344\223\0028\0226/v1/{name=projects/*/locations/*"
+          + "/attachedServerConfig}\022\266\002\n&GenerateAttac"
+          + "hedClusterInstallManifest\022L.google.cloud"
+          + ".gkemulticloud.v1.GenerateAttachedCluste"
+          + "rInstallManifestRequest\032M.google.cloud.g"
+          + "kemulticloud.v1.GenerateAttachedClusterI"
+          + "nstallManifestResponse\"o\332A\032parent,attach"
+          + "ed_cluster_id\202\323\344\223\002L\022J/v1/{parent=project"
+          + "s/*/locations/*}:generateAttachedCluster"
+          + "InstallManifest\022\245\002\n!GenerateAttachedClus"
+          + "terAgentToken\022G.google.cloud.gkemulticlo"
+          + "ud.v1.GenerateAttachedClusterAgentTokenR"
+          + "equest\032H.google.cloud.gkemulticloud.v1.G"
+          + "enerateAttachedClusterAgentTokenResponse"
+          + "\"m\202\323\344\223\002g\"b/v1/{attached_cluster=projects"
+          + "/*/locations/*/attachedClusters/*}:gener"
+          + "ateAttachedClusterAgentToken:\001*\032P\312A\034gkem"
+          + "ulticloud.googleapis.com\322A.https://www.g"
+          + "oogleapis.com/auth/cloud-platformB\347\001\n!co"
+          + "m.google.cloud.gkemulticloud.v1B\024Attache"
+          + "dServiceProtoP\001ZGcloud.google.com/go/gke"
+          + "multicloud/apiv1/gkemulticloudpb;gkemult"
+          + "icloudpb\252\002\035Google.Cloud.GkeMultiCloud.V1"
+          + "\312\002\035Google\\Cloud\\GkeMultiCloud\\V1\352\002 Googl"
+          + "e::Cloud::GkeMultiCloud::V1b\006proto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -193,7 +225,9 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               com.google.api.FieldBehaviorProto.getDescriptor(),
               com.google.api.ResourceProto.getDescriptor(),
               com.google.cloud.gkemulticloud.v1.AttachedResourcesProto.getDescriptor(),
+              com.google.cloud.gkemulticloud.v1.CommonResourcesProto.getDescriptor(),
               com.google.longrunning.OperationsProto.getDescriptor(),
+              com.google.protobuf.EmptyProto.getDescriptor(),
               com.google.protobuf.FieldMaskProto.getDescriptor(),
             });
     internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterInstallManifestRequest_descriptor =
@@ -202,7 +236,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterInstallManifestRequest_descriptor,
             new java.lang.String[] {
-              "Parent", "AttachedClusterId", "PlatformVersion",
+              "Parent", "AttachedClusterId", "PlatformVersion", "ProxyConfig",
             });
     internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterInstallManifestResponse_descriptor =
         getDescriptor().getMessageTypes().get(1);
@@ -226,7 +260,12 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_ImportAttachedClusterRequest_descriptor,
             new java.lang.String[] {
-              "Parent", "ValidateOnly", "FleetMembership", "PlatformVersion", "Distribution",
+              "Parent",
+              "ValidateOnly",
+              "FleetMembership",
+              "PlatformVersion",
+              "Distribution",
+              "ProxyConfig",
             });
     internal_static_google_cloud_gkemulticloud_v1_UpdateAttachedClusterRequest_descriptor =
         getDescriptor().getMessageTypes().get(4);
@@ -276,6 +315,30 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
             new java.lang.String[] {
               "Name",
             });
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenRequest_descriptor =
+        getDescriptor().getMessageTypes().get(10);
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenRequest_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenRequest_descriptor,
+            new java.lang.String[] {
+              "AttachedCluster",
+              "SubjectToken",
+              "SubjectTokenType",
+              "Version",
+              "GrantType",
+              "Audience",
+              "Scope",
+              "RequestedTokenType",
+              "Options",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenResponse_descriptor =
+        getDescriptor().getMessageTypes().get(11);
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenResponse_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenResponse_descriptor,
+            new java.lang.String[] {
+              "AccessToken", "ExpiresIn", "TokenType",
+            });
     com.google.protobuf.ExtensionRegistry registry =
         com.google.protobuf.ExtensionRegistry.newInstance();
     registry.add(com.google.api.ClientProto.defaultHost);
@@ -292,7 +355,9 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     com.google.api.FieldBehaviorProto.getDescriptor();
     com.google.api.ResourceProto.getDescriptor();
     com.google.cloud.gkemulticloud.v1.AttachedResourcesProto.getDescriptor();
+    com.google.cloud.gkemulticloud.v1.CommonResourcesProto.getDescriptor();
     com.google.longrunning.OperationsProto.getDescriptor();
+    com.google.protobuf.EmptyProto.getDescriptor();
     com.google.protobuf.FieldMaskProto.getDescriptor();
   }
 
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsAuthorization.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsAuthorization.java
index e576008d8a98..d93704f7d74a 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsAuthorization.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsAuthorization.java
@@ -39,6 +39,7 @@ private AwsAuthorization(com.google.protobuf.GeneratedMessageV3.Builder<?> build
 
   private AwsAuthorization() {
     adminUsers_ = java.util.Collections.emptyList();
+    adminGroups_ = java.util.Collections.emptyList();
   }
 
   @java.lang.Override
@@ -70,7 +71,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -79,7 +80,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -90,7 +91,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterUser> getAdmin
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -99,7 +100,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterUser> getAdmin
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -111,7 +112,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterUser> getAdmin
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -120,7 +121,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterUser> getAdmin
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -131,7 +132,7 @@ public int getAdminUsersCount() {
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -140,7 +141,7 @@ public int getAdminUsersCount() {
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -151,7 +152,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser getAdminUsers(int index)
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -160,7 +161,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser getAdminUsers(int index)
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -169,6 +170,113 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUserOrBuilder getAdminUsersOr
     return adminUsers_.get(index);
   }
 
+  public static final int ADMIN_GROUPS_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterGroup> adminGroups_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterGroup> getAdminGroupsList() {
+    return adminGroups_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public java.util.List<? extends com.google.cloud.gkemulticloud.v1.AwsClusterGroupOrBuilder>
+      getAdminGroupsOrBuilderList() {
+    return adminGroups_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public int getAdminGroupsCount() {
+    return adminGroups_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AwsClusterGroup getAdminGroups(int index) {
+    return adminGroups_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AwsClusterGroupOrBuilder getAdminGroupsOrBuilder(
+      int index) {
+    return adminGroups_.get(index);
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -186,6 +294,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     for (int i = 0; i < adminUsers_.size(); i++) {
       output.writeMessage(1, adminUsers_.get(i));
     }
+    for (int i = 0; i < adminGroups_.size(); i++) {
+      output.writeMessage(2, adminGroups_.get(i));
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -198,6 +309,9 @@ public int getSerializedSize() {
     for (int i = 0; i < adminUsers_.size(); i++) {
       size += com.google.protobuf.CodedOutputStream.computeMessageSize(1, adminUsers_.get(i));
     }
+    for (int i = 0; i < adminGroups_.size(); i++) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(2, adminGroups_.get(i));
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -215,6 +329,7 @@ public boolean equals(final java.lang.Object obj) {
         (com.google.cloud.gkemulticloud.v1.AwsAuthorization) obj;
 
     if (!getAdminUsersList().equals(other.getAdminUsersList())) return false;
+    if (!getAdminGroupsList().equals(other.getAdminGroupsList())) return false;
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -230,6 +345,10 @@ public int hashCode() {
       hash = (37 * hash) + ADMIN_USERS_FIELD_NUMBER;
       hash = (53 * hash) + getAdminUsersList().hashCode();
     }
+    if (getAdminGroupsCount() > 0) {
+      hash = (37 * hash) + ADMIN_GROUPS_FIELD_NUMBER;
+      hash = (53 * hash) + getAdminGroupsList().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -376,6 +495,13 @@ public Builder clear() {
         adminUsersBuilder_.clear();
       }
       bitField0_ = (bitField0_ & ~0x00000001);
+      if (adminGroupsBuilder_ == null) {
+        adminGroups_ = java.util.Collections.emptyList();
+      } else {
+        adminGroups_ = null;
+        adminGroupsBuilder_.clear();
+      }
+      bitField0_ = (bitField0_ & ~0x00000002);
       return this;
     }
 
@@ -422,6 +548,15 @@ private void buildPartialRepeatedFields(
       } else {
         result.adminUsers_ = adminUsersBuilder_.build();
       }
+      if (adminGroupsBuilder_ == null) {
+        if (((bitField0_ & 0x00000002) != 0)) {
+          adminGroups_ = java.util.Collections.unmodifiableList(adminGroups_);
+          bitField0_ = (bitField0_ & ~0x00000002);
+        }
+        result.adminGroups_ = adminGroups_;
+      } else {
+        result.adminGroups_ = adminGroupsBuilder_.build();
+      }
     }
 
     private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsAuthorization result) {
@@ -501,6 +636,33 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsAuthorization othe
           }
         }
       }
+      if (adminGroupsBuilder_ == null) {
+        if (!other.adminGroups_.isEmpty()) {
+          if (adminGroups_.isEmpty()) {
+            adminGroups_ = other.adminGroups_;
+            bitField0_ = (bitField0_ & ~0x00000002);
+          } else {
+            ensureAdminGroupsIsMutable();
+            adminGroups_.addAll(other.adminGroups_);
+          }
+          onChanged();
+        }
+      } else {
+        if (!other.adminGroups_.isEmpty()) {
+          if (adminGroupsBuilder_.isEmpty()) {
+            adminGroupsBuilder_.dispose();
+            adminGroupsBuilder_ = null;
+            adminGroups_ = other.adminGroups_;
+            bitField0_ = (bitField0_ & ~0x00000002);
+            adminGroupsBuilder_ =
+                com.google.protobuf.GeneratedMessageV3.alwaysUseFieldBuilders
+                    ? getAdminGroupsFieldBuilder()
+                    : null;
+          } else {
+            adminGroupsBuilder_.addAllMessages(other.adminGroups_);
+          }
+        }
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -541,6 +703,20 @@ public Builder mergeFrom(
                 }
                 break;
               } // case 10
+            case 18:
+              {
+                com.google.cloud.gkemulticloud.v1.AwsClusterGroup m =
+                    input.readMessage(
+                        com.google.cloud.gkemulticloud.v1.AwsClusterGroup.parser(),
+                        extensionRegistry);
+                if (adminGroupsBuilder_ == null) {
+                  ensureAdminGroupsIsMutable();
+                  adminGroups_.add(m);
+                } else {
+                  adminGroupsBuilder_.addMessage(m);
+                }
+                break;
+              } // case 18
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -581,7 +757,7 @@ private void ensureAdminUsersIsMutable() {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -590,7 +766,7 @@ private void ensureAdminUsersIsMutable() {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterUser> getAdminUsersList() {
@@ -604,7 +780,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterUser> getAdmin
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -613,7 +789,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterUser> getAdmin
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public int getAdminUsersCount() {
@@ -627,7 +803,7 @@ public int getAdminUsersCount() {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -636,7 +812,7 @@ public int getAdminUsersCount() {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AwsClusterUser getAdminUsers(int index) {
@@ -650,7 +826,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser getAdminUsers(int index)
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -659,7 +835,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser getAdminUsers(int index)
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder setAdminUsers(
@@ -680,7 +856,7 @@ public Builder setAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -689,7 +865,7 @@ public Builder setAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder setAdminUsers(
@@ -707,7 +883,7 @@ public Builder setAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -716,7 +892,7 @@ public Builder setAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(com.google.cloud.gkemulticloud.v1.AwsClusterUser value) {
@@ -736,7 +912,7 @@ public Builder addAdminUsers(com.google.cloud.gkemulticloud.v1.AwsClusterUser va
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -745,7 +921,7 @@ public Builder addAdminUsers(com.google.cloud.gkemulticloud.v1.AwsClusterUser va
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(
@@ -766,7 +942,7 @@ public Builder addAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -775,7 +951,7 @@ public Builder addAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(
@@ -793,7 +969,7 @@ public Builder addAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -802,7 +978,7 @@ public Builder addAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(
@@ -820,7 +996,7 @@ public Builder addAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -829,7 +1005,7 @@ public Builder addAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAllAdminUsers(
@@ -847,7 +1023,7 @@ public Builder addAllAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -856,7 +1032,7 @@ public Builder addAllAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder clearAdminUsers() {
@@ -873,7 +1049,7 @@ public Builder clearAdminUsers() {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -882,7 +1058,7 @@ public Builder clearAdminUsers() {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder removeAdminUsers(int index) {
@@ -899,7 +1075,7 @@ public Builder removeAdminUsers(int index) {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -908,7 +1084,7 @@ public Builder removeAdminUsers(int index) {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder getAdminUsersBuilder(
@@ -919,7 +1095,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder getAdminUsersBui
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -928,7 +1104,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder getAdminUsersBui
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AwsClusterUserOrBuilder getAdminUsersOrBuilder(
@@ -943,7 +1119,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUserOrBuilder getAdminUsersOr
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -952,7 +1128,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUserOrBuilder getAdminUsersOr
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public java.util.List<? extends com.google.cloud.gkemulticloud.v1.AwsClusterUserOrBuilder>
@@ -967,7 +1143,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUserOrBuilder getAdminUsersOr
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -976,7 +1152,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUserOrBuilder getAdminUsersOr
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder addAdminUsersBuilder() {
@@ -987,7 +1163,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder addAdminUsersBui
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -996,7 +1172,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder addAdminUsersBui
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder addAdminUsersBuilder(
@@ -1008,7 +1184,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder addAdminUsersBui
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -1017,7 +1193,7 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder addAdminUsersBui
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder>
@@ -1042,6 +1218,490 @@ public com.google.cloud.gkemulticloud.v1.AwsClusterUser.Builder addAdminUsersBui
       return adminUsersBuilder_;
     }
 
+    private java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterGroup> adminGroups_ =
+        java.util.Collections.emptyList();
+
+    private void ensureAdminGroupsIsMutable() {
+      if (!((bitField0_ & 0x00000002) != 0)) {
+        adminGroups_ =
+            new java.util.ArrayList<com.google.cloud.gkemulticloud.v1.AwsClusterGroup>(
+                adminGroups_);
+        bitField0_ |= 0x00000002;
+      }
+    }
+
+    private com.google.protobuf.RepeatedFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AwsClusterGroup,
+            com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder,
+            com.google.cloud.gkemulticloud.v1.AwsClusterGroupOrBuilder>
+        adminGroupsBuilder_;
+
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterGroup> getAdminGroupsList() {
+      if (adminGroupsBuilder_ == null) {
+        return java.util.Collections.unmodifiableList(adminGroups_);
+      } else {
+        return adminGroupsBuilder_.getMessageList();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public int getAdminGroupsCount() {
+      if (adminGroupsBuilder_ == null) {
+        return adminGroups_.size();
+      } else {
+        return adminGroupsBuilder_.getCount();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AwsClusterGroup getAdminGroups(int index) {
+      if (adminGroupsBuilder_ == null) {
+        return adminGroups_.get(index);
+      } else {
+        return adminGroupsBuilder_.getMessage(index);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AwsClusterGroup value) {
+      if (adminGroupsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureAdminGroupsIsMutable();
+        adminGroups_.set(index, value);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.setMessage(index, value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder builderForValue) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.set(index, builderForValue.build());
+        onChanged();
+      } else {
+        adminGroupsBuilder_.setMessage(index, builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(com.google.cloud.gkemulticloud.v1.AwsClusterGroup value) {
+      if (adminGroupsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(value);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AwsClusterGroup value) {
+      if (adminGroupsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(index, value);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(index, value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(
+        com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder builderForValue) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(builderForValue.build());
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder builderForValue) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(index, builderForValue.build());
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(index, builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAllAdminGroups(
+        java.lang.Iterable<? extends com.google.cloud.gkemulticloud.v1.AwsClusterGroup> values) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        com.google.protobuf.AbstractMessageLite.Builder.addAll(values, adminGroups_);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addAllMessages(values);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearAdminGroups() {
+      if (adminGroupsBuilder_ == null) {
+        adminGroups_ = java.util.Collections.emptyList();
+        bitField0_ = (bitField0_ & ~0x00000002);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.clear();
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder removeAdminGroups(int index) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.remove(index);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.remove(index);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder getAdminGroupsBuilder(
+        int index) {
+      return getAdminGroupsFieldBuilder().getBuilder(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AwsClusterGroupOrBuilder getAdminGroupsOrBuilder(
+        int index) {
+      if (adminGroupsBuilder_ == null) {
+        return adminGroups_.get(index);
+      } else {
+        return adminGroupsBuilder_.getMessageOrBuilder(index);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public java.util.List<? extends com.google.cloud.gkemulticloud.v1.AwsClusterGroupOrBuilder>
+        getAdminGroupsOrBuilderList() {
+      if (adminGroupsBuilder_ != null) {
+        return adminGroupsBuilder_.getMessageOrBuilderList();
+      } else {
+        return java.util.Collections.unmodifiableList(adminGroups_);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder addAdminGroupsBuilder() {
+      return getAdminGroupsFieldBuilder()
+          .addBuilder(com.google.cloud.gkemulticloud.v1.AwsClusterGroup.getDefaultInstance());
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder addAdminGroupsBuilder(
+        int index) {
+      return getAdminGroupsFieldBuilder()
+          .addBuilder(
+              index, com.google.cloud.gkemulticloud.v1.AwsClusterGroup.getDefaultInstance());
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder>
+        getAdminGroupsBuilderList() {
+      return getAdminGroupsFieldBuilder().getBuilderList();
+    }
+
+    private com.google.protobuf.RepeatedFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AwsClusterGroup,
+            com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder,
+            com.google.cloud.gkemulticloud.v1.AwsClusterGroupOrBuilder>
+        getAdminGroupsFieldBuilder() {
+      if (adminGroupsBuilder_ == null) {
+        adminGroupsBuilder_ =
+            new com.google.protobuf.RepeatedFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.AwsClusterGroup,
+                com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder,
+                com.google.cloud.gkemulticloud.v1.AwsClusterGroupOrBuilder>(
+                adminGroups_, ((bitField0_ & 0x00000002) != 0), getParentForChildren(), isClean());
+        adminGroups_ = null;
+      }
+      return adminGroupsBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsAuthorizationOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsAuthorizationOrBuilder.java
index d5f73e3e1876..cf6237231c53 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsAuthorizationOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsAuthorizationOrBuilder.java
@@ -27,7 +27,7 @@ public interface AwsAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -36,7 +36,7 @@ public interface AwsAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterUser> getAdminUsersList();
@@ -44,7 +44,7 @@ public interface AwsAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -53,7 +53,7 @@ public interface AwsAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   com.google.cloud.gkemulticloud.v1.AwsClusterUser getAdminUsers(int index);
@@ -61,7 +61,7 @@ public interface AwsAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -70,7 +70,7 @@ public interface AwsAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   int getAdminUsersCount();
@@ -78,7 +78,7 @@ public interface AwsAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -87,7 +87,7 @@ public interface AwsAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   java.util.List<? extends com.google.cloud.gkemulticloud.v1.AwsClusterUserOrBuilder>
@@ -96,7 +96,7 @@ public interface AwsAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -105,8 +105,95 @@ public interface AwsAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   com.google.cloud.gkemulticloud.v1.AwsClusterUserOrBuilder getAdminUsersOrBuilder(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  java.util.List<com.google.cloud.gkemulticloud.v1.AwsClusterGroup> getAdminGroupsList();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AwsClusterGroup getAdminGroups(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  int getAdminGroupsCount();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  java.util.List<? extends com.google.cloud.gkemulticloud.v1.AwsClusterGroupOrBuilder>
+      getAdminGroupsOrBuilderList();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AwsClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AwsClusterGroupOrBuilder getAdminGroupsOrBuilder(int index);
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsCluster.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsCluster.java
index d5afbae5a8f4..b9bc623508d7 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsCluster.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsCluster.java
@@ -1490,6 +1490,63 @@ public com.google.cloud.gkemulticloud.v1.MonitoringConfig getMonitoringConfig()
         : monitoringConfig_;
   }
 
+  public static final int BINARY_AUTHORIZATION_FIELD_NUMBER = 22;
+  private com.google.cloud.gkemulticloud.v1.BinaryAuthorization binaryAuthorization_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the binaryAuthorization field is set.
+   */
+  @java.lang.Override
+  public boolean hasBinaryAuthorization() {
+    return binaryAuthorization_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The binaryAuthorization.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.BinaryAuthorization getBinaryAuthorization() {
+    return binaryAuthorization_ == null
+        ? com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance()
+        : binaryAuthorization_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder
+      getBinaryAuthorizationOrBuilder() {
+    return binaryAuthorization_ == null
+        ? com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance()
+        : binaryAuthorization_;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -1564,6 +1621,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (monitoringConfig_ != null) {
       output.writeMessage(21, getMonitoringConfig());
     }
+    if (binaryAuthorization_ != null) {
+      output.writeMessage(22, getBinaryAuthorization());
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -1642,6 +1702,10 @@ public int getSerializedSize() {
     if (monitoringConfig_ != null) {
       size += com.google.protobuf.CodedOutputStream.computeMessageSize(21, getMonitoringConfig());
     }
+    if (binaryAuthorization_ != null) {
+      size +=
+          com.google.protobuf.CodedOutputStream.computeMessageSize(22, getBinaryAuthorization());
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -1705,6 +1769,10 @@ public boolean equals(final java.lang.Object obj) {
     if (hasMonitoringConfig()) {
       if (!getMonitoringConfig().equals(other.getMonitoringConfig())) return false;
     }
+    if (hasBinaryAuthorization() != other.hasBinaryAuthorization()) return false;
+    if (hasBinaryAuthorization()) {
+      if (!getBinaryAuthorization().equals(other.getBinaryAuthorization())) return false;
+    }
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -1778,6 +1846,10 @@ public int hashCode() {
       hash = (37 * hash) + MONITORING_CONFIG_FIELD_NUMBER;
       hash = (53 * hash) + getMonitoringConfig().hashCode();
     }
+    if (hasBinaryAuthorization()) {
+      hash = (37 * hash) + BINARY_AUTHORIZATION_FIELD_NUMBER;
+      hash = (53 * hash) + getBinaryAuthorization().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -1999,6 +2071,11 @@ public Builder clear() {
         monitoringConfigBuilder_.dispose();
         monitoringConfigBuilder_ = null;
       }
+      binaryAuthorization_ = null;
+      if (binaryAuthorizationBuilder_ != null) {
+        binaryAuthorizationBuilder_.dispose();
+        binaryAuthorizationBuilder_ = null;
+      }
       return this;
     }
 
@@ -2113,6 +2190,12 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsCluster result)
         result.monitoringConfig_ =
             monitoringConfigBuilder_ == null ? monitoringConfig_ : monitoringConfigBuilder_.build();
       }
+      if (((from_bitField0_ & 0x00100000) != 0)) {
+        result.binaryAuthorization_ =
+            binaryAuthorizationBuilder_ == null
+                ? binaryAuthorization_
+                : binaryAuthorizationBuilder_.build();
+      }
     }
 
     @java.lang.Override
@@ -2257,6 +2340,9 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsCluster other) {
       if (other.hasMonitoringConfig()) {
         mergeMonitoringConfig(other.getMonitoringConfig());
       }
+      if (other.hasBinaryAuthorization()) {
+        mergeBinaryAuthorization(other.getBinaryAuthorization());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -2419,6 +2505,13 @@ public Builder mergeFrom(
                 bitField0_ |= 0x00080000;
                 break;
               } // case 170
+            case 178:
+              {
+                input.readMessage(
+                    getBinaryAuthorizationFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00100000;
+                break;
+              } // case 178
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -5860,6 +5953,213 @@ public com.google.cloud.gkemulticloud.v1.MonitoringConfig.Builder getMonitoringC
       return monitoringConfigBuilder_;
     }
 
+    private com.google.cloud.gkemulticloud.v1.BinaryAuthorization binaryAuthorization_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorization,
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder,
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder>
+        binaryAuthorizationBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the binaryAuthorization field is set.
+     */
+    public boolean hasBinaryAuthorization() {
+      return ((bitField0_ & 0x00100000) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The binaryAuthorization.
+     */
+    public com.google.cloud.gkemulticloud.v1.BinaryAuthorization getBinaryAuthorization() {
+      if (binaryAuthorizationBuilder_ == null) {
+        return binaryAuthorization_ == null
+            ? com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance()
+            : binaryAuthorization_;
+      } else {
+        return binaryAuthorizationBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setBinaryAuthorization(
+        com.google.cloud.gkemulticloud.v1.BinaryAuthorization value) {
+      if (binaryAuthorizationBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        binaryAuthorization_ = value;
+      } else {
+        binaryAuthorizationBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00100000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setBinaryAuthorization(
+        com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder builderForValue) {
+      if (binaryAuthorizationBuilder_ == null) {
+        binaryAuthorization_ = builderForValue.build();
+      } else {
+        binaryAuthorizationBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00100000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeBinaryAuthorization(
+        com.google.cloud.gkemulticloud.v1.BinaryAuthorization value) {
+      if (binaryAuthorizationBuilder_ == null) {
+        if (((bitField0_ & 0x00100000) != 0)
+            && binaryAuthorization_ != null
+            && binaryAuthorization_
+                != com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance()) {
+          getBinaryAuthorizationBuilder().mergeFrom(value);
+        } else {
+          binaryAuthorization_ = value;
+        }
+      } else {
+        binaryAuthorizationBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00100000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearBinaryAuthorization() {
+      bitField0_ = (bitField0_ & ~0x00100000);
+      binaryAuthorization_ = null;
+      if (binaryAuthorizationBuilder_ != null) {
+        binaryAuthorizationBuilder_.dispose();
+        binaryAuthorizationBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder
+        getBinaryAuthorizationBuilder() {
+      bitField0_ |= 0x00100000;
+      onChanged();
+      return getBinaryAuthorizationFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder
+        getBinaryAuthorizationOrBuilder() {
+      if (binaryAuthorizationBuilder_ != null) {
+        return binaryAuthorizationBuilder_.getMessageOrBuilder();
+      } else {
+        return binaryAuthorization_ == null
+            ? com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance()
+            : binaryAuthorization_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Binary Authorization configuration for this cluster.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorization,
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder,
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder>
+        getBinaryAuthorizationFieldBuilder() {
+      if (binaryAuthorizationBuilder_ == null) {
+        binaryAuthorizationBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.BinaryAuthorization,
+                com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder,
+                com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder>(
+                getBinaryAuthorization(), getParentForChildren(), isClean());
+        binaryAuthorization_ = null;
+      }
+      return binaryAuthorizationBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterGroup.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterGroup.java
new file mode 100644
index 000000000000..763de96e6283
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterGroup.java
@@ -0,0 +1,624 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * Identities of a group-type subject for AWS clusters.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.AwsClusterGroup}
+ */
+public final class AwsClusterGroup extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.AwsClusterGroup)
+    AwsClusterGroupOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use AwsClusterGroup.newBuilder() to construct.
+  private AwsClusterGroup(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private AwsClusterGroup() {
+    group_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new AwsClusterGroup();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AwsClusterGroup_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AwsClusterGroup_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.AwsClusterGroup.class,
+            com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder.class);
+  }
+
+  public static final int GROUP_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object group_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The group.
+   */
+  @java.lang.Override
+  public java.lang.String getGroup() {
+    java.lang.Object ref = group_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      group_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for group.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getGroupBytes() {
+    java.lang.Object ref = group_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      group_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(group_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, group_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(group_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, group_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.AwsClusterGroup)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.AwsClusterGroup other =
+        (com.google.cloud.gkemulticloud.v1.AwsClusterGroup) obj;
+
+    if (!getGroup().equals(other.getGroup())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + GROUP_FIELD_NUMBER;
+    hash = (53 * hash) + getGroup().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.AwsClusterGroup prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Identities of a group-type subject for AWS clusters.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.AwsClusterGroup}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.AwsClusterGroup)
+      com.google.cloud.gkemulticloud.v1.AwsClusterGroupOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsClusterGroup_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsClusterGroup_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.AwsClusterGroup.class,
+              com.google.cloud.gkemulticloud.v1.AwsClusterGroup.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.AwsClusterGroup.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      group_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsClusterGroup_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsClusterGroup getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsClusterGroup.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsClusterGroup build() {
+      com.google.cloud.gkemulticloud.v1.AwsClusterGroup result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsClusterGroup buildPartial() {
+      com.google.cloud.gkemulticloud.v1.AwsClusterGroup result =
+          new com.google.cloud.gkemulticloud.v1.AwsClusterGroup(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsClusterGroup result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.group_ = group_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.AwsClusterGroup) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.AwsClusterGroup) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsClusterGroup other) {
+      if (other == com.google.cloud.gkemulticloud.v1.AwsClusterGroup.getDefaultInstance())
+        return this;
+      if (!other.getGroup().isEmpty()) {
+        group_ = other.group_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                group_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object group_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The group.
+     */
+    public java.lang.String getGroup() {
+      java.lang.Object ref = group_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        group_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for group.
+     */
+    public com.google.protobuf.ByteString getGroupBytes() {
+      java.lang.Object ref = group_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        group_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The group to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGroup(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      group_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearGroup() {
+      group_ = getDefaultInstance().getGroup();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for group to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGroupBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      group_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.AwsClusterGroup)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.AwsClusterGroup)
+  private static final com.google.cloud.gkemulticloud.v1.AwsClusterGroup DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.AwsClusterGroup();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsClusterGroup getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<AwsClusterGroup> PARSER =
+      new com.google.protobuf.AbstractParser<AwsClusterGroup>() {
+        @java.lang.Override
+        public AwsClusterGroup parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<AwsClusterGroup> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<AwsClusterGroup> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AwsClusterGroup getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterGroupOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterGroupOrBuilder.java
new file mode 100644
index 000000000000..763839ee74d4
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterGroupOrBuilder.java
@@ -0,0 +1,50 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface AwsClusterGroupOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.AwsClusterGroup)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The group.
+   */
+  java.lang.String getGroup();
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for group.
+   */
+  com.google.protobuf.ByteString getGroupBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterNetworking.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterNetworking.java
index fb66faf1d263..3802b03cc8cc 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterNetworking.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterNetworking.java
@@ -280,6 +280,29 @@ public com.google.protobuf.ByteString getServiceAddressCidrBlocksBytes(int index
     return serviceAddressCidrBlocks_.getByteString(index);
   }
 
+  public static final int PER_NODE_POOL_SG_RULES_DISABLED_FIELD_NUMBER = 5;
+  private boolean perNodePoolSgRulesDisabled_ = false;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Disable the per node pool subnet security group rules on the
+   * control plane security group. When set to true, you must also provide one
+   * or more security groups that ensure node pools are able to send requests to
+   * the control plane on TCP/443 and TCP/8132. Failure to do so may result in
+   * unavailable node pools.
+   * </pre>
+   *
+   * <code>bool per_node_pool_sg_rules_disabled = 5 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The perNodePoolSgRulesDisabled.
+   */
+  @java.lang.Override
+  public boolean getPerNodePoolSgRulesDisabled() {
+    return perNodePoolSgRulesDisabled_;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -305,6 +328,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
       com.google.protobuf.GeneratedMessageV3.writeString(
           output, 3, serviceAddressCidrBlocks_.getRaw(i));
     }
+    if (perNodePoolSgRulesDisabled_ != false) {
+      output.writeBool(5, perNodePoolSgRulesDisabled_);
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -333,6 +359,9 @@ public int getSerializedSize() {
       size += dataSize;
       size += 1 * getServiceAddressCidrBlocksList().size();
     }
+    if (perNodePoolSgRulesDisabled_ != false) {
+      size += com.google.protobuf.CodedOutputStream.computeBoolSize(5, perNodePoolSgRulesDisabled_);
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -353,6 +382,7 @@ public boolean equals(final java.lang.Object obj) {
     if (!getPodAddressCidrBlocksList().equals(other.getPodAddressCidrBlocksList())) return false;
     if (!getServiceAddressCidrBlocksList().equals(other.getServiceAddressCidrBlocksList()))
       return false;
+    if (getPerNodePoolSgRulesDisabled() != other.getPerNodePoolSgRulesDisabled()) return false;
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -374,6 +404,8 @@ public int hashCode() {
       hash = (37 * hash) + SERVICE_ADDRESS_CIDR_BLOCKS_FIELD_NUMBER;
       hash = (53 * hash) + getServiceAddressCidrBlocksList().hashCode();
     }
+    hash = (37 * hash) + PER_NODE_POOL_SG_RULES_DISABLED_FIELD_NUMBER;
+    hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getPerNodePoolSgRulesDisabled());
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -520,6 +552,7 @@ public Builder clear() {
       vpcId_ = "";
       podAddressCidrBlocks_ = com.google.protobuf.LazyStringArrayList.emptyList();
       serviceAddressCidrBlocks_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      perNodePoolSgRulesDisabled_ = false;
       return this;
     }
 
@@ -567,6 +600,9 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsClusterNetworkin
         serviceAddressCidrBlocks_.makeImmutable();
         result.serviceAddressCidrBlocks_ = serviceAddressCidrBlocks_;
       }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.perNodePoolSgRulesDisabled_ = perNodePoolSgRulesDisabled_;
+      }
     }
 
     @java.lang.Override
@@ -640,6 +676,9 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsClusterNetworking
         }
         onChanged();
       }
+      if (other.getPerNodePoolSgRulesDisabled() != false) {
+        setPerNodePoolSgRulesDisabled(other.getPerNodePoolSgRulesDisabled());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -686,6 +725,12 @@ public Builder mergeFrom(
                 serviceAddressCidrBlocks_.add(s);
                 break;
               } // case 26
+            case 40:
+              {
+                perNodePoolSgRulesDisabled_ = input.readBool();
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 40
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -1238,6 +1283,74 @@ public Builder addServiceAddressCidrBlocksBytes(com.google.protobuf.ByteString v
       return this;
     }
 
+    private boolean perNodePoolSgRulesDisabled_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Disable the per node pool subnet security group rules on the
+     * control plane security group. When set to true, you must also provide one
+     * or more security groups that ensure node pools are able to send requests to
+     * the control plane on TCP/443 and TCP/8132. Failure to do so may result in
+     * unavailable node pools.
+     * </pre>
+     *
+     * <code>bool per_node_pool_sg_rules_disabled = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The perNodePoolSgRulesDisabled.
+     */
+    @java.lang.Override
+    public boolean getPerNodePoolSgRulesDisabled() {
+      return perNodePoolSgRulesDisabled_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Disable the per node pool subnet security group rules on the
+     * control plane security group. When set to true, you must also provide one
+     * or more security groups that ensure node pools are able to send requests to
+     * the control plane on TCP/443 and TCP/8132. Failure to do so may result in
+     * unavailable node pools.
+     * </pre>
+     *
+     * <code>bool per_node_pool_sg_rules_disabled = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @param value The perNodePoolSgRulesDisabled to set.
+     * @return This builder for chaining.
+     */
+    public Builder setPerNodePoolSgRulesDisabled(boolean value) {
+
+      perNodePoolSgRulesDisabled_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Disable the per node pool subnet security group rules on the
+     * control plane security group. When set to true, you must also provide one
+     * or more security groups that ensure node pools are able to send requests to
+     * the control plane on TCP/443 and TCP/8132. Failure to do so may result in
+     * unavailable node pools.
+     * </pre>
+     *
+     * <code>bool per_node_pool_sg_rules_disabled = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearPerNodePoolSgRulesDisabled() {
+      bitField0_ = (bitField0_ & ~0x00000008);
+      perNodePoolSgRulesDisabled_ = false;
+      onChanged();
+      return this;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterNetworkingOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterNetworkingOrBuilder.java
index 94ee836c2767..d1f239558c7e 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterNetworkingOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterNetworkingOrBuilder.java
@@ -183,4 +183,22 @@ public interface AwsClusterNetworkingOrBuilder
    * @return The bytes of the serviceAddressCidrBlocks at the given index.
    */
   com.google.protobuf.ByteString getServiceAddressCidrBlocksBytes(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Disable the per node pool subnet security group rules on the
+   * control plane security group. When set to true, you must also provide one
+   * or more security groups that ensure node pools are able to send requests to
+   * the control plane on TCP/443 and TCP/8132. Failure to do so may result in
+   * unavailable node pools.
+   * </pre>
+   *
+   * <code>bool per_node_pool_sg_rules_disabled = 5 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The perNodePoolSgRulesDisabled.
+   */
+  boolean getPerNodePoolSgRulesDisabled();
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterOrBuilder.java
index 6556753be71a..b913d66b7d70 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsClusterOrBuilder.java
@@ -800,4 +800,45 @@ java.lang.String getAnnotationsOrDefault(
    * </code>
    */
   com.google.cloud.gkemulticloud.v1.MonitoringConfigOrBuilder getMonitoringConfigOrBuilder();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the binaryAuthorization field is set.
+   */
+  boolean hasBinaryAuthorization();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The binaryAuthorization.
+   */
+  com.google.cloud.gkemulticloud.v1.BinaryAuthorization getBinaryAuthorization();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Binary Authorization configuration for this cluster.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.BinaryAuthorization binary_authorization = 22 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder getBinaryAuthorizationOrBuilder();
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsJsonWebKeys.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsJsonWebKeys.java
new file mode 100644
index 000000000000..a9987bf5afff
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsJsonWebKeys.java
@@ -0,0 +1,957 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * AwsJsonWebKeys is a valid JSON Web Key Set as specififed in RFC 7517.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.AwsJsonWebKeys}
+ */
+public final class AwsJsonWebKeys extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.AwsJsonWebKeys)
+    AwsJsonWebKeysOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use AwsJsonWebKeys.newBuilder() to construct.
+  private AwsJsonWebKeys(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private AwsJsonWebKeys() {
+    keys_ = java.util.Collections.emptyList();
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new AwsJsonWebKeys();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AwsJsonWebKeys_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AwsJsonWebKeys_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys.class,
+            com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys.Builder.class);
+  }
+
+  public static final int KEYS_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private java.util.List<com.google.cloud.gkemulticloud.v1.Jwk> keys_;
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  @java.lang.Override
+  public java.util.List<com.google.cloud.gkemulticloud.v1.Jwk> getKeysList() {
+    return keys_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  @java.lang.Override
+  public java.util.List<? extends com.google.cloud.gkemulticloud.v1.JwkOrBuilder>
+      getKeysOrBuilderList() {
+    return keys_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  @java.lang.Override
+  public int getKeysCount() {
+    return keys_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.Jwk getKeys(int index) {
+    return keys_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.JwkOrBuilder getKeysOrBuilder(int index) {
+    return keys_.get(index);
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    for (int i = 0; i < keys_.size(); i++) {
+      output.writeMessage(1, keys_.get(i));
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    for (int i = 0; i < keys_.size(); i++) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(1, keys_.get(i));
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys other =
+        (com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys) obj;
+
+    if (!getKeysList().equals(other.getKeysList())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    if (getKeysCount() > 0) {
+      hash = (37 * hash) + KEYS_FIELD_NUMBER;
+      hash = (53 * hash) + getKeysList().hashCode();
+    }
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseFrom(java.nio.ByteBuffer data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * AwsJsonWebKeys is a valid JSON Web Key Set as specififed in RFC 7517.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.AwsJsonWebKeys}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.AwsJsonWebKeys)
+      com.google.cloud.gkemulticloud.v1.AwsJsonWebKeysOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsJsonWebKeys_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsJsonWebKeys_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys.class,
+              com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      if (keysBuilder_ == null) {
+        keys_ = java.util.Collections.emptyList();
+      } else {
+        keys_ = null;
+        keysBuilder_.clear();
+      }
+      bitField0_ = (bitField0_ & ~0x00000001);
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsJsonWebKeys_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys build() {
+      com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys buildPartial() {
+      com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys result =
+          new com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys(this);
+      buildPartialRepeatedFields(result);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartialRepeatedFields(
+        com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys result) {
+      if (keysBuilder_ == null) {
+        if (((bitField0_ & 0x00000001) != 0)) {
+          keys_ = java.util.Collections.unmodifiableList(keys_);
+          bitField0_ = (bitField0_ & ~0x00000001);
+        }
+        result.keys_ = keys_;
+      } else {
+        result.keys_ = keysBuilder_.build();
+      }
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys result) {
+      int from_bitField0_ = bitField0_;
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys other) {
+      if (other == com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys.getDefaultInstance())
+        return this;
+      if (keysBuilder_ == null) {
+        if (!other.keys_.isEmpty()) {
+          if (keys_.isEmpty()) {
+            keys_ = other.keys_;
+            bitField0_ = (bitField0_ & ~0x00000001);
+          } else {
+            ensureKeysIsMutable();
+            keys_.addAll(other.keys_);
+          }
+          onChanged();
+        }
+      } else {
+        if (!other.keys_.isEmpty()) {
+          if (keysBuilder_.isEmpty()) {
+            keysBuilder_.dispose();
+            keysBuilder_ = null;
+            keys_ = other.keys_;
+            bitField0_ = (bitField0_ & ~0x00000001);
+            keysBuilder_ =
+                com.google.protobuf.GeneratedMessageV3.alwaysUseFieldBuilders
+                    ? getKeysFieldBuilder()
+                    : null;
+          } else {
+            keysBuilder_.addAllMessages(other.keys_);
+          }
+        }
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                com.google.cloud.gkemulticloud.v1.Jwk m =
+                    input.readMessage(
+                        com.google.cloud.gkemulticloud.v1.Jwk.parser(), extensionRegistry);
+                if (keysBuilder_ == null) {
+                  ensureKeysIsMutable();
+                  keys_.add(m);
+                } else {
+                  keysBuilder_.addMessage(m);
+                }
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.util.List<com.google.cloud.gkemulticloud.v1.Jwk> keys_ =
+        java.util.Collections.emptyList();
+
+    private void ensureKeysIsMutable() {
+      if (!((bitField0_ & 0x00000001) != 0)) {
+        keys_ = new java.util.ArrayList<com.google.cloud.gkemulticloud.v1.Jwk>(keys_);
+        bitField0_ |= 0x00000001;
+      }
+    }
+
+    private com.google.protobuf.RepeatedFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.Jwk,
+            com.google.cloud.gkemulticloud.v1.Jwk.Builder,
+            com.google.cloud.gkemulticloud.v1.JwkOrBuilder>
+        keysBuilder_;
+
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public java.util.List<com.google.cloud.gkemulticloud.v1.Jwk> getKeysList() {
+      if (keysBuilder_ == null) {
+        return java.util.Collections.unmodifiableList(keys_);
+      } else {
+        return keysBuilder_.getMessageList();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public int getKeysCount() {
+      if (keysBuilder_ == null) {
+        return keys_.size();
+      } else {
+        return keysBuilder_.getCount();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.Jwk getKeys(int index) {
+      if (keysBuilder_ == null) {
+        return keys_.get(index);
+      } else {
+        return keysBuilder_.getMessage(index);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder setKeys(int index, com.google.cloud.gkemulticloud.v1.Jwk value) {
+      if (keysBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureKeysIsMutable();
+        keys_.set(index, value);
+        onChanged();
+      } else {
+        keysBuilder_.setMessage(index, value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder setKeys(
+        int index, com.google.cloud.gkemulticloud.v1.Jwk.Builder builderForValue) {
+      if (keysBuilder_ == null) {
+        ensureKeysIsMutable();
+        keys_.set(index, builderForValue.build());
+        onChanged();
+      } else {
+        keysBuilder_.setMessage(index, builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder addKeys(com.google.cloud.gkemulticloud.v1.Jwk value) {
+      if (keysBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureKeysIsMutable();
+        keys_.add(value);
+        onChanged();
+      } else {
+        keysBuilder_.addMessage(value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder addKeys(int index, com.google.cloud.gkemulticloud.v1.Jwk value) {
+      if (keysBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureKeysIsMutable();
+        keys_.add(index, value);
+        onChanged();
+      } else {
+        keysBuilder_.addMessage(index, value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder addKeys(com.google.cloud.gkemulticloud.v1.Jwk.Builder builderForValue) {
+      if (keysBuilder_ == null) {
+        ensureKeysIsMutable();
+        keys_.add(builderForValue.build());
+        onChanged();
+      } else {
+        keysBuilder_.addMessage(builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder addKeys(
+        int index, com.google.cloud.gkemulticloud.v1.Jwk.Builder builderForValue) {
+      if (keysBuilder_ == null) {
+        ensureKeysIsMutable();
+        keys_.add(index, builderForValue.build());
+        onChanged();
+      } else {
+        keysBuilder_.addMessage(index, builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder addAllKeys(
+        java.lang.Iterable<? extends com.google.cloud.gkemulticloud.v1.Jwk> values) {
+      if (keysBuilder_ == null) {
+        ensureKeysIsMutable();
+        com.google.protobuf.AbstractMessageLite.Builder.addAll(values, keys_);
+        onChanged();
+      } else {
+        keysBuilder_.addAllMessages(values);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder clearKeys() {
+      if (keysBuilder_ == null) {
+        keys_ = java.util.Collections.emptyList();
+        bitField0_ = (bitField0_ & ~0x00000001);
+        onChanged();
+      } else {
+        keysBuilder_.clear();
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder removeKeys(int index) {
+      if (keysBuilder_ == null) {
+        ensureKeysIsMutable();
+        keys_.remove(index);
+        onChanged();
+      } else {
+        keysBuilder_.remove(index);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.Jwk.Builder getKeysBuilder(int index) {
+      return getKeysFieldBuilder().getBuilder(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.JwkOrBuilder getKeysOrBuilder(int index) {
+      if (keysBuilder_ == null) {
+        return keys_.get(index);
+      } else {
+        return keysBuilder_.getMessageOrBuilder(index);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public java.util.List<? extends com.google.cloud.gkemulticloud.v1.JwkOrBuilder>
+        getKeysOrBuilderList() {
+      if (keysBuilder_ != null) {
+        return keysBuilder_.getMessageOrBuilderList();
+      } else {
+        return java.util.Collections.unmodifiableList(keys_);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.Jwk.Builder addKeysBuilder() {
+      return getKeysFieldBuilder()
+          .addBuilder(com.google.cloud.gkemulticloud.v1.Jwk.getDefaultInstance());
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.Jwk.Builder addKeysBuilder(int index) {
+      return getKeysFieldBuilder()
+          .addBuilder(index, com.google.cloud.gkemulticloud.v1.Jwk.getDefaultInstance());
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public java.util.List<com.google.cloud.gkemulticloud.v1.Jwk.Builder> getKeysBuilderList() {
+      return getKeysFieldBuilder().getBuilderList();
+    }
+
+    private com.google.protobuf.RepeatedFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.Jwk,
+            com.google.cloud.gkemulticloud.v1.Jwk.Builder,
+            com.google.cloud.gkemulticloud.v1.JwkOrBuilder>
+        getKeysFieldBuilder() {
+      if (keysBuilder_ == null) {
+        keysBuilder_ =
+            new com.google.protobuf.RepeatedFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.Jwk,
+                com.google.cloud.gkemulticloud.v1.Jwk.Builder,
+                com.google.cloud.gkemulticloud.v1.JwkOrBuilder>(
+                keys_, ((bitField0_ & 0x00000001) != 0), getParentForChildren(), isClean());
+        keys_ = null;
+      }
+      return keysBuilder_;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.AwsJsonWebKeys)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.AwsJsonWebKeys)
+  private static final com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<AwsJsonWebKeys> PARSER =
+      new com.google.protobuf.AbstractParser<AwsJsonWebKeys>() {
+        @java.lang.Override
+        public AwsJsonWebKeys parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<AwsJsonWebKeys> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<AwsJsonWebKeys> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsJsonWebKeysOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsJsonWebKeysOrBuilder.java
new file mode 100644
index 000000000000..35f98bdd6fd7
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsJsonWebKeysOrBuilder.java
@@ -0,0 +1,81 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface AwsJsonWebKeysOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.AwsJsonWebKeys)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  java.util.List<com.google.cloud.gkemulticloud.v1.Jwk> getKeysList();
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  com.google.cloud.gkemulticloud.v1.Jwk getKeys(int index);
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  int getKeysCount();
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  java.util.List<? extends com.google.cloud.gkemulticloud.v1.JwkOrBuilder> getKeysOrBuilderList();
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  com.google.cloud.gkemulticloud.v1.JwkOrBuilder getKeysOrBuilder(int index);
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsK8sVersionInfo.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsK8sVersionInfo.java
index 81cf1930c557..6e036104056d 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsK8sVersionInfo.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsK8sVersionInfo.java
@@ -113,6 +113,148 @@ public com.google.protobuf.ByteString getVersionBytes() {
     }
   }
 
+  public static final int ENABLED_FIELD_NUMBER = 3;
+  private boolean enabled_ = false;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. True if the version is available for cluster creation. If a
+   * version is enabled for creation, it can be used to create new clusters.
+   * Otherwise, cluster creation will fail. However, cluster upgrade operations
+   * may succeed, even if the version is not enabled.
+   * </pre>
+   *
+   * <code>bool enabled = 3 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The enabled.
+   */
+  @java.lang.Override
+  public boolean getEnabled() {
+    return enabled_;
+  }
+
+  public static final int END_OF_LIFE_FIELD_NUMBER = 4;
+  private boolean endOfLife_ = false;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. True if this cluster version belongs to a minor version that has
+   * reached its end of life and is no longer in scope to receive security and
+   * bug fixes.
+   * </pre>
+   *
+   * <code>bool end_of_life = 4 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The endOfLife.
+   */
+  @java.lang.Override
+  public boolean getEndOfLife() {
+    return endOfLife_;
+  }
+
+  public static final int END_OF_LIFE_DATE_FIELD_NUMBER = 5;
+  private com.google.type.Date endOfLifeDate_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return Whether the endOfLifeDate field is set.
+   */
+  @java.lang.Override
+  public boolean hasEndOfLifeDate() {
+    return endOfLifeDate_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The endOfLifeDate.
+   */
+  @java.lang.Override
+  public com.google.type.Date getEndOfLifeDate() {
+    return endOfLifeDate_ == null ? com.google.type.Date.getDefaultInstance() : endOfLifeDate_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   */
+  @java.lang.Override
+  public com.google.type.DateOrBuilder getEndOfLifeDateOrBuilder() {
+    return endOfLifeDate_ == null ? com.google.type.Date.getDefaultInstance() : endOfLifeDate_;
+  }
+
+  public static final int RELEASE_DATE_FIELD_NUMBER = 6;
+  private com.google.type.Date releaseDate_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return Whether the releaseDate field is set.
+   */
+  @java.lang.Override
+  public boolean hasReleaseDate() {
+    return releaseDate_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The releaseDate.
+   */
+  @java.lang.Override
+  public com.google.type.Date getReleaseDate() {
+    return releaseDate_ == null ? com.google.type.Date.getDefaultInstance() : releaseDate_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   */
+  @java.lang.Override
+  public com.google.type.DateOrBuilder getReleaseDateOrBuilder() {
+    return releaseDate_ == null ? com.google.type.Date.getDefaultInstance() : releaseDate_;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -130,6 +272,18 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(version_)) {
       com.google.protobuf.GeneratedMessageV3.writeString(output, 1, version_);
     }
+    if (enabled_ != false) {
+      output.writeBool(3, enabled_);
+    }
+    if (endOfLife_ != false) {
+      output.writeBool(4, endOfLife_);
+    }
+    if (endOfLifeDate_ != null) {
+      output.writeMessage(5, getEndOfLifeDate());
+    }
+    if (releaseDate_ != null) {
+      output.writeMessage(6, getReleaseDate());
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -142,6 +296,18 @@ public int getSerializedSize() {
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(version_)) {
       size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, version_);
     }
+    if (enabled_ != false) {
+      size += com.google.protobuf.CodedOutputStream.computeBoolSize(3, enabled_);
+    }
+    if (endOfLife_ != false) {
+      size += com.google.protobuf.CodedOutputStream.computeBoolSize(4, endOfLife_);
+    }
+    if (endOfLifeDate_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(5, getEndOfLifeDate());
+    }
+    if (releaseDate_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(6, getReleaseDate());
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -159,6 +325,16 @@ public boolean equals(final java.lang.Object obj) {
         (com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfo) obj;
 
     if (!getVersion().equals(other.getVersion())) return false;
+    if (getEnabled() != other.getEnabled()) return false;
+    if (getEndOfLife() != other.getEndOfLife()) return false;
+    if (hasEndOfLifeDate() != other.hasEndOfLifeDate()) return false;
+    if (hasEndOfLifeDate()) {
+      if (!getEndOfLifeDate().equals(other.getEndOfLifeDate())) return false;
+    }
+    if (hasReleaseDate() != other.hasReleaseDate()) return false;
+    if (hasReleaseDate()) {
+      if (!getReleaseDate().equals(other.getReleaseDate())) return false;
+    }
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -172,6 +348,18 @@ public int hashCode() {
     hash = (19 * hash) + getDescriptor().hashCode();
     hash = (37 * hash) + VERSION_FIELD_NUMBER;
     hash = (53 * hash) + getVersion().hashCode();
+    hash = (37 * hash) + ENABLED_FIELD_NUMBER;
+    hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getEnabled());
+    hash = (37 * hash) + END_OF_LIFE_FIELD_NUMBER;
+    hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getEndOfLife());
+    if (hasEndOfLifeDate()) {
+      hash = (37 * hash) + END_OF_LIFE_DATE_FIELD_NUMBER;
+      hash = (53 * hash) + getEndOfLifeDate().hashCode();
+    }
+    if (hasReleaseDate()) {
+      hash = (37 * hash) + RELEASE_DATE_FIELD_NUMBER;
+      hash = (53 * hash) + getReleaseDate().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -312,6 +500,18 @@ public Builder clear() {
       super.clear();
       bitField0_ = 0;
       version_ = "";
+      enabled_ = false;
+      endOfLife_ = false;
+      endOfLifeDate_ = null;
+      if (endOfLifeDateBuilder_ != null) {
+        endOfLifeDateBuilder_.dispose();
+        endOfLifeDateBuilder_ = null;
+      }
+      releaseDate_ = null;
+      if (releaseDateBuilder_ != null) {
+        releaseDateBuilder_.dispose();
+        releaseDateBuilder_ = null;
+      }
       return this;
     }
 
@@ -351,6 +551,20 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfo r
       if (((from_bitField0_ & 0x00000001) != 0)) {
         result.version_ = version_;
       }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.enabled_ = enabled_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        result.endOfLife_ = endOfLife_;
+      }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.endOfLifeDate_ =
+            endOfLifeDateBuilder_ == null ? endOfLifeDate_ : endOfLifeDateBuilder_.build();
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
+        result.releaseDate_ =
+            releaseDateBuilder_ == null ? releaseDate_ : releaseDateBuilder_.build();
+      }
     }
 
     @java.lang.Override
@@ -404,6 +618,18 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfo oth
         bitField0_ |= 0x00000001;
         onChanged();
       }
+      if (other.getEnabled() != false) {
+        setEnabled(other.getEnabled());
+      }
+      if (other.getEndOfLife() != false) {
+        setEndOfLife(other.getEndOfLife());
+      }
+      if (other.hasEndOfLifeDate()) {
+        mergeEndOfLifeDate(other.getEndOfLifeDate());
+      }
+      if (other.hasReleaseDate()) {
+        mergeReleaseDate(other.getReleaseDate());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -436,6 +662,30 @@ public Builder mergeFrom(
                 bitField0_ |= 0x00000001;
                 break;
               } // case 10
+            case 24:
+              {
+                enabled_ = input.readBool();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 24
+            case 32:
+              {
+                endOfLife_ = input.readBool();
+                bitField0_ |= 0x00000004;
+                break;
+              } // case 32
+            case 42:
+              {
+                input.readMessage(getEndOfLifeDateFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 42
+            case 50:
+              {
+                input.readMessage(getReleaseDateFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00000010;
+                break;
+              } // case 50
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -561,6 +811,509 @@ public Builder setVersionBytes(com.google.protobuf.ByteString value) {
       return this;
     }
 
+    private boolean enabled_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if the version is available for cluster creation. If a
+     * version is enabled for creation, it can be used to create new clusters.
+     * Otherwise, cluster creation will fail. However, cluster upgrade operations
+     * may succeed, even if the version is not enabled.
+     * </pre>
+     *
+     * <code>bool enabled = 3 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The enabled.
+     */
+    @java.lang.Override
+    public boolean getEnabled() {
+      return enabled_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if the version is available for cluster creation. If a
+     * version is enabled for creation, it can be used to create new clusters.
+     * Otherwise, cluster creation will fail. However, cluster upgrade operations
+     * may succeed, even if the version is not enabled.
+     * </pre>
+     *
+     * <code>bool enabled = 3 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The enabled to set.
+     * @return This builder for chaining.
+     */
+    public Builder setEnabled(boolean value) {
+
+      enabled_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if the version is available for cluster creation. If a
+     * version is enabled for creation, it can be used to create new clusters.
+     * Otherwise, cluster creation will fail. However, cluster upgrade operations
+     * may succeed, even if the version is not enabled.
+     * </pre>
+     *
+     * <code>bool enabled = 3 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearEnabled() {
+      bitField0_ = (bitField0_ & ~0x00000002);
+      enabled_ = false;
+      onChanged();
+      return this;
+    }
+
+    private boolean endOfLife_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if this cluster version belongs to a minor version that has
+     * reached its end of life and is no longer in scope to receive security and
+     * bug fixes.
+     * </pre>
+     *
+     * <code>bool end_of_life = 4 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The endOfLife.
+     */
+    @java.lang.Override
+    public boolean getEndOfLife() {
+      return endOfLife_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if this cluster version belongs to a minor version that has
+     * reached its end of life and is no longer in scope to receive security and
+     * bug fixes.
+     * </pre>
+     *
+     * <code>bool end_of_life = 4 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The endOfLife to set.
+     * @return This builder for chaining.
+     */
+    public Builder setEndOfLife(boolean value) {
+
+      endOfLife_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if this cluster version belongs to a minor version that has
+     * reached its end of life and is no longer in scope to receive security and
+     * bug fixes.
+     * </pre>
+     *
+     * <code>bool end_of_life = 4 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearEndOfLife() {
+      bitField0_ = (bitField0_ & ~0x00000004);
+      endOfLife_ = false;
+      onChanged();
+      return this;
+    }
+
+    private com.google.type.Date endOfLifeDate_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>
+        endOfLifeDateBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the endOfLifeDate field is set.
+     */
+    public boolean hasEndOfLifeDate() {
+      return ((bitField0_ & 0x00000008) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The endOfLifeDate.
+     */
+    public com.google.type.Date getEndOfLifeDate() {
+      if (endOfLifeDateBuilder_ == null) {
+        return endOfLifeDate_ == null ? com.google.type.Date.getDefaultInstance() : endOfLifeDate_;
+      } else {
+        return endOfLifeDateBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setEndOfLifeDate(com.google.type.Date value) {
+      if (endOfLifeDateBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        endOfLifeDate_ = value;
+      } else {
+        endOfLifeDateBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setEndOfLifeDate(com.google.type.Date.Builder builderForValue) {
+      if (endOfLifeDateBuilder_ == null) {
+        endOfLifeDate_ = builderForValue.build();
+      } else {
+        endOfLifeDateBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeEndOfLifeDate(com.google.type.Date value) {
+      if (endOfLifeDateBuilder_ == null) {
+        if (((bitField0_ & 0x00000008) != 0)
+            && endOfLifeDate_ != null
+            && endOfLifeDate_ != com.google.type.Date.getDefaultInstance()) {
+          getEndOfLifeDateBuilder().mergeFrom(value);
+        } else {
+          endOfLifeDate_ = value;
+        }
+      } else {
+        endOfLifeDateBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearEndOfLifeDate() {
+      bitField0_ = (bitField0_ & ~0x00000008);
+      endOfLifeDate_ = null;
+      if (endOfLifeDateBuilder_ != null) {
+        endOfLifeDateBuilder_.dispose();
+        endOfLifeDateBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.type.Date.Builder getEndOfLifeDateBuilder() {
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return getEndOfLifeDateFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.type.DateOrBuilder getEndOfLifeDateOrBuilder() {
+      if (endOfLifeDateBuilder_ != null) {
+        return endOfLifeDateBuilder_.getMessageOrBuilder();
+      } else {
+        return endOfLifeDate_ == null ? com.google.type.Date.getDefaultInstance() : endOfLifeDate_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>
+        getEndOfLifeDateFieldBuilder() {
+      if (endOfLifeDateBuilder_ == null) {
+        endOfLifeDateBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>(
+                getEndOfLifeDate(), getParentForChildren(), isClean());
+        endOfLifeDate_ = null;
+      }
+      return endOfLifeDateBuilder_;
+    }
+
+    private com.google.type.Date releaseDate_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>
+        releaseDateBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return Whether the releaseDate field is set.
+     */
+    public boolean hasReleaseDate() {
+      return ((bitField0_ & 0x00000010) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The releaseDate.
+     */
+    public com.google.type.Date getReleaseDate() {
+      if (releaseDateBuilder_ == null) {
+        return releaseDate_ == null ? com.google.type.Date.getDefaultInstance() : releaseDate_;
+      } else {
+        return releaseDateBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public Builder setReleaseDate(com.google.type.Date value) {
+      if (releaseDateBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        releaseDate_ = value;
+      } else {
+        releaseDateBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public Builder setReleaseDate(com.google.type.Date.Builder builderForValue) {
+      if (releaseDateBuilder_ == null) {
+        releaseDate_ = builderForValue.build();
+      } else {
+        releaseDateBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public Builder mergeReleaseDate(com.google.type.Date value) {
+      if (releaseDateBuilder_ == null) {
+        if (((bitField0_ & 0x00000010) != 0)
+            && releaseDate_ != null
+            && releaseDate_ != com.google.type.Date.getDefaultInstance()) {
+          getReleaseDateBuilder().mergeFrom(value);
+        } else {
+          releaseDate_ = value;
+        }
+      } else {
+        releaseDateBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public Builder clearReleaseDate() {
+      bitField0_ = (bitField0_ & ~0x00000010);
+      releaseDate_ = null;
+      if (releaseDateBuilder_ != null) {
+        releaseDateBuilder_.dispose();
+        releaseDateBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public com.google.type.Date.Builder getReleaseDateBuilder() {
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return getReleaseDateFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public com.google.type.DateOrBuilder getReleaseDateOrBuilder() {
+      if (releaseDateBuilder_ != null) {
+        return releaseDateBuilder_.getMessageOrBuilder();
+      } else {
+        return releaseDate_ == null ? com.google.type.Date.getDefaultInstance() : releaseDate_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>
+        getReleaseDateFieldBuilder() {
+      if (releaseDateBuilder_ == null) {
+        releaseDateBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>(
+                getReleaseDate(), getParentForChildren(), isClean());
+        releaseDate_ = null;
+      }
+      return releaseDateBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsK8sVersionInfoOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsK8sVersionInfoOrBuilder.java
index f79c4dd1897b..cfb3269e80c1 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsK8sVersionInfoOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsK8sVersionInfoOrBuilder.java
@@ -47,4 +47,114 @@ public interface AwsK8sVersionInfoOrBuilder
    * @return The bytes for version.
    */
   com.google.protobuf.ByteString getVersionBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. True if the version is available for cluster creation. If a
+   * version is enabled for creation, it can be used to create new clusters.
+   * Otherwise, cluster creation will fail. However, cluster upgrade operations
+   * may succeed, even if the version is not enabled.
+   * </pre>
+   *
+   * <code>bool enabled = 3 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The enabled.
+   */
+  boolean getEnabled();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. True if this cluster version belongs to a minor version that has
+   * reached its end of life and is no longer in scope to receive security and
+   * bug fixes.
+   * </pre>
+   *
+   * <code>bool end_of_life = 4 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The endOfLife.
+   */
+  boolean getEndOfLife();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return Whether the endOfLifeDate field is set.
+   */
+  boolean hasEndOfLifeDate();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The endOfLifeDate.
+   */
+  com.google.type.Date getEndOfLifeDate();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   */
+  com.google.type.DateOrBuilder getEndOfLifeDateOrBuilder();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return Whether the releaseDate field is set.
+   */
+  boolean hasReleaseDate();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The releaseDate.
+   */
+  com.google.type.Date getReleaseDate();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   */
+  com.google.type.DateOrBuilder getReleaseDateOrBuilder();
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeConfig.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeConfig.java
index 49d2e1837849..2a35c8a1fe75 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeConfig.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeConfig.java
@@ -87,9 +87,10 @@ protected com.google.protobuf.MapField internalGetMapField(int number) {
    *
    *
    * <pre>
-   * Optional. The AWS instance type.
+   * Optional. The EC2 instance type when creating on-Demand instances.
    *
-   * When unspecified, it uses a default based on the node pool's version.
+   * If unspecified during node pool creation, a default will be chosen based on
+   * the node pool version, and assigned to this field.
    * </pre>
    *
    * <code>string instance_type = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -112,9 +113,10 @@ public java.lang.String getInstanceType() {
    *
    *
    * <pre>
-   * Optional. The AWS instance type.
+   * Optional. The EC2 instance type when creating on-Demand instances.
    *
-   * When unspecified, it uses a default based on the node pool's version.
+   * If unspecified during node pool creation, a default will be chosen based on
+   * the node pool version, and assigned to this field.
    * </pre>
    *
    * <code>string instance_type = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -569,8 +571,7 @@ public com.google.protobuf.ByteString getIamInstanceProfileBytes() {
    *
    * <pre>
    * Optional. The OS image type to use on node pool instances.
-   * Can have a value of `ubuntu`, or `windows` if the cluster enables
-   * the Windows node pool preview feature.
+   * Can be unspecified, or have a value of `ubuntu`.
    *
    * When unspecified, it defaults to `ubuntu`.
    * </pre>
@@ -596,8 +597,7 @@ public java.lang.String getImageType() {
    *
    * <pre>
    * Optional. The OS image type to use on node pool instances.
-   * Can have a value of `ubuntu`, or `windows` if the cluster enables
-   * the Windows node pool preview feature.
+   * Can be unspecified, or have a value of `ubuntu`.
    *
    * When unspecified, it defaults to `ubuntu`.
    * </pre>
@@ -990,6 +990,74 @@ public boolean hasAutoscalingMetricsCollection() {
         : autoscalingMetricsCollection_;
   }
 
+  public static final int SPOT_CONFIG_FIELD_NUMBER = 16;
+  private com.google.cloud.gkemulticloud.v1.SpotConfig spotConfig_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Configuration for provisioning EC2 Spot instances
+   *
+   * When specified, the node pool will provision Spot instances from the set
+   * of spot_config.instance_types.
+   * This field is mutually exclusive with `instance_type`.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the spotConfig field is set.
+   */
+  @java.lang.Override
+  public boolean hasSpotConfig() {
+    return spotConfig_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Configuration for provisioning EC2 Spot instances
+   *
+   * When specified, the node pool will provision Spot instances from the set
+   * of spot_config.instance_types.
+   * This field is mutually exclusive with `instance_type`.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The spotConfig.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.SpotConfig getSpotConfig() {
+    return spotConfig_ == null
+        ? com.google.cloud.gkemulticloud.v1.SpotConfig.getDefaultInstance()
+        : spotConfig_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Configuration for provisioning EC2 Spot instances
+   *
+   * When specified, the node pool will provision Spot instances from the set
+   * of spot_config.instance_types.
+   * This field is mutually exclusive with `instance_type`.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.SpotConfigOrBuilder getSpotConfigOrBuilder() {
+    return spotConfig_ == null
+        ? com.google.cloud.gkemulticloud.v1.SpotConfig.getDefaultInstance()
+        : spotConfig_;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -1041,6 +1109,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (autoscalingMetricsCollection_ != null) {
       output.writeMessage(15, getAutoscalingMetricsCollection());
     }
+    if (spotConfig_ != null) {
+      output.writeMessage(16, getSpotConfig());
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -1110,6 +1181,9 @@ public int getSerializedSize() {
           com.google.protobuf.CodedOutputStream.computeMessageSize(
               15, getAutoscalingMetricsCollection());
     }
+    if (spotConfig_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(16, getSpotConfig());
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -1158,6 +1232,10 @@ public boolean equals(final java.lang.Object obj) {
       if (!getAutoscalingMetricsCollection().equals(other.getAutoscalingMetricsCollection()))
         return false;
     }
+    if (hasSpotConfig() != other.hasSpotConfig()) return false;
+    if (hasSpotConfig()) {
+      if (!getSpotConfig().equals(other.getSpotConfig())) return false;
+    }
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -1215,6 +1293,10 @@ public int hashCode() {
       hash = (37 * hash) + AUTOSCALING_METRICS_COLLECTION_FIELD_NUMBER;
       hash = (53 * hash) + getAutoscalingMetricsCollection().hashCode();
     }
+    if (hasSpotConfig()) {
+      hash = (37 * hash) + SPOT_CONFIG_FIELD_NUMBER;
+      hash = (53 * hash) + getSpotConfig().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -1421,6 +1503,11 @@ public Builder clear() {
         autoscalingMetricsCollectionBuilder_.dispose();
         autoscalingMetricsCollectionBuilder_ = null;
       }
+      spotConfig_ = null;
+      if (spotConfigBuilder_ != null) {
+        spotConfigBuilder_.dispose();
+        spotConfigBuilder_ = null;
+      }
       return this;
     }
 
@@ -1518,6 +1605,9 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsNodeConfig resul
                 ? autoscalingMetricsCollection_
                 : autoscalingMetricsCollectionBuilder_.build();
       }
+      if (((from_bitField0_ & 0x00002000) != 0)) {
+        result.spotConfig_ = spotConfigBuilder_ == null ? spotConfig_ : spotConfigBuilder_.build();
+      }
     }
 
     @java.lang.Override
@@ -1640,6 +1730,9 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsNodeConfig other)
       if (other.hasAutoscalingMetricsCollection()) {
         mergeAutoscalingMetricsCollection(other.getAutoscalingMetricsCollection());
       }
+      if (other.hasSpotConfig()) {
+        mergeSpotConfig(other.getSpotConfig());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -1764,6 +1857,12 @@ public Builder mergeFrom(
                 bitField0_ |= 0x00001000;
                 break;
               } // case 122
+            case 130:
+              {
+                input.readMessage(getSpotConfigFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00002000;
+                break;
+              } // case 130
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -1788,9 +1887,10 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Optional. The AWS instance type.
+     * Optional. The EC2 instance type when creating on-Demand instances.
      *
-     * When unspecified, it uses a default based on the node pool's version.
+     * If unspecified during node pool creation, a default will be chosen based on
+     * the node pool version, and assigned to this field.
      * </pre>
      *
      * <code>string instance_type = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -1812,9 +1912,10 @@ public java.lang.String getInstanceType() {
      *
      *
      * <pre>
-     * Optional. The AWS instance type.
+     * Optional. The EC2 instance type when creating on-Demand instances.
      *
-     * When unspecified, it uses a default based on the node pool's version.
+     * If unspecified during node pool creation, a default will be chosen based on
+     * the node pool version, and assigned to this field.
      * </pre>
      *
      * <code>string instance_type = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -1836,9 +1937,10 @@ public com.google.protobuf.ByteString getInstanceTypeBytes() {
      *
      *
      * <pre>
-     * Optional. The AWS instance type.
+     * Optional. The EC2 instance type when creating on-Demand instances.
      *
-     * When unspecified, it uses a default based on the node pool's version.
+     * If unspecified during node pool creation, a default will be chosen based on
+     * the node pool version, and assigned to this field.
      * </pre>
      *
      * <code>string instance_type = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -1859,9 +1961,10 @@ public Builder setInstanceType(java.lang.String value) {
      *
      *
      * <pre>
-     * Optional. The AWS instance type.
+     * Optional. The EC2 instance type when creating on-Demand instances.
      *
-     * When unspecified, it uses a default based on the node pool's version.
+     * If unspecified during node pool creation, a default will be chosen based on
+     * the node pool version, and assigned to this field.
      * </pre>
      *
      * <code>string instance_type = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -1878,9 +1981,10 @@ public Builder clearInstanceType() {
      *
      *
      * <pre>
-     * Optional. The AWS instance type.
+     * Optional. The EC2 instance type when creating on-Demand instances.
      *
-     * When unspecified, it uses a default based on the node pool's version.
+     * If unspecified during node pool creation, a default will be chosen based on
+     * the node pool version, and assigned to this field.
      * </pre>
      *
      * <code>string instance_type = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -3001,8 +3105,7 @@ public Builder setIamInstanceProfileBytes(com.google.protobuf.ByteString value)
      *
      * <pre>
      * Optional. The OS image type to use on node pool instances.
-     * Can have a value of `ubuntu`, or `windows` if the cluster enables
-     * the Windows node pool preview feature.
+     * Can be unspecified, or have a value of `ubuntu`.
      *
      * When unspecified, it defaults to `ubuntu`.
      * </pre>
@@ -3027,8 +3130,7 @@ public java.lang.String getImageType() {
      *
      * <pre>
      * Optional. The OS image type to use on node pool instances.
-     * Can have a value of `ubuntu`, or `windows` if the cluster enables
-     * the Windows node pool preview feature.
+     * Can be unspecified, or have a value of `ubuntu`.
      *
      * When unspecified, it defaults to `ubuntu`.
      * </pre>
@@ -3053,8 +3155,7 @@ public com.google.protobuf.ByteString getImageTypeBytes() {
      *
      * <pre>
      * Optional. The OS image type to use on node pool instances.
-     * Can have a value of `ubuntu`, or `windows` if the cluster enables
-     * the Windows node pool preview feature.
+     * Can be unspecified, or have a value of `ubuntu`.
      *
      * When unspecified, it defaults to `ubuntu`.
      * </pre>
@@ -3078,8 +3179,7 @@ public Builder setImageType(java.lang.String value) {
      *
      * <pre>
      * Optional. The OS image type to use on node pool instances.
-     * Can have a value of `ubuntu`, or `windows` if the cluster enables
-     * the Windows node pool preview feature.
+     * Can be unspecified, or have a value of `ubuntu`.
      *
      * When unspecified, it defaults to `ubuntu`.
      * </pre>
@@ -3099,8 +3199,7 @@ public Builder clearImageType() {
      *
      * <pre>
      * Optional. The OS image type to use on node pool instances.
-     * Can have a value of `ubuntu`, or `windows` if the cluster enables
-     * the Windows node pool preview feature.
+     * Can be unspecified, or have a value of `ubuntu`.
      *
      * When unspecified, it defaults to `ubuntu`.
      * </pre>
@@ -4390,6 +4489,244 @@ public Builder clearAutoscalingMetricsCollection() {
       return autoscalingMetricsCollectionBuilder_;
     }
 
+    private com.google.cloud.gkemulticloud.v1.SpotConfig spotConfig_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.SpotConfig,
+            com.google.cloud.gkemulticloud.v1.SpotConfig.Builder,
+            com.google.cloud.gkemulticloud.v1.SpotConfigOrBuilder>
+        spotConfigBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Configuration for provisioning EC2 Spot instances
+     *
+     * When specified, the node pool will provision Spot instances from the set
+     * of spot_config.instance_types.
+     * This field is mutually exclusive with `instance_type`.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the spotConfig field is set.
+     */
+    public boolean hasSpotConfig() {
+      return ((bitField0_ & 0x00002000) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Configuration for provisioning EC2 Spot instances
+     *
+     * When specified, the node pool will provision Spot instances from the set
+     * of spot_config.instance_types.
+     * This field is mutually exclusive with `instance_type`.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The spotConfig.
+     */
+    public com.google.cloud.gkemulticloud.v1.SpotConfig getSpotConfig() {
+      if (spotConfigBuilder_ == null) {
+        return spotConfig_ == null
+            ? com.google.cloud.gkemulticloud.v1.SpotConfig.getDefaultInstance()
+            : spotConfig_;
+      } else {
+        return spotConfigBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Configuration for provisioning EC2 Spot instances
+     *
+     * When specified, the node pool will provision Spot instances from the set
+     * of spot_config.instance_types.
+     * This field is mutually exclusive with `instance_type`.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setSpotConfig(com.google.cloud.gkemulticloud.v1.SpotConfig value) {
+      if (spotConfigBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        spotConfig_ = value;
+      } else {
+        spotConfigBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00002000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Configuration for provisioning EC2 Spot instances
+     *
+     * When specified, the node pool will provision Spot instances from the set
+     * of spot_config.instance_types.
+     * This field is mutually exclusive with `instance_type`.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setSpotConfig(
+        com.google.cloud.gkemulticloud.v1.SpotConfig.Builder builderForValue) {
+      if (spotConfigBuilder_ == null) {
+        spotConfig_ = builderForValue.build();
+      } else {
+        spotConfigBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00002000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Configuration for provisioning EC2 Spot instances
+     *
+     * When specified, the node pool will provision Spot instances from the set
+     * of spot_config.instance_types.
+     * This field is mutually exclusive with `instance_type`.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeSpotConfig(com.google.cloud.gkemulticloud.v1.SpotConfig value) {
+      if (spotConfigBuilder_ == null) {
+        if (((bitField0_ & 0x00002000) != 0)
+            && spotConfig_ != null
+            && spotConfig_ != com.google.cloud.gkemulticloud.v1.SpotConfig.getDefaultInstance()) {
+          getSpotConfigBuilder().mergeFrom(value);
+        } else {
+          spotConfig_ = value;
+        }
+      } else {
+        spotConfigBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00002000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Configuration for provisioning EC2 Spot instances
+     *
+     * When specified, the node pool will provision Spot instances from the set
+     * of spot_config.instance_types.
+     * This field is mutually exclusive with `instance_type`.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearSpotConfig() {
+      bitField0_ = (bitField0_ & ~0x00002000);
+      spotConfig_ = null;
+      if (spotConfigBuilder_ != null) {
+        spotConfigBuilder_.dispose();
+        spotConfigBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Configuration for provisioning EC2 Spot instances
+     *
+     * When specified, the node pool will provision Spot instances from the set
+     * of spot_config.instance_types.
+     * This field is mutually exclusive with `instance_type`.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.SpotConfig.Builder getSpotConfigBuilder() {
+      bitField0_ |= 0x00002000;
+      onChanged();
+      return getSpotConfigFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Configuration for provisioning EC2 Spot instances
+     *
+     * When specified, the node pool will provision Spot instances from the set
+     * of spot_config.instance_types.
+     * This field is mutually exclusive with `instance_type`.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.SpotConfigOrBuilder getSpotConfigOrBuilder() {
+      if (spotConfigBuilder_ != null) {
+        return spotConfigBuilder_.getMessageOrBuilder();
+      } else {
+        return spotConfig_ == null
+            ? com.google.cloud.gkemulticloud.v1.SpotConfig.getDefaultInstance()
+            : spotConfig_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Configuration for provisioning EC2 Spot instances
+     *
+     * When specified, the node pool will provision Spot instances from the set
+     * of spot_config.instance_types.
+     * This field is mutually exclusive with `instance_type`.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.SpotConfig,
+            com.google.cloud.gkemulticloud.v1.SpotConfig.Builder,
+            com.google.cloud.gkemulticloud.v1.SpotConfigOrBuilder>
+        getSpotConfigFieldBuilder() {
+      if (spotConfigBuilder_ == null) {
+        spotConfigBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.SpotConfig,
+                com.google.cloud.gkemulticloud.v1.SpotConfig.Builder,
+                com.google.cloud.gkemulticloud.v1.SpotConfigOrBuilder>(
+                getSpotConfig(), getParentForChildren(), isClean());
+        spotConfig_ = null;
+      }
+      return spotConfigBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeConfigOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeConfigOrBuilder.java
index 12b89045b3d0..653d3f2217a9 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeConfigOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeConfigOrBuilder.java
@@ -27,9 +27,10 @@ public interface AwsNodeConfigOrBuilder
    *
    *
    * <pre>
-   * Optional. The AWS instance type.
+   * Optional. The EC2 instance type when creating on-Demand instances.
    *
-   * When unspecified, it uses a default based on the node pool's version.
+   * If unspecified during node pool creation, a default will be chosen based on
+   * the node pool version, and assigned to this field.
    * </pre>
    *
    * <code>string instance_type = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -41,9 +42,10 @@ public interface AwsNodeConfigOrBuilder
    *
    *
    * <pre>
-   * Optional. The AWS instance type.
+   * Optional. The EC2 instance type when creating on-Demand instances.
    *
-   * When unspecified, it uses a default based on the node pool's version.
+   * If unspecified during node pool creation, a default will be chosen based on
+   * the node pool version, and assigned to this field.
    * </pre>
    *
    * <code>string instance_type = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -340,8 +342,7 @@ java.lang.String getTagsOrDefault(
    *
    * <pre>
    * Optional. The OS image type to use on node pool instances.
-   * Can have a value of `ubuntu`, or `windows` if the cluster enables
-   * the Windows node pool preview feature.
+   * Can be unspecified, or have a value of `ubuntu`.
    *
    * When unspecified, it defaults to `ubuntu`.
    * </pre>
@@ -356,8 +357,7 @@ java.lang.String getTagsOrDefault(
    *
    * <pre>
    * Optional. The OS image type to use on node pool instances.
-   * Can have a value of `ubuntu`, or `windows` if the cluster enables
-   * the Windows node pool preview feature.
+   * Can be unspecified, or have a value of `ubuntu`.
    *
    * When unspecified, it defaults to `ubuntu`.
    * </pre>
@@ -645,4 +645,57 @@ java.lang.String getTagsOrDefault(
    */
   com.google.cloud.gkemulticloud.v1.AwsAutoscalingGroupMetricsCollectionOrBuilder
       getAutoscalingMetricsCollectionOrBuilder();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Configuration for provisioning EC2 Spot instances
+   *
+   * When specified, the node pool will provision Spot instances from the set
+   * of spot_config.instance_types.
+   * This field is mutually exclusive with `instance_type`.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the spotConfig field is set.
+   */
+  boolean hasSpotConfig();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Configuration for provisioning EC2 Spot instances
+   *
+   * When specified, the node pool will provision Spot instances from the set
+   * of spot_config.instance_types.
+   * This field is mutually exclusive with `instance_type`.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The spotConfig.
+   */
+  com.google.cloud.gkemulticloud.v1.SpotConfig getSpotConfig();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Configuration for provisioning EC2 Spot instances
+   *
+   * When specified, the node pool will provision Spot instances from the set
+   * of spot_config.instance_types.
+   * This field is mutually exclusive with `instance_type`.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SpotConfig spot_config = 16 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.SpotConfigOrBuilder getSpotConfigOrBuilder();
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeManagement.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeManagement.java
new file mode 100644
index 000000000000..64d36ec0f267
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeManagement.java
@@ -0,0 +1,548 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * AwsNodeManagement defines the set of node management features turned on for
+ * an AWS node pool.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.AwsNodeManagement}
+ */
+public final class AwsNodeManagement extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.AwsNodeManagement)
+    AwsNodeManagementOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use AwsNodeManagement.newBuilder() to construct.
+  private AwsNodeManagement(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private AwsNodeManagement() {}
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new AwsNodeManagement();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AwsNodeManagement_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AwsNodeManagement_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.AwsNodeManagement.class,
+            com.google.cloud.gkemulticloud.v1.AwsNodeManagement.Builder.class);
+  }
+
+  public static final int AUTO_REPAIR_FIELD_NUMBER = 1;
+  private boolean autoRepair_ = false;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Whether or not the nodes will be automatically repaired. When set
+   * to true, the nodes in this node pool will be monitored and if they fail
+   * health checks consistently over a period of time, an automatic repair
+   * action will be triggered to replace them with new nodes.
+   * </pre>
+   *
+   * <code>bool auto_repair = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The autoRepair.
+   */
+  @java.lang.Override
+  public boolean getAutoRepair() {
+    return autoRepair_;
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (autoRepair_ != false) {
+      output.writeBool(1, autoRepair_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (autoRepair_ != false) {
+      size += com.google.protobuf.CodedOutputStream.computeBoolSize(1, autoRepair_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.AwsNodeManagement)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.AwsNodeManagement other =
+        (com.google.cloud.gkemulticloud.v1.AwsNodeManagement) obj;
+
+    if (getAutoRepair() != other.getAutoRepair()) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + AUTO_REPAIR_FIELD_NUMBER;
+    hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getAutoRepair());
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.AwsNodeManagement prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * AwsNodeManagement defines the set of node management features turned on for
+   * an AWS node pool.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.AwsNodeManagement}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.AwsNodeManagement)
+      com.google.cloud.gkemulticloud.v1.AwsNodeManagementOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsNodeManagement_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsNodeManagement_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.AwsNodeManagement.class,
+              com.google.cloud.gkemulticloud.v1.AwsNodeManagement.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.AwsNodeManagement.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      autoRepair_ = false;
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsNodeManagement_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsNodeManagement getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsNodeManagement.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsNodeManagement build() {
+      com.google.cloud.gkemulticloud.v1.AwsNodeManagement result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsNodeManagement buildPartial() {
+      com.google.cloud.gkemulticloud.v1.AwsNodeManagement result =
+          new com.google.cloud.gkemulticloud.v1.AwsNodeManagement(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsNodeManagement result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.autoRepair_ = autoRepair_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.AwsNodeManagement) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.AwsNodeManagement) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsNodeManagement other) {
+      if (other == com.google.cloud.gkemulticloud.v1.AwsNodeManagement.getDefaultInstance())
+        return this;
+      if (other.getAutoRepair() != false) {
+        setAutoRepair(other.getAutoRepair());
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 8:
+              {
+                autoRepair_ = input.readBool();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 8
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private boolean autoRepair_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Whether or not the nodes will be automatically repaired. When set
+     * to true, the nodes in this node pool will be monitored and if they fail
+     * health checks consistently over a period of time, an automatic repair
+     * action will be triggered to replace them with new nodes.
+     * </pre>
+     *
+     * <code>bool auto_repair = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The autoRepair.
+     */
+    @java.lang.Override
+    public boolean getAutoRepair() {
+      return autoRepair_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Whether or not the nodes will be automatically repaired. When set
+     * to true, the nodes in this node pool will be monitored and if they fail
+     * health checks consistently over a period of time, an automatic repair
+     * action will be triggered to replace them with new nodes.
+     * </pre>
+     *
+     * <code>bool auto_repair = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The autoRepair to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAutoRepair(boolean value) {
+
+      autoRepair_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Whether or not the nodes will be automatically repaired. When set
+     * to true, the nodes in this node pool will be monitored and if they fail
+     * health checks consistently over a period of time, an automatic repair
+     * action will be triggered to replace them with new nodes.
+     * </pre>
+     *
+     * <code>bool auto_repair = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAutoRepair() {
+      bitField0_ = (bitField0_ & ~0x00000001);
+      autoRepair_ = false;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.AwsNodeManagement)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.AwsNodeManagement)
+  private static final com.google.cloud.gkemulticloud.v1.AwsNodeManagement DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.AwsNodeManagement();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsNodeManagement getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<AwsNodeManagement> PARSER =
+      new com.google.protobuf.AbstractParser<AwsNodeManagement>() {
+        @java.lang.Override
+        public AwsNodeManagement parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<AwsNodeManagement> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<AwsNodeManagement> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AwsNodeManagement getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeManagementOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeManagementOrBuilder.java
new file mode 100644
index 000000000000..1a7d1a4dc58c
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodeManagementOrBuilder.java
@@ -0,0 +1,41 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface AwsNodeManagementOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.AwsNodeManagement)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Whether or not the nodes will be automatically repaired. When set
+   * to true, the nodes in this node pool will be monitored and if they fail
+   * health checks consistently over a period of time, an automatic repair
+   * action will be triggered to replace them with new nodes.
+   * </pre>
+   *
+   * <code>bool auto_repair = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The autoRepair.
+   */
+  boolean getAutoRepair();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodePool.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodePool.java
index e9800b12f1ef..a844605b1699 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodePool.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodePool.java
@@ -1166,6 +1166,118 @@ public com.google.cloud.gkemulticloud.v1.AwsNodePoolErrorOrBuilder getErrorsOrBu
     return errors_.get(index);
   }
 
+  public static final int MANAGEMENT_FIELD_NUMBER = 30;
+  private com.google.cloud.gkemulticloud.v1.AwsNodeManagement management_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the management field is set.
+   */
+  @java.lang.Override
+  public boolean hasManagement() {
+    return management_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The management.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AwsNodeManagement getManagement() {
+    return management_ == null
+        ? com.google.cloud.gkemulticloud.v1.AwsNodeManagement.getDefaultInstance()
+        : management_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AwsNodeManagementOrBuilder getManagementOrBuilder() {
+    return management_ == null
+        ? com.google.cloud.gkemulticloud.v1.AwsNodeManagement.getDefaultInstance()
+        : management_;
+  }
+
+  public static final int UPDATE_SETTINGS_FIELD_NUMBER = 32;
+  private com.google.cloud.gkemulticloud.v1.UpdateSettings updateSettings_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Update settings control the speed and disruption of the update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the updateSettings field is set.
+   */
+  @java.lang.Override
+  public boolean hasUpdateSettings() {
+    return updateSettings_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Update settings control the speed and disruption of the update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The updateSettings.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.UpdateSettings getUpdateSettings() {
+    return updateSettings_ == null
+        ? com.google.cloud.gkemulticloud.v1.UpdateSettings.getDefaultInstance()
+        : updateSettings_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Update settings control the speed and disruption of the update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.UpdateSettingsOrBuilder getUpdateSettingsOrBuilder() {
+    return updateSettings_ == null
+        ? com.google.cloud.gkemulticloud.v1.UpdateSettings.getDefaultInstance()
+        : updateSettings_;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -1222,6 +1334,12 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     for (int i = 0; i < errors_.size(); i++) {
       output.writeMessage(29, errors_.get(i));
     }
+    if (management_ != null) {
+      output.writeMessage(30, getManagement());
+    }
+    if (updateSettings_ != null) {
+      output.writeMessage(32, getUpdateSettings());
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -1281,6 +1399,12 @@ public int getSerializedSize() {
     for (int i = 0; i < errors_.size(); i++) {
       size += com.google.protobuf.CodedOutputStream.computeMessageSize(29, errors_.get(i));
     }
+    if (management_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(30, getManagement());
+    }
+    if (updateSettings_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(32, getUpdateSettings());
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -1326,6 +1450,14 @@ public boolean equals(final java.lang.Object obj) {
       if (!getMaxPodsConstraint().equals(other.getMaxPodsConstraint())) return false;
     }
     if (!getErrorsList().equals(other.getErrorsList())) return false;
+    if (hasManagement() != other.hasManagement()) return false;
+    if (hasManagement()) {
+      if (!getManagement().equals(other.getManagement())) return false;
+    }
+    if (hasUpdateSettings() != other.hasUpdateSettings()) return false;
+    if (hasUpdateSettings()) {
+      if (!getUpdateSettings().equals(other.getUpdateSettings())) return false;
+    }
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -1379,6 +1511,14 @@ public int hashCode() {
       hash = (37 * hash) + ERRORS_FIELD_NUMBER;
       hash = (53 * hash) + getErrorsList().hashCode();
     }
+    if (hasManagement()) {
+      hash = (37 * hash) + MANAGEMENT_FIELD_NUMBER;
+      hash = (53 * hash) + getManagement().hashCode();
+    }
+    if (hasUpdateSettings()) {
+      hash = (37 * hash) + UPDATE_SETTINGS_FIELD_NUMBER;
+      hash = (53 * hash) + getUpdateSettings().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -1578,6 +1718,16 @@ public Builder clear() {
         errorsBuilder_.clear();
       }
       bitField0_ = (bitField0_ & ~0x00002000);
+      management_ = null;
+      if (managementBuilder_ != null) {
+        managementBuilder_.dispose();
+        managementBuilder_ = null;
+      }
+      updateSettings_ = null;
+      if (updateSettingsBuilder_ != null) {
+        updateSettingsBuilder_.dispose();
+        updateSettingsBuilder_ = null;
+      }
       return this;
     }
 
@@ -1671,6 +1821,13 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsNodePool result)
                 ? maxPodsConstraint_
                 : maxPodsConstraintBuilder_.build();
       }
+      if (((from_bitField0_ & 0x00004000) != 0)) {
+        result.management_ = managementBuilder_ == null ? management_ : managementBuilder_.build();
+      }
+      if (((from_bitField0_ & 0x00008000) != 0)) {
+        result.updateSettings_ =
+            updateSettingsBuilder_ == null ? updateSettings_ : updateSettingsBuilder_.build();
+      }
     }
 
     @java.lang.Override
@@ -1793,6 +1950,12 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsNodePool other) {
           }
         }
       }
+      if (other.hasManagement()) {
+        mergeManagement(other.getManagement());
+      }
+      if (other.hasUpdateSettings()) {
+        mergeUpdateSettings(other.getUpdateSettings());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -1918,6 +2081,18 @@ public Builder mergeFrom(
                 }
                 break;
               } // case 234
+            case 242:
+              {
+                input.readMessage(getManagementFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00004000;
+                break;
+              } // case 242
+            case 258:
+              {
+                input.readMessage(getUpdateSettingsFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00008000;
+                break;
+              } // case 258
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -4343,6 +4518,412 @@ public com.google.cloud.gkemulticloud.v1.AwsNodePoolError.Builder addErrorsBuild
       return errorsBuilder_;
     }
 
+    private com.google.cloud.gkemulticloud.v1.AwsNodeManagement management_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AwsNodeManagement,
+            com.google.cloud.gkemulticloud.v1.AwsNodeManagement.Builder,
+            com.google.cloud.gkemulticloud.v1.AwsNodeManagementOrBuilder>
+        managementBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the management field is set.
+     */
+    public boolean hasManagement() {
+      return ((bitField0_ & 0x00004000) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The management.
+     */
+    public com.google.cloud.gkemulticloud.v1.AwsNodeManagement getManagement() {
+      if (managementBuilder_ == null) {
+        return management_ == null
+            ? com.google.cloud.gkemulticloud.v1.AwsNodeManagement.getDefaultInstance()
+            : management_;
+      } else {
+        return managementBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setManagement(com.google.cloud.gkemulticloud.v1.AwsNodeManagement value) {
+      if (managementBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        management_ = value;
+      } else {
+        managementBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00004000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setManagement(
+        com.google.cloud.gkemulticloud.v1.AwsNodeManagement.Builder builderForValue) {
+      if (managementBuilder_ == null) {
+        management_ = builderForValue.build();
+      } else {
+        managementBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00004000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeManagement(com.google.cloud.gkemulticloud.v1.AwsNodeManagement value) {
+      if (managementBuilder_ == null) {
+        if (((bitField0_ & 0x00004000) != 0)
+            && management_ != null
+            && management_
+                != com.google.cloud.gkemulticloud.v1.AwsNodeManagement.getDefaultInstance()) {
+          getManagementBuilder().mergeFrom(value);
+        } else {
+          management_ = value;
+        }
+      } else {
+        managementBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00004000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearManagement() {
+      bitField0_ = (bitField0_ & ~0x00004000);
+      management_ = null;
+      if (managementBuilder_ != null) {
+        managementBuilder_.dispose();
+        managementBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AwsNodeManagement.Builder getManagementBuilder() {
+      bitField0_ |= 0x00004000;
+      onChanged();
+      return getManagementFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AwsNodeManagementOrBuilder getManagementOrBuilder() {
+      if (managementBuilder_ != null) {
+        return managementBuilder_.getMessageOrBuilder();
+      } else {
+        return management_ == null
+            ? com.google.cloud.gkemulticloud.v1.AwsNodeManagement.getDefaultInstance()
+            : management_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AwsNodeManagement,
+            com.google.cloud.gkemulticloud.v1.AwsNodeManagement.Builder,
+            com.google.cloud.gkemulticloud.v1.AwsNodeManagementOrBuilder>
+        getManagementFieldBuilder() {
+      if (managementBuilder_ == null) {
+        managementBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.AwsNodeManagement,
+                com.google.cloud.gkemulticloud.v1.AwsNodeManagement.Builder,
+                com.google.cloud.gkemulticloud.v1.AwsNodeManagementOrBuilder>(
+                getManagement(), getParentForChildren(), isClean());
+        management_ = null;
+      }
+      return managementBuilder_;
+    }
+
+    private com.google.cloud.gkemulticloud.v1.UpdateSettings updateSettings_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.UpdateSettings,
+            com.google.cloud.gkemulticloud.v1.UpdateSettings.Builder,
+            com.google.cloud.gkemulticloud.v1.UpdateSettingsOrBuilder>
+        updateSettingsBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Update settings control the speed and disruption of the update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the updateSettings field is set.
+     */
+    public boolean hasUpdateSettings() {
+      return ((bitField0_ & 0x00008000) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Update settings control the speed and disruption of the update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The updateSettings.
+     */
+    public com.google.cloud.gkemulticloud.v1.UpdateSettings getUpdateSettings() {
+      if (updateSettingsBuilder_ == null) {
+        return updateSettings_ == null
+            ? com.google.cloud.gkemulticloud.v1.UpdateSettings.getDefaultInstance()
+            : updateSettings_;
+      } else {
+        return updateSettingsBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Update settings control the speed and disruption of the update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setUpdateSettings(com.google.cloud.gkemulticloud.v1.UpdateSettings value) {
+      if (updateSettingsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        updateSettings_ = value;
+      } else {
+        updateSettingsBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00008000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Update settings control the speed and disruption of the update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setUpdateSettings(
+        com.google.cloud.gkemulticloud.v1.UpdateSettings.Builder builderForValue) {
+      if (updateSettingsBuilder_ == null) {
+        updateSettings_ = builderForValue.build();
+      } else {
+        updateSettingsBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00008000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Update settings control the speed and disruption of the update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeUpdateSettings(com.google.cloud.gkemulticloud.v1.UpdateSettings value) {
+      if (updateSettingsBuilder_ == null) {
+        if (((bitField0_ & 0x00008000) != 0)
+            && updateSettings_ != null
+            && updateSettings_
+                != com.google.cloud.gkemulticloud.v1.UpdateSettings.getDefaultInstance()) {
+          getUpdateSettingsBuilder().mergeFrom(value);
+        } else {
+          updateSettings_ = value;
+        }
+      } else {
+        updateSettingsBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00008000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Update settings control the speed and disruption of the update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearUpdateSettings() {
+      bitField0_ = (bitField0_ & ~0x00008000);
+      updateSettings_ = null;
+      if (updateSettingsBuilder_ != null) {
+        updateSettingsBuilder_.dispose();
+        updateSettingsBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Update settings control the speed and disruption of the update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.UpdateSettings.Builder getUpdateSettingsBuilder() {
+      bitField0_ |= 0x00008000;
+      onChanged();
+      return getUpdateSettingsFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Update settings control the speed and disruption of the update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.UpdateSettingsOrBuilder getUpdateSettingsOrBuilder() {
+      if (updateSettingsBuilder_ != null) {
+        return updateSettingsBuilder_.getMessageOrBuilder();
+      } else {
+        return updateSettings_ == null
+            ? com.google.cloud.gkemulticloud.v1.UpdateSettings.getDefaultInstance()
+            : updateSettings_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Update settings control the speed and disruption of the update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.UpdateSettings,
+            com.google.cloud.gkemulticloud.v1.UpdateSettings.Builder,
+            com.google.cloud.gkemulticloud.v1.UpdateSettingsOrBuilder>
+        getUpdateSettingsFieldBuilder() {
+      if (updateSettingsBuilder_ == null) {
+        updateSettingsBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.UpdateSettings,
+                com.google.cloud.gkemulticloud.v1.UpdateSettings.Builder,
+                com.google.cloud.gkemulticloud.v1.UpdateSettingsOrBuilder>(
+                getUpdateSettings(), getParentForChildren(), isClean());
+        updateSettings_ = null;
+      }
+      return updateSettingsBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodePoolOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodePoolOrBuilder.java
index 1b5a0a936165..550196870b94 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodePoolOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsNodePoolOrBuilder.java
@@ -587,4 +587,86 @@ java.lang.String getAnnotationsOrDefault(
    * </code>
    */
   com.google.cloud.gkemulticloud.v1.AwsNodePoolErrorOrBuilder getErrorsOrBuilder(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the management field is set.
+   */
+  boolean hasManagement();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The management.
+   */
+  com.google.cloud.gkemulticloud.v1.AwsNodeManagement getManagement();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AwsNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AwsNodeManagementOrBuilder getManagementOrBuilder();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Update settings control the speed and disruption of the update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the updateSettings field is set.
+   */
+  boolean hasUpdateSettings();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Update settings control the speed and disruption of the update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The updateSettings.
+   */
+  com.google.cloud.gkemulticloud.v1.UpdateSettings getUpdateSettings();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Update settings control the speed and disruption of the update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.UpdateSettings update_settings = 32 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.UpdateSettingsOrBuilder getUpdateSettingsOrBuilder();
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsOpenIdConfig.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsOpenIdConfig.java
new file mode 100644
index 000000000000..aeb8246c347c
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsOpenIdConfig.java
@@ -0,0 +1,2203 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * AwsOpenIdConfig is an OIDC discovery document for the cluster.
+ * See the OpenID Connect Discovery 1.0 specification for details.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.AwsOpenIdConfig}
+ */
+public final class AwsOpenIdConfig extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.AwsOpenIdConfig)
+    AwsOpenIdConfigOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use AwsOpenIdConfig.newBuilder() to construct.
+  private AwsOpenIdConfig(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private AwsOpenIdConfig() {
+    issuer_ = "";
+    jwksUri_ = "";
+    responseTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+    subjectTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+    idTokenSigningAlgValuesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+    claimsSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+    grantTypes_ = com.google.protobuf.LazyStringArrayList.emptyList();
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new AwsOpenIdConfig();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AwsOpenIdConfig_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AwsOpenIdConfig_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig.class,
+            com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig.Builder.class);
+  }
+
+  public static final int ISSUER_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object issuer_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * OIDC Issuer.
+   * </pre>
+   *
+   * <code>string issuer = 1;</code>
+   *
+   * @return The issuer.
+   */
+  @java.lang.Override
+  public java.lang.String getIssuer() {
+    java.lang.Object ref = issuer_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      issuer_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * OIDC Issuer.
+   * </pre>
+   *
+   * <code>string issuer = 1;</code>
+   *
+   * @return The bytes for issuer.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getIssuerBytes() {
+    java.lang.Object ref = issuer_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      issuer_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int JWKS_URI_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object jwksUri_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * JSON Web Key uri.
+   * </pre>
+   *
+   * <code>string jwks_uri = 2;</code>
+   *
+   * @return The jwksUri.
+   */
+  @java.lang.Override
+  public java.lang.String getJwksUri() {
+    java.lang.Object ref = jwksUri_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      jwksUri_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * JSON Web Key uri.
+   * </pre>
+   *
+   * <code>string jwks_uri = 2;</code>
+   *
+   * @return The bytes for jwksUri.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getJwksUriBytes() {
+    java.lang.Object ref = jwksUri_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      jwksUri_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int RESPONSE_TYPES_SUPPORTED_FIELD_NUMBER = 3;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList responseTypesSupported_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @return A list containing the responseTypesSupported.
+   */
+  public com.google.protobuf.ProtocolStringList getResponseTypesSupportedList() {
+    return responseTypesSupported_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @return The count of responseTypesSupported.
+   */
+  public int getResponseTypesSupportedCount() {
+    return responseTypesSupported_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The responseTypesSupported at the given index.
+   */
+  public java.lang.String getResponseTypesSupported(int index) {
+    return responseTypesSupported_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the responseTypesSupported at the given index.
+   */
+  public com.google.protobuf.ByteString getResponseTypesSupportedBytes(int index) {
+    return responseTypesSupported_.getByteString(index);
+  }
+
+  public static final int SUBJECT_TYPES_SUPPORTED_FIELD_NUMBER = 4;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList subjectTypesSupported_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @return A list containing the subjectTypesSupported.
+   */
+  public com.google.protobuf.ProtocolStringList getSubjectTypesSupportedList() {
+    return subjectTypesSupported_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @return The count of subjectTypesSupported.
+   */
+  public int getSubjectTypesSupportedCount() {
+    return subjectTypesSupported_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The subjectTypesSupported at the given index.
+   */
+  public java.lang.String getSubjectTypesSupported(int index) {
+    return subjectTypesSupported_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the subjectTypesSupported at the given index.
+   */
+  public com.google.protobuf.ByteString getSubjectTypesSupportedBytes(int index) {
+    return subjectTypesSupported_.getByteString(index);
+  }
+
+  public static final int ID_TOKEN_SIGNING_ALG_VALUES_SUPPORTED_FIELD_NUMBER = 5;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList idTokenSigningAlgValuesSupported_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @return A list containing the idTokenSigningAlgValuesSupported.
+   */
+  public com.google.protobuf.ProtocolStringList getIdTokenSigningAlgValuesSupportedList() {
+    return idTokenSigningAlgValuesSupported_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @return The count of idTokenSigningAlgValuesSupported.
+   */
+  public int getIdTokenSigningAlgValuesSupportedCount() {
+    return idTokenSigningAlgValuesSupported_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The idTokenSigningAlgValuesSupported at the given index.
+   */
+  public java.lang.String getIdTokenSigningAlgValuesSupported(int index) {
+    return idTokenSigningAlgValuesSupported_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the idTokenSigningAlgValuesSupported at the given index.
+   */
+  public com.google.protobuf.ByteString getIdTokenSigningAlgValuesSupportedBytes(int index) {
+    return idTokenSigningAlgValuesSupported_.getByteString(index);
+  }
+
+  public static final int CLAIMS_SUPPORTED_FIELD_NUMBER = 6;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList claimsSupported_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @return A list containing the claimsSupported.
+   */
+  public com.google.protobuf.ProtocolStringList getClaimsSupportedList() {
+    return claimsSupported_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @return The count of claimsSupported.
+   */
+  public int getClaimsSupportedCount() {
+    return claimsSupported_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The claimsSupported at the given index.
+   */
+  public java.lang.String getClaimsSupported(int index) {
+    return claimsSupported_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the claimsSupported at the given index.
+   */
+  public com.google.protobuf.ByteString getClaimsSupportedBytes(int index) {
+    return claimsSupported_.getByteString(index);
+  }
+
+  public static final int GRANT_TYPES_FIELD_NUMBER = 7;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList grantTypes_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @return A list containing the grantTypes.
+   */
+  public com.google.protobuf.ProtocolStringList getGrantTypesList() {
+    return grantTypes_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @return The count of grantTypes.
+   */
+  public int getGrantTypesCount() {
+    return grantTypes_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The grantTypes at the given index.
+   */
+  public java.lang.String getGrantTypes(int index) {
+    return grantTypes_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the grantTypes at the given index.
+   */
+  public com.google.protobuf.ByteString getGrantTypesBytes(int index) {
+    return grantTypes_.getByteString(index);
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(issuer_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, issuer_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(jwksUri_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 2, jwksUri_);
+    }
+    for (int i = 0; i < responseTypesSupported_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(
+          output, 3, responseTypesSupported_.getRaw(i));
+    }
+    for (int i = 0; i < subjectTypesSupported_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(
+          output, 4, subjectTypesSupported_.getRaw(i));
+    }
+    for (int i = 0; i < idTokenSigningAlgValuesSupported_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(
+          output, 5, idTokenSigningAlgValuesSupported_.getRaw(i));
+    }
+    for (int i = 0; i < claimsSupported_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 6, claimsSupported_.getRaw(i));
+    }
+    for (int i = 0; i < grantTypes_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 7, grantTypes_.getRaw(i));
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(issuer_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, issuer_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(jwksUri_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(2, jwksUri_);
+    }
+    {
+      int dataSize = 0;
+      for (int i = 0; i < responseTypesSupported_.size(); i++) {
+        dataSize += computeStringSizeNoTag(responseTypesSupported_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getResponseTypesSupportedList().size();
+    }
+    {
+      int dataSize = 0;
+      for (int i = 0; i < subjectTypesSupported_.size(); i++) {
+        dataSize += computeStringSizeNoTag(subjectTypesSupported_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getSubjectTypesSupportedList().size();
+    }
+    {
+      int dataSize = 0;
+      for (int i = 0; i < idTokenSigningAlgValuesSupported_.size(); i++) {
+        dataSize += computeStringSizeNoTag(idTokenSigningAlgValuesSupported_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getIdTokenSigningAlgValuesSupportedList().size();
+    }
+    {
+      int dataSize = 0;
+      for (int i = 0; i < claimsSupported_.size(); i++) {
+        dataSize += computeStringSizeNoTag(claimsSupported_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getClaimsSupportedList().size();
+    }
+    {
+      int dataSize = 0;
+      for (int i = 0; i < grantTypes_.size(); i++) {
+        dataSize += computeStringSizeNoTag(grantTypes_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getGrantTypesList().size();
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig other =
+        (com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig) obj;
+
+    if (!getIssuer().equals(other.getIssuer())) return false;
+    if (!getJwksUri().equals(other.getJwksUri())) return false;
+    if (!getResponseTypesSupportedList().equals(other.getResponseTypesSupportedList()))
+      return false;
+    if (!getSubjectTypesSupportedList().equals(other.getSubjectTypesSupportedList())) return false;
+    if (!getIdTokenSigningAlgValuesSupportedList()
+        .equals(other.getIdTokenSigningAlgValuesSupportedList())) return false;
+    if (!getClaimsSupportedList().equals(other.getClaimsSupportedList())) return false;
+    if (!getGrantTypesList().equals(other.getGrantTypesList())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + ISSUER_FIELD_NUMBER;
+    hash = (53 * hash) + getIssuer().hashCode();
+    hash = (37 * hash) + JWKS_URI_FIELD_NUMBER;
+    hash = (53 * hash) + getJwksUri().hashCode();
+    if (getResponseTypesSupportedCount() > 0) {
+      hash = (37 * hash) + RESPONSE_TYPES_SUPPORTED_FIELD_NUMBER;
+      hash = (53 * hash) + getResponseTypesSupportedList().hashCode();
+    }
+    if (getSubjectTypesSupportedCount() > 0) {
+      hash = (37 * hash) + SUBJECT_TYPES_SUPPORTED_FIELD_NUMBER;
+      hash = (53 * hash) + getSubjectTypesSupportedList().hashCode();
+    }
+    if (getIdTokenSigningAlgValuesSupportedCount() > 0) {
+      hash = (37 * hash) + ID_TOKEN_SIGNING_ALG_VALUES_SUPPORTED_FIELD_NUMBER;
+      hash = (53 * hash) + getIdTokenSigningAlgValuesSupportedList().hashCode();
+    }
+    if (getClaimsSupportedCount() > 0) {
+      hash = (37 * hash) + CLAIMS_SUPPORTED_FIELD_NUMBER;
+      hash = (53 * hash) + getClaimsSupportedList().hashCode();
+    }
+    if (getGrantTypesCount() > 0) {
+      hash = (37 * hash) + GRANT_TYPES_FIELD_NUMBER;
+      hash = (53 * hash) + getGrantTypesList().hashCode();
+    }
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * AwsOpenIdConfig is an OIDC discovery document for the cluster.
+   * See the OpenID Connect Discovery 1.0 specification for details.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.AwsOpenIdConfig}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.AwsOpenIdConfig)
+      com.google.cloud.gkemulticloud.v1.AwsOpenIdConfigOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsOpenIdConfig_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsOpenIdConfig_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig.class,
+              com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      issuer_ = "";
+      jwksUri_ = "";
+      responseTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      subjectTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      idTokenSigningAlgValuesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      claimsSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      grantTypes_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AwsOpenIdConfig_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig build() {
+      com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig buildPartial() {
+      com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig result =
+          new com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.issuer_ = issuer_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.jwksUri_ = jwksUri_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        responseTypesSupported_.makeImmutable();
+        result.responseTypesSupported_ = responseTypesSupported_;
+      }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        subjectTypesSupported_.makeImmutable();
+        result.subjectTypesSupported_ = subjectTypesSupported_;
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
+        idTokenSigningAlgValuesSupported_.makeImmutable();
+        result.idTokenSigningAlgValuesSupported_ = idTokenSigningAlgValuesSupported_;
+      }
+      if (((from_bitField0_ & 0x00000020) != 0)) {
+        claimsSupported_.makeImmutable();
+        result.claimsSupported_ = claimsSupported_;
+      }
+      if (((from_bitField0_ & 0x00000040) != 0)) {
+        grantTypes_.makeImmutable();
+        result.grantTypes_ = grantTypes_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig other) {
+      if (other == com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig.getDefaultInstance())
+        return this;
+      if (!other.getIssuer().isEmpty()) {
+        issuer_ = other.issuer_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (!other.getJwksUri().isEmpty()) {
+        jwksUri_ = other.jwksUri_;
+        bitField0_ |= 0x00000002;
+        onChanged();
+      }
+      if (!other.responseTypesSupported_.isEmpty()) {
+        if (responseTypesSupported_.isEmpty()) {
+          responseTypesSupported_ = other.responseTypesSupported_;
+          bitField0_ |= 0x00000004;
+        } else {
+          ensureResponseTypesSupportedIsMutable();
+          responseTypesSupported_.addAll(other.responseTypesSupported_);
+        }
+        onChanged();
+      }
+      if (!other.subjectTypesSupported_.isEmpty()) {
+        if (subjectTypesSupported_.isEmpty()) {
+          subjectTypesSupported_ = other.subjectTypesSupported_;
+          bitField0_ |= 0x00000008;
+        } else {
+          ensureSubjectTypesSupportedIsMutable();
+          subjectTypesSupported_.addAll(other.subjectTypesSupported_);
+        }
+        onChanged();
+      }
+      if (!other.idTokenSigningAlgValuesSupported_.isEmpty()) {
+        if (idTokenSigningAlgValuesSupported_.isEmpty()) {
+          idTokenSigningAlgValuesSupported_ = other.idTokenSigningAlgValuesSupported_;
+          bitField0_ |= 0x00000010;
+        } else {
+          ensureIdTokenSigningAlgValuesSupportedIsMutable();
+          idTokenSigningAlgValuesSupported_.addAll(other.idTokenSigningAlgValuesSupported_);
+        }
+        onChanged();
+      }
+      if (!other.claimsSupported_.isEmpty()) {
+        if (claimsSupported_.isEmpty()) {
+          claimsSupported_ = other.claimsSupported_;
+          bitField0_ |= 0x00000020;
+        } else {
+          ensureClaimsSupportedIsMutable();
+          claimsSupported_.addAll(other.claimsSupported_);
+        }
+        onChanged();
+      }
+      if (!other.grantTypes_.isEmpty()) {
+        if (grantTypes_.isEmpty()) {
+          grantTypes_ = other.grantTypes_;
+          bitField0_ |= 0x00000040;
+        } else {
+          ensureGrantTypesIsMutable();
+          grantTypes_.addAll(other.grantTypes_);
+        }
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                issuer_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 18:
+              {
+                jwksUri_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 18
+            case 26:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureResponseTypesSupportedIsMutable();
+                responseTypesSupported_.add(s);
+                break;
+              } // case 26
+            case 34:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureSubjectTypesSupportedIsMutable();
+                subjectTypesSupported_.add(s);
+                break;
+              } // case 34
+            case 42:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureIdTokenSigningAlgValuesSupportedIsMutable();
+                idTokenSigningAlgValuesSupported_.add(s);
+                break;
+              } // case 42
+            case 50:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureClaimsSupportedIsMutable();
+                claimsSupported_.add(s);
+                break;
+              } // case 50
+            case 58:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureGrantTypesIsMutable();
+                grantTypes_.add(s);
+                break;
+              } // case 58
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object issuer_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * OIDC Issuer.
+     * </pre>
+     *
+     * <code>string issuer = 1;</code>
+     *
+     * @return The issuer.
+     */
+    public java.lang.String getIssuer() {
+      java.lang.Object ref = issuer_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        issuer_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * OIDC Issuer.
+     * </pre>
+     *
+     * <code>string issuer = 1;</code>
+     *
+     * @return The bytes for issuer.
+     */
+    public com.google.protobuf.ByteString getIssuerBytes() {
+      java.lang.Object ref = issuer_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        issuer_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * OIDC Issuer.
+     * </pre>
+     *
+     * <code>string issuer = 1;</code>
+     *
+     * @param value The issuer to set.
+     * @return This builder for chaining.
+     */
+    public Builder setIssuer(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      issuer_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * OIDC Issuer.
+     * </pre>
+     *
+     * <code>string issuer = 1;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearIssuer() {
+      issuer_ = getDefaultInstance().getIssuer();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * OIDC Issuer.
+     * </pre>
+     *
+     * <code>string issuer = 1;</code>
+     *
+     * @param value The bytes for issuer to set.
+     * @return This builder for chaining.
+     */
+    public Builder setIssuerBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      issuer_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object jwksUri_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * JSON Web Key uri.
+     * </pre>
+     *
+     * <code>string jwks_uri = 2;</code>
+     *
+     * @return The jwksUri.
+     */
+    public java.lang.String getJwksUri() {
+      java.lang.Object ref = jwksUri_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        jwksUri_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * JSON Web Key uri.
+     * </pre>
+     *
+     * <code>string jwks_uri = 2;</code>
+     *
+     * @return The bytes for jwksUri.
+     */
+    public com.google.protobuf.ByteString getJwksUriBytes() {
+      java.lang.Object ref = jwksUri_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        jwksUri_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * JSON Web Key uri.
+     * </pre>
+     *
+     * <code>string jwks_uri = 2;</code>
+     *
+     * @param value The jwksUri to set.
+     * @return This builder for chaining.
+     */
+    public Builder setJwksUri(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      jwksUri_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * JSON Web Key uri.
+     * </pre>
+     *
+     * <code>string jwks_uri = 2;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearJwksUri() {
+      jwksUri_ = getDefaultInstance().getJwksUri();
+      bitField0_ = (bitField0_ & ~0x00000002);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * JSON Web Key uri.
+     * </pre>
+     *
+     * <code>string jwks_uri = 2;</code>
+     *
+     * @param value The bytes for jwksUri to set.
+     * @return This builder for chaining.
+     */
+    public Builder setJwksUriBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      jwksUri_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+
+    private com.google.protobuf.LazyStringArrayList responseTypesSupported_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureResponseTypesSupportedIsMutable() {
+      if (!responseTypesSupported_.isModifiable()) {
+        responseTypesSupported_ =
+            new com.google.protobuf.LazyStringArrayList(responseTypesSupported_);
+      }
+      bitField0_ |= 0x00000004;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @return A list containing the responseTypesSupported.
+     */
+    public com.google.protobuf.ProtocolStringList getResponseTypesSupportedList() {
+      responseTypesSupported_.makeImmutable();
+      return responseTypesSupported_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @return The count of responseTypesSupported.
+     */
+    public int getResponseTypesSupportedCount() {
+      return responseTypesSupported_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param index The index of the element to return.
+     * @return The responseTypesSupported at the given index.
+     */
+    public java.lang.String getResponseTypesSupported(int index) {
+      return responseTypesSupported_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the responseTypesSupported at the given index.
+     */
+    public com.google.protobuf.ByteString getResponseTypesSupportedBytes(int index) {
+      return responseTypesSupported_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The responseTypesSupported to set.
+     * @return This builder for chaining.
+     */
+    public Builder setResponseTypesSupported(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureResponseTypesSupportedIsMutable();
+      responseTypesSupported_.set(index, value);
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param value The responseTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addResponseTypesSupported(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureResponseTypesSupportedIsMutable();
+      responseTypesSupported_.add(value);
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param values The responseTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllResponseTypesSupported(java.lang.Iterable<java.lang.String> values) {
+      ensureResponseTypesSupportedIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, responseTypesSupported_);
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearResponseTypesSupported() {
+      responseTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000004);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param value The bytes of the responseTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addResponseTypesSupportedBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureResponseTypesSupportedIsMutable();
+      responseTypesSupported_.add(value);
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    private com.google.protobuf.LazyStringArrayList subjectTypesSupported_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureSubjectTypesSupportedIsMutable() {
+      if (!subjectTypesSupported_.isModifiable()) {
+        subjectTypesSupported_ =
+            new com.google.protobuf.LazyStringArrayList(subjectTypesSupported_);
+      }
+      bitField0_ |= 0x00000008;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @return A list containing the subjectTypesSupported.
+     */
+    public com.google.protobuf.ProtocolStringList getSubjectTypesSupportedList() {
+      subjectTypesSupported_.makeImmutable();
+      return subjectTypesSupported_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @return The count of subjectTypesSupported.
+     */
+    public int getSubjectTypesSupportedCount() {
+      return subjectTypesSupported_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param index The index of the element to return.
+     * @return The subjectTypesSupported at the given index.
+     */
+    public java.lang.String getSubjectTypesSupported(int index) {
+      return subjectTypesSupported_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the subjectTypesSupported at the given index.
+     */
+    public com.google.protobuf.ByteString getSubjectTypesSupportedBytes(int index) {
+      return subjectTypesSupported_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The subjectTypesSupported to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTypesSupported(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureSubjectTypesSupportedIsMutable();
+      subjectTypesSupported_.set(index, value);
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param value The subjectTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addSubjectTypesSupported(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureSubjectTypesSupportedIsMutable();
+      subjectTypesSupported_.add(value);
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param values The subjectTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllSubjectTypesSupported(java.lang.Iterable<java.lang.String> values) {
+      ensureSubjectTypesSupportedIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, subjectTypesSupported_);
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearSubjectTypesSupported() {
+      subjectTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000008);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param value The bytes of the subjectTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addSubjectTypesSupportedBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureSubjectTypesSupportedIsMutable();
+      subjectTypesSupported_.add(value);
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+
+    private com.google.protobuf.LazyStringArrayList idTokenSigningAlgValuesSupported_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureIdTokenSigningAlgValuesSupportedIsMutable() {
+      if (!idTokenSigningAlgValuesSupported_.isModifiable()) {
+        idTokenSigningAlgValuesSupported_ =
+            new com.google.protobuf.LazyStringArrayList(idTokenSigningAlgValuesSupported_);
+      }
+      bitField0_ |= 0x00000010;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @return A list containing the idTokenSigningAlgValuesSupported.
+     */
+    public com.google.protobuf.ProtocolStringList getIdTokenSigningAlgValuesSupportedList() {
+      idTokenSigningAlgValuesSupported_.makeImmutable();
+      return idTokenSigningAlgValuesSupported_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @return The count of idTokenSigningAlgValuesSupported.
+     */
+    public int getIdTokenSigningAlgValuesSupportedCount() {
+      return idTokenSigningAlgValuesSupported_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param index The index of the element to return.
+     * @return The idTokenSigningAlgValuesSupported at the given index.
+     */
+    public java.lang.String getIdTokenSigningAlgValuesSupported(int index) {
+      return idTokenSigningAlgValuesSupported_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the idTokenSigningAlgValuesSupported at the given index.
+     */
+    public com.google.protobuf.ByteString getIdTokenSigningAlgValuesSupportedBytes(int index) {
+      return idTokenSigningAlgValuesSupported_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The idTokenSigningAlgValuesSupported to set.
+     * @return This builder for chaining.
+     */
+    public Builder setIdTokenSigningAlgValuesSupported(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureIdTokenSigningAlgValuesSupportedIsMutable();
+      idTokenSigningAlgValuesSupported_.set(index, value);
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param value The idTokenSigningAlgValuesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addIdTokenSigningAlgValuesSupported(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureIdTokenSigningAlgValuesSupportedIsMutable();
+      idTokenSigningAlgValuesSupported_.add(value);
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param values The idTokenSigningAlgValuesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllIdTokenSigningAlgValuesSupported(
+        java.lang.Iterable<java.lang.String> values) {
+      ensureIdTokenSigningAlgValuesSupportedIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(
+          values, idTokenSigningAlgValuesSupported_);
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearIdTokenSigningAlgValuesSupported() {
+      idTokenSigningAlgValuesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000010);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param value The bytes of the idTokenSigningAlgValuesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addIdTokenSigningAlgValuesSupportedBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureIdTokenSigningAlgValuesSupportedIsMutable();
+      idTokenSigningAlgValuesSupported_.add(value);
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+
+    private com.google.protobuf.LazyStringArrayList claimsSupported_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureClaimsSupportedIsMutable() {
+      if (!claimsSupported_.isModifiable()) {
+        claimsSupported_ = new com.google.protobuf.LazyStringArrayList(claimsSupported_);
+      }
+      bitField0_ |= 0x00000020;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @return A list containing the claimsSupported.
+     */
+    public com.google.protobuf.ProtocolStringList getClaimsSupportedList() {
+      claimsSupported_.makeImmutable();
+      return claimsSupported_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @return The count of claimsSupported.
+     */
+    public int getClaimsSupportedCount() {
+      return claimsSupported_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param index The index of the element to return.
+     * @return The claimsSupported at the given index.
+     */
+    public java.lang.String getClaimsSupported(int index) {
+      return claimsSupported_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the claimsSupported at the given index.
+     */
+    public com.google.protobuf.ByteString getClaimsSupportedBytes(int index) {
+      return claimsSupported_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The claimsSupported to set.
+     * @return This builder for chaining.
+     */
+    public Builder setClaimsSupported(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureClaimsSupportedIsMutable();
+      claimsSupported_.set(index, value);
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param value The claimsSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addClaimsSupported(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureClaimsSupportedIsMutable();
+      claimsSupported_.add(value);
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param values The claimsSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllClaimsSupported(java.lang.Iterable<java.lang.String> values) {
+      ensureClaimsSupportedIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, claimsSupported_);
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearClaimsSupported() {
+      claimsSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000020);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param value The bytes of the claimsSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addClaimsSupportedBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureClaimsSupportedIsMutable();
+      claimsSupported_.add(value);
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+
+    private com.google.protobuf.LazyStringArrayList grantTypes_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureGrantTypesIsMutable() {
+      if (!grantTypes_.isModifiable()) {
+        grantTypes_ = new com.google.protobuf.LazyStringArrayList(grantTypes_);
+      }
+      bitField0_ |= 0x00000040;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @return A list containing the grantTypes.
+     */
+    public com.google.protobuf.ProtocolStringList getGrantTypesList() {
+      grantTypes_.makeImmutable();
+      return grantTypes_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @return The count of grantTypes.
+     */
+    public int getGrantTypesCount() {
+      return grantTypes_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param index The index of the element to return.
+     * @return The grantTypes at the given index.
+     */
+    public java.lang.String getGrantTypes(int index) {
+      return grantTypes_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the grantTypes at the given index.
+     */
+    public com.google.protobuf.ByteString getGrantTypesBytes(int index) {
+      return grantTypes_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The grantTypes to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGrantTypes(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureGrantTypesIsMutable();
+      grantTypes_.set(index, value);
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param value The grantTypes to add.
+     * @return This builder for chaining.
+     */
+    public Builder addGrantTypes(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureGrantTypesIsMutable();
+      grantTypes_.add(value);
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param values The grantTypes to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllGrantTypes(java.lang.Iterable<java.lang.String> values) {
+      ensureGrantTypesIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, grantTypes_);
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearGrantTypes() {
+      grantTypes_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000040);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param value The bytes of the grantTypes to add.
+     * @return This builder for chaining.
+     */
+    public Builder addGrantTypesBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureGrantTypesIsMutable();
+      grantTypes_.add(value);
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.AwsOpenIdConfig)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.AwsOpenIdConfig)
+  private static final com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<AwsOpenIdConfig> PARSER =
+      new com.google.protobuf.AbstractParser<AwsOpenIdConfig>() {
+        @java.lang.Override
+        public AwsOpenIdConfig parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<AwsOpenIdConfig> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<AwsOpenIdConfig> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsOpenIdConfigOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsOpenIdConfigOrBuilder.java
new file mode 100644
index 000000000000..34a2174ab242
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsOpenIdConfigOrBuilder.java
@@ -0,0 +1,330 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface AwsOpenIdConfigOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.AwsOpenIdConfig)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * OIDC Issuer.
+   * </pre>
+   *
+   * <code>string issuer = 1;</code>
+   *
+   * @return The issuer.
+   */
+  java.lang.String getIssuer();
+  /**
+   *
+   *
+   * <pre>
+   * OIDC Issuer.
+   * </pre>
+   *
+   * <code>string issuer = 1;</code>
+   *
+   * @return The bytes for issuer.
+   */
+  com.google.protobuf.ByteString getIssuerBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * JSON Web Key uri.
+   * </pre>
+   *
+   * <code>string jwks_uri = 2;</code>
+   *
+   * @return The jwksUri.
+   */
+  java.lang.String getJwksUri();
+  /**
+   *
+   *
+   * <pre>
+   * JSON Web Key uri.
+   * </pre>
+   *
+   * <code>string jwks_uri = 2;</code>
+   *
+   * @return The bytes for jwksUri.
+   */
+  com.google.protobuf.ByteString getJwksUriBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @return A list containing the responseTypesSupported.
+   */
+  java.util.List<java.lang.String> getResponseTypesSupportedList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @return The count of responseTypesSupported.
+   */
+  int getResponseTypesSupportedCount();
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The responseTypesSupported at the given index.
+   */
+  java.lang.String getResponseTypesSupported(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the responseTypesSupported at the given index.
+   */
+  com.google.protobuf.ByteString getResponseTypesSupportedBytes(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @return A list containing the subjectTypesSupported.
+   */
+  java.util.List<java.lang.String> getSubjectTypesSupportedList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @return The count of subjectTypesSupported.
+   */
+  int getSubjectTypesSupportedCount();
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The subjectTypesSupported at the given index.
+   */
+  java.lang.String getSubjectTypesSupported(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the subjectTypesSupported at the given index.
+   */
+  com.google.protobuf.ByteString getSubjectTypesSupportedBytes(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @return A list containing the idTokenSigningAlgValuesSupported.
+   */
+  java.util.List<java.lang.String> getIdTokenSigningAlgValuesSupportedList();
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @return The count of idTokenSigningAlgValuesSupported.
+   */
+  int getIdTokenSigningAlgValuesSupportedCount();
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The idTokenSigningAlgValuesSupported at the given index.
+   */
+  java.lang.String getIdTokenSigningAlgValuesSupported(int index);
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the idTokenSigningAlgValuesSupported at the given index.
+   */
+  com.google.protobuf.ByteString getIdTokenSigningAlgValuesSupportedBytes(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @return A list containing the claimsSupported.
+   */
+  java.util.List<java.lang.String> getClaimsSupportedList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @return The count of claimsSupported.
+   */
+  int getClaimsSupportedCount();
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The claimsSupported at the given index.
+   */
+  java.lang.String getClaimsSupported(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the claimsSupported at the given index.
+   */
+  com.google.protobuf.ByteString getClaimsSupportedBytes(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @return A list containing the grantTypes.
+   */
+  java.util.List<java.lang.String> getGrantTypesList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @return The count of grantTypes.
+   */
+  int getGrantTypesCount();
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The grantTypes at the given index.
+   */
+  java.lang.String getGrantTypes(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the grantTypes at the given index.
+   */
+  com.google.protobuf.ByteString getGrantTypesBytes(int index);
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsResourcesProto.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsResourcesProto.java
index 5fe728ea81a4..b126d37d9e94 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsResourcesProto.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsResourcesProto.java
@@ -55,6 +55,10 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_AwsClusterUser_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_AwsClusterUser_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_AwsClusterGroup_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_AwsClusterGroup_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_AwsDatabaseEncryption_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -75,6 +79,18 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_AwsNodePool_AnnotationsEntry_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_AwsNodePool_AnnotationsEntry_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_UpdateSettings_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_UpdateSettings_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_SurgeSettings_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_SurgeSettings_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_AwsNodeManagement_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_AwsNodeManagement_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_AwsNodeConfig_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -91,6 +107,14 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_AwsNodePoolAutoscaling_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_AwsNodePoolAutoscaling_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_AwsOpenIdConfig_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_AwsOpenIdConfig_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_AwsJsonWebKeys_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_AwsJsonWebKeys_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_AwsServerConfig_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -119,6 +143,10 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_AwsAutoscalingGroupMetricsCollection_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_AwsAutoscalingGroupMetricsCollection_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_SpotConfig_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_SpotConfig_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_AwsClusterError_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -141,159 +169,190 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "v1\032\037google/api/field_behavior.proto\032\031goo"
           + "gle/api/resource.proto\0324google/cloud/gke"
           + "multicloud/v1/common_resources.proto\032\037go"
-          + "ogle/protobuf/timestamp.proto\"\330\n\n\nAwsClu"
-          + "ster\022\014\n\004name\030\001 \001(\t\022\031\n\013description\030\002 \001(\tB"
-          + "\004\342A\001\001\022M\n\nnetworking\030\003 \001(\01323.google.cloud"
-          + ".gkemulticloud.v1.AwsClusterNetworkingB\004"
-          + "\342A\001\002\022\030\n\naws_region\030\004 \001(\tB\004\342A\001\002\022K\n\rcontro"
-          + "l_plane\030\005 \001(\0132..google.cloud.gkemulticlo"
-          + "ud.v1.AwsControlPlaneB\004\342A\001\002\022L\n\rauthoriza"
-          + "tion\030\017 \001(\0132/.google.cloud.gkemulticloud."
-          + "v1.AwsAuthorizationB\004\342A\001\002\022D\n\005state\030\007 \001(\016"
-          + "2/.google.cloud.gkemulticloud.v1.AwsClus"
-          + "ter.StateB\004\342A\001\003\022\026\n\010endpoint\030\010 \001(\tB\004\342A\001\003\022"
-          + "\021\n\003uid\030\t \001(\tB\004\342A\001\003\022\031\n\013reconciling\030\n \001(\010B"
-          + "\004\342A\001\003\0225\n\013create_time\030\013 \001(\0132\032.google.prot"
-          + "obuf.TimestampB\004\342A\001\003\0225\n\013update_time\030\014 \001("
+          + "ogle/protobuf/timestamp.proto\032\026google/ty"
+          + "pe/date.proto\"\260\013\n\nAwsCluster\022\014\n\004name\030\001 \001"
+          + "(\t\022\031\n\013description\030\002 \001(\tB\004\342A\001\001\022M\n\nnetwork"
+          + "ing\030\003 \001(\01323.google.cloud.gkemulticloud.v"
+          + "1.AwsClusterNetworkingB\004\342A\001\002\022\030\n\naws_regi"
+          + "on\030\004 \001(\tB\004\342A\001\002\022K\n\rcontrol_plane\030\005 \001(\0132.."
+          + "google.cloud.gkemulticloud.v1.AwsControl"
+          + "PlaneB\004\342A\001\002\022L\n\rauthorization\030\017 \001(\0132/.goo"
+          + "gle.cloud.gkemulticloud.v1.AwsAuthorizat"
+          + "ionB\004\342A\001\002\022D\n\005state\030\007 \001(\0162/.google.cloud."
+          + "gkemulticloud.v1.AwsCluster.StateB\004\342A\001\003\022"
+          + "\026\n\010endpoint\030\010 \001(\tB\004\342A\001\003\022\021\n\003uid\030\t \001(\tB\004\342A"
+          + "\001\003\022\031\n\013reconciling\030\n \001(\010B\004\342A\001\003\0225\n\013create_"
+          + "time\030\013 \001(\0132\032.google.protobuf.TimestampB\004"
+          + "\342A\001\003\0225\n\013update_time\030\014 \001(\0132\032.google.proto"
+          + "buf.TimestampB\004\342A\001\003\022\014\n\004etag\030\r \001(\t\022U\n\013ann"
+          + "otations\030\016 \003(\0132:.google.cloud.gkemulticl"
+          + "oud.v1.AwsCluster.AnnotationsEntryB\004\342A\001\001"
+          + "\022]\n\030workload_identity_config\030\020 \001(\01325.goo"
+          + "gle.cloud.gkemulticloud.v1.WorkloadIdent"
+          + "ityConfigB\004\342A\001\003\022$\n\026cluster_ca_certificat"
+          + "e\030\021 \001(\tB\004\342A\001\003\0229\n\005fleet\030\022 \001(\0132$.google.cl"
+          + "oud.gkemulticloud.v1.FleetB\004\342A\001\002\022J\n\016logg"
+          + "ing_config\030\023 \001(\0132,.google.cloud.gkemulti"
+          + "cloud.v1.LoggingConfigB\004\342A\001\001\022D\n\006errors\030\024"
+          + " \003(\0132..google.cloud.gkemulticloud.v1.Aws"
+          + "ClusterErrorB\004\342A\001\003\022P\n\021monitoring_config\030"
+          + "\025 \001(\0132/.google.cloud.gkemulticloud.v1.Mo"
+          + "nitoringConfigB\004\342A\001\001\022V\n\024binary_authoriza"
+          + "tion\030\026 \001(\01322.google.cloud.gkemulticloud."
+          + "v1.BinaryAuthorizationB\004\342A\001\001\0322\n\020Annotati"
+          + "onsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001"
+          + "\"u\n\005State\022\025\n\021STATE_UNSPECIFIED\020\000\022\020\n\014PROV"
+          + "ISIONING\020\001\022\013\n\007RUNNING\020\002\022\017\n\013RECONCILING\020\003"
+          + "\022\014\n\010STOPPING\020\004\022\t\n\005ERROR\020\005\022\014\n\010DEGRADED\020\006:"
+          + "o\352Al\n\'gkemulticloud.googleapis.com/AwsCl"
+          + "uster\022Aprojects/{project}/locations/{loc"
+          + "ation}/awsClusters/{aws_cluster}\"\266\007\n\017Aws"
+          + "ControlPlane\022\025\n\007version\030\001 \001(\tB\004\342A\001\002\022\033\n\ri"
+          + "nstance_type\030\002 \001(\tB\004\342A\001\001\022E\n\nssh_config\030\016"
+          + " \001(\0132+.google.cloud.gkemulticloud.v1.Aws"
+          + "SshConfigB\004\342A\001\001\022\030\n\nsubnet_ids\030\004 \003(\tB\004\342A\001"
+          + "\002\022 \n\022security_group_ids\030\005 \003(\tB\004\342A\001\001\022\"\n\024i"
+          + "am_instance_profile\030\007 \001(\tB\004\342A\001\002\022K\n\013root_"
+          + "volume\030\010 \001(\01320.google.cloud.gkemulticlou"
+          + "d.v1.AwsVolumeTemplateB\004\342A\001\001\022K\n\013main_vol"
+          + "ume\030\t \001(\01320.google.cloud.gkemulticloud.v"
+          + "1.AwsVolumeTemplateB\004\342A\001\001\022W\n\023database_en"
+          + "cryption\030\n \001(\01324.google.cloud.gkemulticl"
+          + "oud.v1.AwsDatabaseEncryptionB\004\342A\001\002\022L\n\004ta"
+          + "gs\030\013 \003(\01328.google.cloud.gkemulticloud.v1"
+          + ".AwsControlPlane.TagsEntryB\004\342A\001\001\022c\n\033aws_"
+          + "services_authentication\030\014 \001(\01328.google.c"
+          + "loud.gkemulticloud.v1.AwsServicesAuthent"
+          + "icationB\004\342A\001\002\022I\n\014proxy_config\030\020 \001(\0132-.go"
+          + "ogle.cloud.gkemulticloud.v1.AwsProxyConf"
+          + "igB\004\342A\001\001\022S\n\021config_encryption\030\021 \001(\01322.go"
+          + "ogle.cloud.gkemulticloud.v1.AwsConfigEnc"
+          + "ryptionB\004\342A\001\002\022U\n\022instance_placement\030\022 \001("
+          + "\01323.google.cloud.gkemulticloud.v1.AwsIns"
+          + "tancePlacementB\004\342A\001\001\032+\n\tTagsEntry\022\013\n\003key"
+          + "\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001\"T\n\031AwsServices"
+          + "Authentication\022\026\n\010role_arn\030\001 \001(\tB\004\342A\001\002\022\037"
+          + "\n\021role_session_name\030\002 \001(\tB\004\342A\001\001\"\250\001\n\020AwsA"
+          + "uthorization\022H\n\013admin_users\030\001 \003(\0132-.goog"
+          + "le.cloud.gkemulticloud.v1.AwsClusterUser"
+          + "B\004\342A\001\001\022J\n\014admin_groups\030\002 \003(\0132..google.cl"
+          + "oud.gkemulticloud.v1.AwsClusterGroupB\004\342A"
+          + "\001\001\"(\n\016AwsClusterUser\022\026\n\010username\030\001 \001(\tB\004"
+          + "\342A\001\002\"&\n\017AwsClusterGroup\022\023\n\005group\030\001 \001(\tB\004"
+          + "\342A\001\002\"2\n\025AwsDatabaseEncryption\022\031\n\013kms_key"
+          + "_arn\030\001 \001(\tB\004\342A\001\002\"\211\002\n\021AwsVolumeTemplate\022\026"
+          + "\n\010size_gib\030\001 \001(\005B\004\342A\001\001\022V\n\013volume_type\030\002 "
+          + "\001(\0162;.google.cloud.gkemulticloud.v1.AwsV"
+          + "olumeTemplate.VolumeTypeB\004\342A\001\001\022\022\n\004iops\030\003"
+          + " \001(\005B\004\342A\001\001\022\030\n\nthroughput\030\005 \001(\005B\004\342A\001\001\022\031\n\013"
+          + "kms_key_arn\030\004 \001(\tB\004\342A\001\001\";\n\nVolumeType\022\033\n"
+          + "\027VOLUME_TYPE_UNSPECIFIED\020\000\022\007\n\003GP2\020\001\022\007\n\003G"
+          + "P3\020\002\"\255\001\n\024AwsClusterNetworking\022\024\n\006vpc_id\030"
+          + "\001 \001(\tB\004\342A\001\002\022%\n\027pod_address_cidr_blocks\030\002"
+          + " \003(\tB\004\342A\001\002\022)\n\033service_address_cidr_block"
+          + "s\030\003 \003(\tB\004\342A\001\002\022-\n\037per_node_pool_sg_rules_"
+          + "disabled\030\005 \001(\010B\004\342A\001\001\"\234\t\n\013AwsNodePool\022\014\n\004"
+          + "name\030\001 \001(\t\022\025\n\007version\030\003 \001(\tB\004\342A\001\002\022B\n\006con"
+          + "fig\030\034 \001(\0132,.google.cloud.gkemulticloud.v"
+          + "1.AwsNodeConfigB\004\342A\001\002\022P\n\013autoscaling\030\031 \001"
+          + "(\01325.google.cloud.gkemulticloud.v1.AwsNo"
+          + "dePoolAutoscalingB\004\342A\001\002\022\027\n\tsubnet_id\030\006 \001"
+          + "(\tB\004\342A\001\002\022E\n\005state\030\020 \001(\01620.google.cloud.g"
+          + "kemulticloud.v1.AwsNodePool.StateB\004\342A\001\003\022"
+          + "\021\n\003uid\030\021 \001(\tB\004\342A\001\003\022\031\n\013reconciling\030\022 \001(\010B"
+          + "\004\342A\001\003\0225\n\013create_time\030\023 \001(\0132\032.google.prot"
+          + "obuf.TimestampB\004\342A\001\003\0225\n\013update_time\030\024 \001("
           + "\0132\032.google.protobuf.TimestampB\004\342A\001\003\022\014\n\004e"
-          + "tag\030\r \001(\t\022U\n\013annotations\030\016 \003(\0132:.google."
-          + "cloud.gkemulticloud.v1.AwsCluster.Annota"
-          + "tionsEntryB\004\342A\001\001\022]\n\030workload_identity_co"
-          + "nfig\030\020 \001(\01325.google.cloud.gkemulticloud."
-          + "v1.WorkloadIdentityConfigB\004\342A\001\003\022$\n\026clust"
-          + "er_ca_certificate\030\021 \001(\tB\004\342A\001\003\0229\n\005fleet\030\022"
-          + " \001(\0132$.google.cloud.gkemulticloud.v1.Fle"
-          + "etB\004\342A\001\002\022J\n\016logging_config\030\023 \001(\0132,.googl"
-          + "e.cloud.gkemulticloud.v1.LoggingConfigB\004"
-          + "\342A\001\001\022D\n\006errors\030\024 \003(\0132..google.cloud.gkem"
-          + "ulticloud.v1.AwsClusterErrorB\004\342A\001\003\022P\n\021mo"
-          + "nitoring_config\030\025 \001(\0132/.google.cloud.gke"
-          + "multicloud.v1.MonitoringConfigB\004\342A\001\001\0322\n\020"
-          + "AnnotationsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002"
-          + " \001(\t:\0028\001\"u\n\005State\022\025\n\021STATE_UNSPECIFIED\020\000"
-          + "\022\020\n\014PROVISIONING\020\001\022\013\n\007RUNNING\020\002\022\017\n\013RECON"
-          + "CILING\020\003\022\014\n\010STOPPING\020\004\022\t\n\005ERROR\020\005\022\014\n\010DEG"
-          + "RADED\020\006:o\352Al\n\'gkemulticloud.googleapis.c"
-          + "om/AwsCluster\022Aprojects/{project}/locati"
-          + "ons/{location}/awsClusters/{aws_cluster}"
-          + "\"\266\007\n\017AwsControlPlane\022\025\n\007version\030\001 \001(\tB\004\342"
-          + "A\001\002\022\033\n\rinstance_type\030\002 \001(\tB\004\342A\001\001\022E\n\nssh_"
-          + "config\030\016 \001(\0132+.google.cloud.gkemulticlou"
-          + "d.v1.AwsSshConfigB\004\342A\001\001\022\030\n\nsubnet_ids\030\004 "
-          + "\003(\tB\004\342A\001\002\022 \n\022security_group_ids\030\005 \003(\tB\004\342"
-          + "A\001\001\022\"\n\024iam_instance_profile\030\007 \001(\tB\004\342A\001\002\022"
-          + "K\n\013root_volume\030\010 \001(\01320.google.cloud.gkem"
-          + "ulticloud.v1.AwsVolumeTemplateB\004\342A\001\001\022K\n\013"
-          + "main_volume\030\t \001(\01320.google.cloud.gkemult"
-          + "icloud.v1.AwsVolumeTemplateB\004\342A\001\001\022W\n\023dat"
-          + "abase_encryption\030\n \001(\01324.google.cloud.gk"
-          + "emulticloud.v1.AwsDatabaseEncryptionB\004\342A"
-          + "\001\002\022L\n\004tags\030\013 \003(\01328.google.cloud.gkemulti"
-          + "cloud.v1.AwsControlPlane.TagsEntryB\004\342A\001\001"
-          + "\022c\n\033aws_services_authentication\030\014 \001(\01328."
-          + "google.cloud.gkemulticloud.v1.AwsService"
-          + "sAuthenticationB\004\342A\001\002\022I\n\014proxy_config\030\020 "
-          + "\001(\0132-.google.cloud.gkemulticloud.v1.AwsP"
-          + "roxyConfigB\004\342A\001\001\022S\n\021config_encryption\030\021 "
-          + "\001(\01322.google.cloud.gkemulticloud.v1.AwsC"
-          + "onfigEncryptionB\004\342A\001\002\022U\n\022instance_placem"
-          + "ent\030\022 \001(\01323.google.cloud.gkemulticloud.v"
-          + "1.AwsInstancePlacementB\004\342A\001\001\032+\n\tTagsEntr"
-          + "y\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001\"T\n\031Aws"
-          + "ServicesAuthentication\022\026\n\010role_arn\030\001 \001(\t"
-          + "B\004\342A\001\002\022\037\n\021role_session_name\030\002 \001(\tB\004\342A\001\001\""
-          + "\\\n\020AwsAuthorization\022H\n\013admin_users\030\001 \003(\013"
-          + "2-.google.cloud.gkemulticloud.v1.AwsClus"
-          + "terUserB\004\342A\001\002\"(\n\016AwsClusterUser\022\026\n\010usern"
-          + "ame\030\001 \001(\tB\004\342A\001\002\"2\n\025AwsDatabaseEncryption"
-          + "\022\031\n\013kms_key_arn\030\001 \001(\tB\004\342A\001\002\"\357\001\n\021AwsVolum"
-          + "eTemplate\022\026\n\010size_gib\030\001 \001(\005B\004\342A\001\001\022V\n\013vol"
-          + "ume_type\030\002 \001(\0162;.google.cloud.gkemulticl"
-          + "oud.v1.AwsVolumeTemplate.VolumeTypeB\004\342A\001"
-          + "\001\022\022\n\004iops\030\003 \001(\005B\004\342A\001\001\022\031\n\013kms_key_arn\030\004 \001"
-          + "(\tB\004\342A\001\001\";\n\nVolumeType\022\033\n\027VOLUME_TYPE_UN"
-          + "SPECIFIED\020\000\022\007\n\003GP2\020\001\022\007\n\003GP3\020\002\"~\n\024AwsClus"
-          + "terNetworking\022\024\n\006vpc_id\030\001 \001(\tB\004\342A\001\002\022%\n\027p"
-          + "od_address_cidr_blocks\030\002 \003(\tB\004\342A\001\002\022)\n\033se"
-          + "rvice_address_cidr_blocks\030\003 \003(\tB\004\342A\001\002\"\202\010"
-          + "\n\013AwsNodePool\022\014\n\004name\030\001 \001(\t\022\025\n\007version\030\003"
-          + " \001(\tB\004\342A\001\002\022B\n\006config\030\034 \001(\0132,.google.clou"
-          + "d.gkemulticloud.v1.AwsNodeConfigB\004\342A\001\002\022P"
-          + "\n\013autoscaling\030\031 \001(\01325.google.cloud.gkemu"
-          + "lticloud.v1.AwsNodePoolAutoscalingB\004\342A\001\002"
-          + "\022\027\n\tsubnet_id\030\006 \001(\tB\004\342A\001\002\022E\n\005state\030\020 \001(\016"
-          + "20.google.cloud.gkemulticloud.v1.AwsNode"
-          + "Pool.StateB\004\342A\001\003\022\021\n\003uid\030\021 \001(\tB\004\342A\001\003\022\031\n\013r"
-          + "econciling\030\022 \001(\010B\004\342A\001\003\0225\n\013create_time\030\023 "
-          + "\001(\0132\032.google.protobuf.TimestampB\004\342A\001\003\0225\n"
-          + "\013update_time\030\024 \001(\0132\032.google.protobuf.Tim"
-          + "estampB\004\342A\001\003\022\014\n\004etag\030\025 \001(\t\022V\n\013annotation"
-          + "s\030\026 \003(\0132;.google.cloud.gkemulticloud.v1."
-          + "AwsNodePool.AnnotationsEntryB\004\342A\001\001\022S\n\023ma"
-          + "x_pods_constraint\030\033 \001(\01320.google.cloud.g"
-          + "kemulticloud.v1.MaxPodsConstraintB\004\342A\001\002\022"
-          + "E\n\006errors\030\035 \003(\0132/.google.cloud.gkemultic"
-          + "loud.v1.AwsNodePoolErrorB\004\342A\001\003\0322\n\020Annota"
-          + "tionsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\002"
-          + "8\001\"u\n\005State\022\025\n\021STATE_UNSPECIFIED\020\000\022\020\n\014PR"
-          + "OVISIONING\020\001\022\013\n\007RUNNING\020\002\022\017\n\013RECONCILING"
-          + "\020\003\022\014\n\010STOPPING\020\004\022\t\n\005ERROR\020\005\022\014\n\010DEGRADED\020"
-          + "\006:\216\001\352A\212\001\n(gkemulticloud.googleapis.com/A"
-          + "wsNodePool\022^projects/{project}/locations"
-          + "/{location}/awsClusters/{aws_cluster}/aw"
-          + "sNodePools/{aws_node_pool}\"\302\007\n\rAwsNodeCo"
-          + "nfig\022\033\n\rinstance_type\030\001 \001(\tB\004\342A\001\001\022K\n\013roo"
-          + "t_volume\030\002 \001(\01320.google.cloud.gkemulticl"
-          + "oud.v1.AwsVolumeTemplateB\004\342A\001\001\022>\n\006taints"
-          + "\030\003 \003(\0132(.google.cloud.gkemulticloud.v1.N"
-          + "odeTaintB\004\342A\001\001\022N\n\006labels\030\004 \003(\01328.google."
-          + "cloud.gkemulticloud.v1.AwsNodeConfig.Lab"
-          + "elsEntryB\004\342A\001\001\022J\n\004tags\030\005 \003(\01326.google.cl"
-          + "oud.gkemulticloud.v1.AwsNodeConfig.TagsE"
-          + "ntryB\004\342A\001\001\022\"\n\024iam_instance_profile\030\006 \001(\t"
-          + "B\004\342A\001\002\022\030\n\nimage_type\030\013 \001(\tB\004\342A\001\001\022E\n\nssh_"
-          + "config\030\t \001(\0132+.google.cloud.gkemulticlou"
-          + "d.v1.AwsSshConfigB\004\342A\001\001\022 \n\022security_grou"
-          + "p_ids\030\n \003(\tB\004\342A\001\001\022I\n\014proxy_config\030\014 \001(\0132"
-          + "-.google.cloud.gkemulticloud.v1.AwsProxy"
-          + "ConfigB\004\342A\001\001\022S\n\021config_encryption\030\r \001(\0132"
-          + "2.google.cloud.gkemulticloud.v1.AwsConfi"
-          + "gEncryptionB\004\342A\001\002\022U\n\022instance_placement\030"
-          + "\016 \001(\01323.google.cloud.gkemulticloud.v1.Aw"
-          + "sInstancePlacementB\004\342A\001\001\022q\n\036autoscaling_"
-          + "metrics_collection\030\017 \001(\0132C.google.cloud."
-          + "gkemulticloud.v1.AwsAutoscalingGroupMetr"
-          + "icsCollectionB\004\342A\001\001\032-\n\013LabelsEntry\022\013\n\003ke"
-          + "y\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001\032+\n\tTagsEntry\022"
-          + "\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001\"T\n\026AwsNo"
-          + "dePoolAutoscaling\022\034\n\016min_node_count\030\001 \001("
-          + "\005B\004\342A\001\002\022\034\n\016max_node_count\030\002 \001(\005B\004\342A\001\002\"\364\001"
-          + "\n\017AwsServerConfig\022\014\n\004name\030\001 \001(\t\022H\n\016valid"
-          + "_versions\030\002 \003(\01320.google.cloud.gkemultic"
-          + "loud.v1.AwsK8sVersionInfo\022\035\n\025supported_a"
-          + "ws_regions\030\003 \003(\t:j\352Ag\n,gkemulticloud.goo"
-          + "gleapis.com/AwsServerConfig\0227projects/{p"
-          + "roject}/locations/{location}/awsServerCo"
-          + "nfig\"$\n\021AwsK8sVersionInfo\022\017\n\007version\030\001 \001"
-          + "(\t\"*\n\014AwsSshConfig\022\032\n\014ec2_key_pair\030\001 \001(\t"
-          + "B\004\342A\001\002\"<\n\016AwsProxyConfig\022\022\n\nsecret_arn\030\001"
-          + " \001(\t\022\026\n\016secret_version\030\002 \001(\t\"0\n\023AwsConfi"
-          + "gEncryption\022\031\n\013kms_key_arn\030\001 \001(\tB\004\342A\001\002\"\264"
-          + "\001\n\024AwsInstancePlacement\022R\n\007tenancy\030\001 \001(\016"
-          + "2;.google.cloud.gkemulticloud.v1.AwsInst"
-          + "ancePlacement.TenancyB\004\342A\001\002\"H\n\007Tenancy\022\027"
-          + "\n\023TENANCY_UNSPECIFIED\020\000\022\013\n\007DEFAULT\020\001\022\r\n\t"
-          + "DEDICATED\020\002\022\010\n\004HOST\020\003\"X\n$AwsAutoscalingG"
-          + "roupMetricsCollection\022\031\n\013granularity\030\001 \001"
-          + "(\tB\004\342A\001\002\022\025\n\007metrics\030\002 \003(\tB\004\342A\001\001\"\"\n\017AwsCl"
-          + "usterError\022\017\n\007message\030\001 \001(\t\"#\n\020AwsNodePo"
-          + "olError\022\017\n\007message\030\001 \001(\tB\344\001\n!com.google."
-          + "cloud.gkemulticloud.v1B\021AwsResourcesProt"
-          + "oP\001ZGcloud.google.com/go/gkemulticloud/a"
-          + "piv1/gkemulticloudpb;gkemulticloudpb\252\002\035G"
-          + "oogle.Cloud.GkeMultiCloud.V1\312\002\035Google\\Cl"
-          + "oud\\GkeMultiCloud\\V1\352\002 Google::Cloud::Gk"
-          + "eMultiCloud::V1b\006proto3"
+          + "tag\030\025 \001(\t\022V\n\013annotations\030\026 \003(\0132;.google."
+          + "cloud.gkemulticloud.v1.AwsNodePool.Annot"
+          + "ationsEntryB\004\342A\001\001\022S\n\023max_pods_constraint"
+          + "\030\033 \001(\01320.google.cloud.gkemulticloud.v1.M"
+          + "axPodsConstraintB\004\342A\001\002\022E\n\006errors\030\035 \003(\0132/"
+          + ".google.cloud.gkemulticloud.v1.AwsNodePo"
+          + "olErrorB\004\342A\001\003\022J\n\nmanagement\030\036 \001(\01320.goog"
+          + "le.cloud.gkemulticloud.v1.AwsNodeManagem"
+          + "entB\004\342A\001\001\022L\n\017update_settings\030  \001(\0132-.goo"
+          + "gle.cloud.gkemulticloud.v1.UpdateSetting"
+          + "sB\004\342A\001\001\0322\n\020AnnotationsEntry\022\013\n\003key\030\001 \001(\t"
+          + "\022\r\n\005value\030\002 \001(\t:\0028\001\"u\n\005State\022\025\n\021STATE_UN"
+          + "SPECIFIED\020\000\022\020\n\014PROVISIONING\020\001\022\013\n\007RUNNING"
+          + "\020\002\022\017\n\013RECONCILING\020\003\022\014\n\010STOPPING\020\004\022\t\n\005ERR"
+          + "OR\020\005\022\014\n\010DEGRADED\020\006:\216\001\352A\212\001\n(gkemulticloud"
+          + ".googleapis.com/AwsNodePool\022^projects/{p"
+          + "roject}/locations/{location}/awsClusters"
+          + "/{aws_cluster}/awsNodePools/{aws_node_po"
+          + "ol}\"\\\n\016UpdateSettings\022J\n\016surge_settings\030"
+          + "\001 \001(\0132,.google.cloud.gkemulticloud.v1.Su"
+          + "rgeSettingsB\004\342A\001\001\"G\n\rSurgeSettings\022\027\n\tma"
+          + "x_surge\030\001 \001(\005B\004\342A\001\001\022\035\n\017max_unavailable\030\002"
+          + " \001(\005B\004\342A\001\001\".\n\021AwsNodeManagement\022\031\n\013auto_"
+          + "repair\030\001 \001(\010B\004\342A\001\001\"\210\010\n\rAwsNodeConfig\022\033\n\r"
+          + "instance_type\030\001 \001(\tB\004\342A\001\001\022K\n\013root_volume"
+          + "\030\002 \001(\01320.google.cloud.gkemulticloud.v1.A"
+          + "wsVolumeTemplateB\004\342A\001\001\022>\n\006taints\030\003 \003(\0132("
+          + ".google.cloud.gkemulticloud.v1.NodeTaint"
+          + "B\004\342A\001\001\022N\n\006labels\030\004 \003(\01328.google.cloud.gk"
+          + "emulticloud.v1.AwsNodeConfig.LabelsEntry"
+          + "B\004\342A\001\001\022J\n\004tags\030\005 \003(\01326.google.cloud.gkem"
+          + "ulticloud.v1.AwsNodeConfig.TagsEntryB\004\342A"
+          + "\001\001\022\"\n\024iam_instance_profile\030\006 \001(\tB\004\342A\001\002\022\030"
+          + "\n\nimage_type\030\013 \001(\tB\004\342A\001\001\022E\n\nssh_config\030\t"
+          + " \001(\0132+.google.cloud.gkemulticloud.v1.Aws"
+          + "SshConfigB\004\342A\001\001\022 \n\022security_group_ids\030\n "
+          + "\003(\tB\004\342A\001\001\022I\n\014proxy_config\030\014 \001(\0132-.google"
+          + ".cloud.gkemulticloud.v1.AwsProxyConfigB\004"
+          + "\342A\001\001\022S\n\021config_encryption\030\r \001(\01322.google"
+          + ".cloud.gkemulticloud.v1.AwsConfigEncrypt"
+          + "ionB\004\342A\001\002\022U\n\022instance_placement\030\016 \001(\01323."
+          + "google.cloud.gkemulticloud.v1.AwsInstanc"
+          + "ePlacementB\004\342A\001\001\022q\n\036autoscaling_metrics_"
+          + "collection\030\017 \001(\0132C.google.cloud.gkemulti"
+          + "cloud.v1.AwsAutoscalingGroupMetricsColle"
+          + "ctionB\004\342A\001\001\022D\n\013spot_config\030\020 \001(\0132).googl"
+          + "e.cloud.gkemulticloud.v1.SpotConfigB\004\342A\001"
+          + "\001\032-\n\013LabelsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002"
+          + " \001(\t:\0028\001\032+\n\tTagsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005va"
+          + "lue\030\002 \001(\t:\0028\001\"T\n\026AwsNodePoolAutoscaling\022"
+          + "\034\n\016min_node_count\030\001 \001(\005B\004\342A\001\002\022\034\n\016max_nod"
+          + "e_count\030\002 \001(\005B\004\342A\001\002\"\324\001\n\017AwsOpenIdConfig\022"
+          + "\016\n\006issuer\030\001 \001(\t\022\020\n\010jwks_uri\030\002 \001(\t\022 \n\030res"
+          + "ponse_types_supported\030\003 \003(\t\022\037\n\027subject_t"
+          + "ypes_supported\030\004 \003(\t\022-\n%id_token_signing"
+          + "_alg_values_supported\030\005 \003(\t\022\030\n\020claims_su"
+          + "pported\030\006 \003(\t\022\023\n\013grant_types\030\007 \003(\t\"B\n\016Aw"
+          + "sJsonWebKeys\0220\n\004keys\030\001 \003(\0132\".google.clou"
+          + "d.gkemulticloud.v1.Jwk\"\364\001\n\017AwsServerConf"
+          + "ig\022\014\n\004name\030\001 \001(\t\022H\n\016valid_versions\030\002 \003(\013"
+          + "20.google.cloud.gkemulticloud.v1.AwsK8sV"
+          + "ersionInfo\022\035\n\025supported_aws_regions\030\003 \003("
+          + "\t:j\352Ag\n,gkemulticloud.googleapis.com/Aws"
+          + "ServerConfig\0227projects/{project}/locatio"
+          + "ns/{location}/awsServerConfig\"\270\001\n\021AwsK8s"
+          + "VersionInfo\022\017\n\007version\030\001 \001(\t\022\025\n\007enabled\030"
+          + "\003 \001(\010B\004\342A\001\001\022\031\n\013end_of_life\030\004 \001(\010B\004\342A\001\001\0221"
+          + "\n\020end_of_life_date\030\005 \001(\0132\021.google.type.D"
+          + "ateB\004\342A\001\001\022-\n\014release_date\030\006 \001(\0132\021.google"
+          + ".type.DateB\004\342A\001\001\"*\n\014AwsSshConfig\022\032\n\014ec2_"
+          + "key_pair\030\001 \001(\tB\004\342A\001\002\"<\n\016AwsProxyConfig\022\022"
+          + "\n\nsecret_arn\030\001 \001(\t\022\026\n\016secret_version\030\002 \001"
+          + "(\t\"0\n\023AwsConfigEncryption\022\031\n\013kms_key_arn"
+          + "\030\001 \001(\tB\004\342A\001\002\"\264\001\n\024AwsInstancePlacement\022R\n"
+          + "\007tenancy\030\001 \001(\0162;.google.cloud.gkemulticl"
+          + "oud.v1.AwsInstancePlacement.TenancyB\004\342A\001"
+          + "\002\"H\n\007Tenancy\022\027\n\023TENANCY_UNSPECIFIED\020\000\022\013\n"
+          + "\007DEFAULT\020\001\022\r\n\tDEDICATED\020\002\022\010\n\004HOST\020\003\"X\n$A"
+          + "wsAutoscalingGroupMetricsCollection\022\031\n\013g"
+          + "ranularity\030\001 \001(\tB\004\342A\001\002\022\025\n\007metrics\030\002 \003(\tB"
+          + "\004\342A\001\001\"*\n\nSpotConfig\022\034\n\016instance_types\030\001 "
+          + "\003(\tB\004\342A\001\002\"\"\n\017AwsClusterError\022\017\n\007message\030"
+          + "\001 \001(\t\"#\n\020AwsNodePoolError\022\017\n\007message\030\001 \001"
+          + "(\tB\344\001\n!com.google.cloud.gkemulticloud.v1"
+          + "B\021AwsResourcesProtoP\001ZGcloud.google.com/"
+          + "go/gkemulticloud/apiv1/gkemulticloudpb;g"
+          + "kemulticloudpb\252\002\035Google.Cloud.GkeMultiCl"
+          + "oud.V1\312\002\035Google\\Cloud\\GkeMultiCloud\\V1\352\002"
+          + " Google::Cloud::GkeMultiCloud::V1b\006proto"
+          + "3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -303,6 +362,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               com.google.api.ResourceProto.getDescriptor(),
               com.google.cloud.gkemulticloud.v1.CommonResourcesProto.getDescriptor(),
               com.google.protobuf.TimestampProto.getDescriptor(),
+              com.google.type.DateProto.getDescriptor(),
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsCluster_descriptor =
         getDescriptor().getMessageTypes().get(0);
@@ -330,6 +390,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "LoggingConfig",
               "Errors",
               "MonitoringConfig",
+              "BinaryAuthorization",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsCluster_AnnotationsEntry_descriptor =
         internal_static_google_cloud_gkemulticloud_v1_AwsCluster_descriptor.getNestedTypes().get(0);
@@ -384,7 +445,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsAuthorization_descriptor,
             new java.lang.String[] {
-              "AdminUsers",
+              "AdminUsers", "AdminGroups",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsClusterUser_descriptor =
         getDescriptor().getMessageTypes().get(4);
@@ -394,8 +455,16 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
             new java.lang.String[] {
               "Username",
             });
-    internal_static_google_cloud_gkemulticloud_v1_AwsDatabaseEncryption_descriptor =
+    internal_static_google_cloud_gkemulticloud_v1_AwsClusterGroup_descriptor =
         getDescriptor().getMessageTypes().get(5);
+    internal_static_google_cloud_gkemulticloud_v1_AwsClusterGroup_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_AwsClusterGroup_descriptor,
+            new java.lang.String[] {
+              "Group",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_AwsDatabaseEncryption_descriptor =
+        getDescriptor().getMessageTypes().get(6);
     internal_static_google_cloud_gkemulticloud_v1_AwsDatabaseEncryption_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsDatabaseEncryption_descriptor,
@@ -403,23 +472,26 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "KmsKeyArn",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsVolumeTemplate_descriptor =
-        getDescriptor().getMessageTypes().get(6);
+        getDescriptor().getMessageTypes().get(7);
     internal_static_google_cloud_gkemulticloud_v1_AwsVolumeTemplate_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsVolumeTemplate_descriptor,
             new java.lang.String[] {
-              "SizeGib", "VolumeType", "Iops", "KmsKeyArn",
+              "SizeGib", "VolumeType", "Iops", "Throughput", "KmsKeyArn",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsClusterNetworking_descriptor =
-        getDescriptor().getMessageTypes().get(7);
+        getDescriptor().getMessageTypes().get(8);
     internal_static_google_cloud_gkemulticloud_v1_AwsClusterNetworking_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsClusterNetworking_descriptor,
             new java.lang.String[] {
-              "VpcId", "PodAddressCidrBlocks", "ServiceAddressCidrBlocks",
+              "VpcId",
+              "PodAddressCidrBlocks",
+              "ServiceAddressCidrBlocks",
+              "PerNodePoolSgRulesDisabled",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsNodePool_descriptor =
-        getDescriptor().getMessageTypes().get(8);
+        getDescriptor().getMessageTypes().get(9);
     internal_static_google_cloud_gkemulticloud_v1_AwsNodePool_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsNodePool_descriptor,
@@ -438,6 +510,8 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Annotations",
               "MaxPodsConstraint",
               "Errors",
+              "Management",
+              "UpdateSettings",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsNodePool_AnnotationsEntry_descriptor =
         internal_static_google_cloud_gkemulticloud_v1_AwsNodePool_descriptor
@@ -449,8 +523,32 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
             new java.lang.String[] {
               "Key", "Value",
             });
+    internal_static_google_cloud_gkemulticloud_v1_UpdateSettings_descriptor =
+        getDescriptor().getMessageTypes().get(10);
+    internal_static_google_cloud_gkemulticloud_v1_UpdateSettings_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_UpdateSettings_descriptor,
+            new java.lang.String[] {
+              "SurgeSettings",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_SurgeSettings_descriptor =
+        getDescriptor().getMessageTypes().get(11);
+    internal_static_google_cloud_gkemulticloud_v1_SurgeSettings_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_SurgeSettings_descriptor,
+            new java.lang.String[] {
+              "MaxSurge", "MaxUnavailable",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_AwsNodeManagement_descriptor =
+        getDescriptor().getMessageTypes().get(12);
+    internal_static_google_cloud_gkemulticloud_v1_AwsNodeManagement_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_AwsNodeManagement_descriptor,
+            new java.lang.String[] {
+              "AutoRepair",
+            });
     internal_static_google_cloud_gkemulticloud_v1_AwsNodeConfig_descriptor =
-        getDescriptor().getMessageTypes().get(9);
+        getDescriptor().getMessageTypes().get(13);
     internal_static_google_cloud_gkemulticloud_v1_AwsNodeConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsNodeConfig_descriptor,
@@ -468,6 +566,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "ConfigEncryption",
               "InstancePlacement",
               "AutoscalingMetricsCollection",
+              "SpotConfig",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsNodeConfig_LabelsEntry_descriptor =
         internal_static_google_cloud_gkemulticloud_v1_AwsNodeConfig_descriptor
@@ -490,15 +589,37 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Key", "Value",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsNodePoolAutoscaling_descriptor =
-        getDescriptor().getMessageTypes().get(10);
+        getDescriptor().getMessageTypes().get(14);
     internal_static_google_cloud_gkemulticloud_v1_AwsNodePoolAutoscaling_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsNodePoolAutoscaling_descriptor,
             new java.lang.String[] {
               "MinNodeCount", "MaxNodeCount",
             });
+    internal_static_google_cloud_gkemulticloud_v1_AwsOpenIdConfig_descriptor =
+        getDescriptor().getMessageTypes().get(15);
+    internal_static_google_cloud_gkemulticloud_v1_AwsOpenIdConfig_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_AwsOpenIdConfig_descriptor,
+            new java.lang.String[] {
+              "Issuer",
+              "JwksUri",
+              "ResponseTypesSupported",
+              "SubjectTypesSupported",
+              "IdTokenSigningAlgValuesSupported",
+              "ClaimsSupported",
+              "GrantTypes",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_AwsJsonWebKeys_descriptor =
+        getDescriptor().getMessageTypes().get(16);
+    internal_static_google_cloud_gkemulticloud_v1_AwsJsonWebKeys_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_AwsJsonWebKeys_descriptor,
+            new java.lang.String[] {
+              "Keys",
+            });
     internal_static_google_cloud_gkemulticloud_v1_AwsServerConfig_descriptor =
-        getDescriptor().getMessageTypes().get(11);
+        getDescriptor().getMessageTypes().get(17);
     internal_static_google_cloud_gkemulticloud_v1_AwsServerConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsServerConfig_descriptor,
@@ -506,15 +627,15 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Name", "ValidVersions", "SupportedAwsRegions",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsK8sVersionInfo_descriptor =
-        getDescriptor().getMessageTypes().get(12);
+        getDescriptor().getMessageTypes().get(18);
     internal_static_google_cloud_gkemulticloud_v1_AwsK8sVersionInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsK8sVersionInfo_descriptor,
             new java.lang.String[] {
-              "Version",
+              "Version", "Enabled", "EndOfLife", "EndOfLifeDate", "ReleaseDate",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsSshConfig_descriptor =
-        getDescriptor().getMessageTypes().get(13);
+        getDescriptor().getMessageTypes().get(19);
     internal_static_google_cloud_gkemulticloud_v1_AwsSshConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsSshConfig_descriptor,
@@ -522,7 +643,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Ec2KeyPair",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsProxyConfig_descriptor =
-        getDescriptor().getMessageTypes().get(14);
+        getDescriptor().getMessageTypes().get(20);
     internal_static_google_cloud_gkemulticloud_v1_AwsProxyConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsProxyConfig_descriptor,
@@ -530,7 +651,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "SecretArn", "SecretVersion",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsConfigEncryption_descriptor =
-        getDescriptor().getMessageTypes().get(15);
+        getDescriptor().getMessageTypes().get(21);
     internal_static_google_cloud_gkemulticloud_v1_AwsConfigEncryption_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsConfigEncryption_descriptor,
@@ -538,7 +659,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "KmsKeyArn",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsInstancePlacement_descriptor =
-        getDescriptor().getMessageTypes().get(16);
+        getDescriptor().getMessageTypes().get(22);
     internal_static_google_cloud_gkemulticloud_v1_AwsInstancePlacement_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsInstancePlacement_descriptor,
@@ -546,15 +667,23 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Tenancy",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsAutoscalingGroupMetricsCollection_descriptor =
-        getDescriptor().getMessageTypes().get(17);
+        getDescriptor().getMessageTypes().get(23);
     internal_static_google_cloud_gkemulticloud_v1_AwsAutoscalingGroupMetricsCollection_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsAutoscalingGroupMetricsCollection_descriptor,
             new java.lang.String[] {
               "Granularity", "Metrics",
             });
+    internal_static_google_cloud_gkemulticloud_v1_SpotConfig_descriptor =
+        getDescriptor().getMessageTypes().get(24);
+    internal_static_google_cloud_gkemulticloud_v1_SpotConfig_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_SpotConfig_descriptor,
+            new java.lang.String[] {
+              "InstanceTypes",
+            });
     internal_static_google_cloud_gkemulticloud_v1_AwsClusterError_descriptor =
-        getDescriptor().getMessageTypes().get(18);
+        getDescriptor().getMessageTypes().get(25);
     internal_static_google_cloud_gkemulticloud_v1_AwsClusterError_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsClusterError_descriptor,
@@ -562,7 +691,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Message",
             });
     internal_static_google_cloud_gkemulticloud_v1_AwsNodePoolError_descriptor =
-        getDescriptor().getMessageTypes().get(19);
+        getDescriptor().getMessageTypes().get(26);
     internal_static_google_cloud_gkemulticloud_v1_AwsNodePoolError_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AwsNodePoolError_descriptor,
@@ -579,6 +708,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     com.google.api.ResourceProto.getDescriptor();
     com.google.cloud.gkemulticloud.v1.CommonResourcesProto.getDescriptor();
     com.google.protobuf.TimestampProto.getDescriptor();
+    com.google.type.DateProto.getDescriptor();
   }
 
   // @@protoc_insertion_point(outer_class_scope)
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServerConfig.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServerConfig.java
index 31766ca29a3b..2b235993f584 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServerConfig.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServerConfig.java
@@ -123,7 +123,10 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -137,7 +140,10 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -151,7 +157,10 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -164,7 +173,10 @@ public int getValidVersionsCount() {
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -177,7 +189,10 @@ public com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfo getValidVersions(int
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -833,7 +848,10 @@ private void ensureValidVersionsIsMutable() {
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -850,7 +868,10 @@ private void ensureValidVersionsIsMutable() {
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -866,7 +887,10 @@ public int getValidVersionsCount() {
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -882,7 +906,10 @@ public com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfo getValidVersions(int
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -905,7 +932,10 @@ public Builder setValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -925,7 +955,10 @@ public Builder setValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -947,7 +980,10 @@ public Builder addValidVersions(com.google.cloud.gkemulticloud.v1.AwsK8sVersionI
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -970,7 +1006,10 @@ public Builder addValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -990,7 +1029,10 @@ public Builder addValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -1010,7 +1052,10 @@ public Builder addValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -1030,7 +1075,10 @@ public Builder addAllValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -1049,7 +1097,10 @@ public Builder clearValidVersions() {
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -1068,7 +1119,10 @@ public Builder removeValidVersions(int index) {
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -1081,7 +1135,10 @@ public com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfo.Builder getValidVersi
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -1098,7 +1155,10 @@ public com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfoOrBuilder getValidVers
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -1115,7 +1175,10 @@ public com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfoOrBuilder getValidVers
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -1128,7 +1191,10 @@ public com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfo.Builder addValidVersi
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -1143,7 +1209,10 @@ public com.google.cloud.gkemulticloud.v1.AwsK8sVersionInfo.Builder addValidVersi
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServerConfigOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServerConfigOrBuilder.java
index 9524148052d8..05c2afd6fce0 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServerConfigOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServerConfigOrBuilder.java
@@ -52,7 +52,10 @@ public interface AwsServerConfigOrBuilder
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -62,7 +65,10 @@ public interface AwsServerConfigOrBuilder
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -72,7 +78,10 @@ public interface AwsServerConfigOrBuilder
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -82,7 +91,10 @@ public interface AwsServerConfigOrBuilder
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
@@ -93,7 +105,10 @@ public interface AwsServerConfigOrBuilder
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AwsK8sVersionInfo valid_versions = 2;</code>
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServiceProto.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServiceProto.java
index 7981b9850854..caebec152f3e 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServiceProto.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsServiceProto.java
@@ -59,6 +59,10 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_UpdateAwsNodePoolRequest_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_UpdateAwsNodePoolRequest_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_RollbackAwsNodePoolUpdateRequest_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_RollbackAwsNodePoolUpdateRequest_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_GetAwsNodePoolRequest_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -75,6 +79,14 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_DeleteAwsNodePoolRequest_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_DeleteAwsNodePoolRequest_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_GetAwsOpenIdConfigRequest_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_GetAwsOpenIdConfigRequest_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_GetAwsJsonWebKeysRequest_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_GetAwsJsonWebKeysRequest_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_GetAwsServerConfigRequest_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -87,6 +99,14 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_GenerateAwsAccessTokenResponse_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_GenerateAwsAccessTokenResponse_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenRequest_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenRequest_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenResponse_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenResponse_fieldAccessorTable;
 
   public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     return descriptor;
@@ -102,41 +122,47 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "pi/client.proto\032\037google/api/field_behavi"
           + "or.proto\032\031google/api/resource.proto\0321goo"
           + "gle/cloud/gkemulticloud/v1/aws_resources"
-          + ".proto\032#google/longrunning/operations.pr"
-          + "oto\032 google/protobuf/field_mask.proto\032\037g"
-          + "oogle/protobuf/timestamp.proto\"\326\001\n\027Creat"
-          + "eAwsClusterRequest\022@\n\006parent\030\001 \001(\tB0\342A\001\002"
-          + "\372A)\022\'gkemulticloud.googleapis.com/AwsClu"
-          + "ster\022D\n\013aws_cluster\030\002 \001(\0132).google.cloud"
-          + ".gkemulticloud.v1.AwsClusterB\004\342A\001\002\022\034\n\016aw"
-          + "s_cluster_id\030\003 \001(\tB\004\342A\001\002\022\025\n\rvalidate_onl"
-          + "y\030\004 \001(\010\"\255\001\n\027UpdateAwsClusterRequest\022D\n\013a"
-          + "ws_cluster\030\001 \001(\0132).google.cloud.gkemulti"
-          + "cloud.v1.AwsClusterB\004\342A\001\002\022\025\n\rvalidate_on"
-          + "ly\030\002 \001(\010\0225\n\013update_mask\030\004 \001(\0132\032.google.p"
-          + "rotobuf.FieldMaskB\004\342A\001\002\"V\n\024GetAwsCluster"
-          + "Request\022>\n\004name\030\001 \001(\tB0\342A\001\002\372A)\n\'gkemulti"
-          + "cloud.googleapis.com/AwsCluster\"\201\001\n\026List"
-          + "AwsClustersRequest\022@\n\006parent\030\001 \001(\tB0\342A\001\002"
-          + "\372A)\022\'gkemulticloud.googleapis.com/AwsClu"
-          + "ster\022\021\n\tpage_size\030\002 \001(\005\022\022\n\npage_token\030\003 "
-          + "\001(\t\"s\n\027ListAwsClustersResponse\022?\n\014aws_cl"
-          + "usters\030\001 \003(\0132).google.cloud.gkemulticlou"
-          + "d.v1.AwsCluster\022\027\n\017next_page_token\030\002 \001(\t"
-          + "\"\225\001\n\027DeleteAwsClusterRequest\022>\n\004name\030\001 \001"
-          + "(\tB0\342A\001\002\372A)\n\'gkemulticloud.googleapis.co"
-          + "m/AwsCluster\022\025\n\rvalidate_only\030\002 \001(\010\022\025\n\ra"
-          + "llow_missing\030\003 \001(\010\022\014\n\004etag\030\004 \001(\t\"\335\001\n\030Cre"
-          + "ateAwsNodePoolRequest\022A\n\006parent\030\001 \001(\tB1\342"
-          + "A\001\002\372A*\022(gkemulticloud.googleapis.com/Aws"
-          + "NodePool\022G\n\raws_node_pool\030\002 \001(\0132*.google"
-          + ".cloud.gkemulticloud.v1.AwsNodePoolB\004\342A\001"
-          + "\002\022\036\n\020aws_node_pool_id\030\003 \001(\tB\004\342A\001\002\022\025\n\rval"
-          + "idate_only\030\004 \001(\010\"\261\001\n\030UpdateAwsNodePoolRe"
-          + "quest\022G\n\raws_node_pool\030\001 \001(\0132*.google.cl"
-          + "oud.gkemulticloud.v1.AwsNodePoolB\004\342A\001\002\022\025"
-          + "\n\rvalidate_only\030\002 \001(\010\0225\n\013update_mask\030\003 \001"
-          + "(\0132\032.google.protobuf.FieldMaskB\004\342A\001\002\"X\n\025"
+          + ".proto\0324google/cloud/gkemulticloud/v1/co"
+          + "mmon_resources.proto\032#google/longrunning"
+          + "/operations.proto\032\033google/protobuf/empty"
+          + ".proto\032 google/protobuf/field_mask.proto"
+          + "\032\037google/protobuf/timestamp.proto\"\326\001\n\027Cr"
+          + "eateAwsClusterRequest\022@\n\006parent\030\001 \001(\tB0\342"
+          + "A\001\002\372A)\022\'gkemulticloud.googleapis.com/Aws"
+          + "Cluster\022D\n\013aws_cluster\030\002 \001(\0132).google.cl"
+          + "oud.gkemulticloud.v1.AwsClusterB\004\342A\001\002\022\034\n"
+          + "\016aws_cluster_id\030\003 \001(\tB\004\342A\001\002\022\025\n\rvalidate_"
+          + "only\030\004 \001(\010\"\255\001\n\027UpdateAwsClusterRequest\022D"
+          + "\n\013aws_cluster\030\001 \001(\0132).google.cloud.gkemu"
+          + "lticloud.v1.AwsClusterB\004\342A\001\002\022\025\n\rvalidate"
+          + "_only\030\002 \001(\010\0225\n\013update_mask\030\004 \001(\0132\032.googl"
+          + "e.protobuf.FieldMaskB\004\342A\001\002\"V\n\024GetAwsClus"
+          + "terRequest\022>\n\004name\030\001 \001(\tB0\342A\001\002\372A)\n\'gkemu"
+          + "lticloud.googleapis.com/AwsCluster\"\201\001\n\026L"
+          + "istAwsClustersRequest\022@\n\006parent\030\001 \001(\tB0\342"
+          + "A\001\002\372A)\022\'gkemulticloud.googleapis.com/Aws"
+          + "Cluster\022\021\n\tpage_size\030\002 \001(\005\022\022\n\npage_token"
+          + "\030\003 \001(\t\"s\n\027ListAwsClustersResponse\022?\n\014aws"
+          + "_clusters\030\001 \003(\0132).google.cloud.gkemultic"
+          + "loud.v1.AwsCluster\022\027\n\017next_page_token\030\002 "
+          + "\001(\t\"\262\001\n\027DeleteAwsClusterRequest\022>\n\004name\030"
+          + "\001 \001(\tB0\342A\001\002\372A)\n\'gkemulticloud.googleapis"
+          + ".com/AwsCluster\022\025\n\rvalidate_only\030\002 \001(\010\022\025"
+          + "\n\rallow_missing\030\003 \001(\010\022\033\n\rignore_errors\030\005"
+          + " \001(\010B\004\342A\001\001\022\014\n\004etag\030\004 \001(\t\"\335\001\n\030CreateAwsNo"
+          + "dePoolRequest\022A\n\006parent\030\001 \001(\tB1\342A\001\002\372A*\022("
+          + "gkemulticloud.googleapis.com/AwsNodePool"
+          + "\022G\n\raws_node_pool\030\002 \001(\0132*.google.cloud.g"
+          + "kemulticloud.v1.AwsNodePoolB\004\342A\001\002\022\036\n\020aws"
+          + "_node_pool_id\030\003 \001(\tB\004\342A\001\002\022\025\n\rvalidate_on"
+          + "ly\030\004 \001(\010\"\261\001\n\030UpdateAwsNodePoolRequest\022G\n"
+          + "\raws_node_pool\030\001 \001(\0132*.google.cloud.gkem"
+          + "ulticloud.v1.AwsNodePoolB\004\342A\001\002\022\025\n\rvalida"
+          + "te_only\030\002 \001(\010\0225\n\013update_mask\030\003 \001(\0132\032.goo"
+          + "gle.protobuf.FieldMaskB\004\342A\001\002\"~\n Rollback"
+          + "AwsNodePoolUpdateRequest\022?\n\004name\030\001 \001(\tB1"
+          + "\342A\001\002\372A*\n(gkemulticloud.googleapis.com/Aw"
+          + "sNodePool\022\031\n\013respect_pdb\030\002 \001(\010B\004\342A\001\001\"X\n\025"
           + "GetAwsNodePoolRequest\022?\n\004name\030\001 \001(\tB1\342A\001"
           + "\002\372A*\n(gkemulticloud.googleapis.com/AwsNo"
           + "dePool\"\203\001\n\027ListAwsNodePoolsRequest\022A\n\006pa"
@@ -145,95 +171,136 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "\022\022\n\npage_token\030\003 \001(\t\"w\n\030ListAwsNodePools"
           + "Response\022B\n\016aws_node_pools\030\001 \003(\0132*.googl"
           + "e.cloud.gkemulticloud.v1.AwsNodePool\022\027\n\017"
-          + "next_page_token\030\002 \001(\t\"\227\001\n\030DeleteAwsNodeP"
+          + "next_page_token\030\002 \001(\t\"\264\001\n\030DeleteAwsNodeP"
           + "oolRequest\022?\n\004name\030\001 \001(\tB1\342A\001\002\372A*\n(gkemu"
           + "lticloud.googleapis.com/AwsNodePool\022\025\n\rv"
           + "alidate_only\030\002 \001(\010\022\025\n\rallow_missing\030\003 \001("
-          + "\010\022\014\n\004etag\030\004 \001(\t\"`\n\031GetAwsServerConfigReq"
-          + "uest\022C\n\004name\030\001 \001(\tB5\342A\001\002\372A.\n,gkemulticlo"
-          + "ud.googleapis.com/AwsServerConfig\"f\n\035Gen"
-          + "erateAwsAccessTokenRequest\022E\n\013aws_cluste"
-          + "r\030\001 \001(\tB0\342A\001\002\372A)\n\'gkemulticloud.googleap"
-          + "is.com/AwsCluster\"w\n\036GenerateAwsAccessTo"
-          + "kenResponse\022\032\n\014access_token\030\001 \001(\tB\004\342A\001\003\022"
-          + "9\n\017expiration_time\030\002 \001(\0132\032.google.protob"
-          + "uf.TimestampB\004\342A\001\0032\376\025\n\013AwsClusters\022\366\001\n\020C"
-          + "reateAwsCluster\0226.google.cloud.gkemultic"
-          + "loud.v1.CreateAwsClusterRequest\032\035.google"
-          + ".longrunning.Operation\"\212\001\312A\037\n\nAwsCluster"
-          + "\022\021OperationMetadata\332A!parent,aws_cluster"
-          + ",aws_cluster_id\202\323\344\223\002>\"//v1/{parent=proje"
-          + "cts/*/locations/*}/awsClusters:\013aws_clus"
-          + "ter\022\370\001\n\020UpdateAwsCluster\0226.google.cloud."
-          + "gkemulticloud.v1.UpdateAwsClusterRequest"
-          + "\032\035.google.longrunning.Operation\"\214\001\312A\037\n\nA"
-          + "wsCluster\022\021OperationMetadata\332A\027aws_clust"
-          + "er,update_mask\202\323\344\223\002J2;/v1/{aws_cluster.n"
-          + "ame=projects/*/locations/*/awsClusters/*"
-          + "}:\013aws_cluster\022\257\001\n\rGetAwsCluster\0223.googl"
-          + "e.cloud.gkemulticloud.v1.GetAwsClusterRe"
-          + "quest\032).google.cloud.gkemulticloud.v1.Aw"
-          + "sCluster\">\332A\004name\202\323\344\223\0021\022//v1/{name=proje"
-          + "cts/*/locations/*/awsClusters/*}\022\302\001\n\017Lis"
-          + "tAwsClusters\0225.google.cloud.gkemulticlou"
-          + "d.v1.ListAwsClustersRequest\0326.google.clo"
-          + "ud.gkemulticloud.v1.ListAwsClustersRespo"
-          + "nse\"@\332A\006parent\202\323\344\223\0021\022//v1/{parent=projec"
-          + "ts/*/locations/*}/awsClusters\022\326\001\n\020Delete"
-          + "AwsCluster\0226.google.cloud.gkemulticloud."
-          + "v1.DeleteAwsClusterRequest\032\035.google.long"
-          + "running.Operation\"k\312A*\n\025google.protobuf."
-          + "Empty\022\021OperationMetadata\332A\004name\202\323\344\223\0021*//"
-          + "v1/{name=projects/*/locations/*/awsClust"
-          + "ers/*}\022\354\001\n\026GenerateAwsAccessToken\022<.goog"
-          + "le.cloud.gkemulticloud.v1.GenerateAwsAcc"
-          + "essTokenRequest\032=.google.cloud.gkemultic"
-          + "loud.v1.GenerateAwsAccessTokenResponse\"U"
-          + "\202\323\344\223\002O\022M/v1/{aws_cluster=projects/*/loca"
-          + "tions/*/awsClusters/*}:generateAwsAccess"
-          + "Token\022\216\002\n\021CreateAwsNodePool\0227.google.clo"
-          + "ud.gkemulticloud.v1.CreateAwsNodePoolReq"
-          + "uest\032\035.google.longrunning.Operation\"\240\001\312A"
-          + " \n\013AwsNodePool\022\021OperationMetadata\332A%pare"
-          + "nt,aws_node_pool,aws_node_pool_id\202\323\344\223\002O\""
-          + ">/v1/{parent=projects/*/locations/*/awsC"
-          + "lusters/*}/awsNodePools:\raws_node_pool\022\220"
-          + "\002\n\021UpdateAwsNodePool\0227.google.cloud.gkem"
-          + "ulticloud.v1.UpdateAwsNodePoolRequest\032\035."
-          + "google.longrunning.Operation\"\242\001\312A \n\013AwsN"
-          + "odePool\022\021OperationMetadata\332A\031aws_node_po"
-          + "ol,update_mask\202\323\344\223\002]2L/v1/{aws_node_pool"
-          + ".name=projects/*/locations/*/awsClusters"
-          + "/*/awsNodePools/*}:\raws_node_pool\022\301\001\n\016Ge"
-          + "tAwsNodePool\0224.google.cloud.gkemulticlou"
-          + "d.v1.GetAwsNodePoolRequest\032*.google.clou"
-          + "d.gkemulticloud.v1.AwsNodePool\"M\332A\004name\202"
-          + "\323\344\223\002@\022>/v1/{name=projects/*/locations/*/"
-          + "awsClusters/*/awsNodePools/*}\022\324\001\n\020ListAw"
-          + "sNodePools\0226.google.cloud.gkemulticloud."
-          + "v1.ListAwsNodePoolsRequest\0327.google.clou"
-          + "d.gkemulticloud.v1.ListAwsNodePoolsRespo"
-          + "nse\"O\332A\006parent\202\323\344\223\002@\022>/v1/{parent=projec"
-          + "ts/*/locations/*/awsClusters/*}/awsNodeP"
-          + "ools\022\347\001\n\021DeleteAwsNodePool\0227.google.clou"
-          + "d.gkemulticloud.v1.DeleteAwsNodePoolRequ"
-          + "est\032\035.google.longrunning.Operation\"z\312A*\n"
-          + "\025google.protobuf.Empty\022\021OperationMetadat"
-          + "a\332A\004name\202\323\344\223\002@*>/v1/{name=projects/*/loc"
-          + "ations/*/awsClusters/*/awsNodePools/*}\022\300"
-          + "\001\n\022GetAwsServerConfig\0228.google.cloud.gke"
-          + "multicloud.v1.GetAwsServerConfigRequest\032"
-          + "..google.cloud.gkemulticloud.v1.AwsServe"
-          + "rConfig\"@\332A\004name\202\323\344\223\0023\0221/v1/{name=projec"
-          + "ts/*/locations/*/awsServerConfig}\032P\312A\034gk"
-          + "emulticloud.googleapis.com\322A.https://www"
-          + ".googleapis.com/auth/cloud-platformB\342\001\n!"
-          + "com.google.cloud.gkemulticloud.v1B\017AwsSe"
-          + "rviceProtoP\001ZGcloud.google.com/go/gkemul"
-          + "ticloud/apiv1/gkemulticloudpb;gkemulticl"
-          + "oudpb\252\002\035Google.Cloud.GkeMultiCloud.V1\312\002\035"
-          + "Google\\Cloud\\GkeMultiCloud\\V1\352\002 Google::"
-          + "Cloud::GkeMultiCloud::V1b\006proto3"
+          + "\010\022\033\n\rignore_errors\030\005 \001(\010B\004\342A\001\001\022\014\n\004etag\030\004"
+          + " \001(\t\"b\n\031GetAwsOpenIdConfigRequest\022E\n\013aws"
+          + "_cluster\030\001 \001(\tB0\342A\001\002\372A)\n\'gkemulticloud.g"
+          + "oogleapis.com/AwsCluster\"a\n\030GetAwsJsonWe"
+          + "bKeysRequest\022E\n\013aws_cluster\030\001 \001(\tB0\342A\001\002\372"
+          + "A)\n\'gkemulticloud.googleapis.com/AwsClus"
+          + "ter\"`\n\031GetAwsServerConfigRequest\022C\n\004name"
+          + "\030\001 \001(\tB5\342A\001\002\372A.\n,gkemulticloud.googleapi"
+          + "s.com/AwsServerConfig\"f\n\035GenerateAwsAcce"
+          + "ssTokenRequest\022E\n\013aws_cluster\030\001 \001(\tB0\342A\001"
+          + "\002\372A)\n\'gkemulticloud.googleapis.com/AwsCl"
+          + "uster\"w\n\036GenerateAwsAccessTokenResponse\022"
+          + "\032\n\014access_token\030\001 \001(\tB\004\342A\001\003\0229\n\017expiratio"
+          + "n_time\030\002 \001(\0132\032.google.protobuf.Timestamp"
+          + "B\004\342A\001\003\"\340\002\n#GenerateAwsClusterAgentTokenR"
+          + "equest\022E\n\013aws_cluster\030\001 \001(\tB0\342A\001\002\372A)\n\'gk"
+          + "emulticloud.googleapis.com/AwsCluster\022\033\n"
+          + "\rsubject_token\030\002 \001(\tB\004\342A\001\002\022 \n\022subject_to"
+          + "ken_type\030\003 \001(\tB\004\342A\001\002\022\025\n\007version\030\004 \001(\tB\004\342"
+          + "A\001\002\022\032\n\014node_pool_id\030\005 \001(\tB\004\342A\001\001\022\030\n\ngrant"
+          + "_type\030\006 \001(\tB\004\342A\001\001\022\026\n\010audience\030\007 \001(\tB\004\342A\001"
+          + "\001\022\023\n\005scope\030\010 \001(\tB\004\342A\001\001\022\"\n\024requested_toke"
+          + "n_type\030\t \001(\tB\004\342A\001\001\022\025\n\007options\030\n \001(\tB\004\342A\001"
+          + "\001\"d\n$GenerateAwsClusterAgentTokenRespons"
+          + "e\022\024\n\014access_token\030\001 \001(\t\022\022\n\nexpires_in\030\002 "
+          + "\001(\005\022\022\n\ntoken_type\030\003 \001(\t2\251\035\n\013AwsClusters\022"
+          + "\366\001\n\020CreateAwsCluster\0226.google.cloud.gkem"
+          + "ulticloud.v1.CreateAwsClusterRequest\032\035.g"
+          + "oogle.longrunning.Operation\"\212\001\312A\037\n\nAwsCl"
+          + "uster\022\021OperationMetadata\332A!parent,aws_cl"
+          + "uster,aws_cluster_id\202\323\344\223\002>\"//v1/{parent="
+          + "projects/*/locations/*}/awsClusters:\013aws"
+          + "_cluster\022\370\001\n\020UpdateAwsCluster\0226.google.c"
+          + "loud.gkemulticloud.v1.UpdateAwsClusterRe"
+          + "quest\032\035.google.longrunning.Operation\"\214\001\312"
+          + "A\037\n\nAwsCluster\022\021OperationMetadata\332A\027aws_"
+          + "cluster,update_mask\202\323\344\223\002J2;/v1/{aws_clus"
+          + "ter.name=projects/*/locations/*/awsClust"
+          + "ers/*}:\013aws_cluster\022\257\001\n\rGetAwsCluster\0223."
+          + "google.cloud.gkemulticloud.v1.GetAwsClus"
+          + "terRequest\032).google.cloud.gkemulticloud."
+          + "v1.AwsCluster\">\332A\004name\202\323\344\223\0021\022//v1/{name="
+          + "projects/*/locations/*/awsClusters/*}\022\302\001"
+          + "\n\017ListAwsClusters\0225.google.cloud.gkemult"
+          + "icloud.v1.ListAwsClustersRequest\0326.googl"
+          + "e.cloud.gkemulticloud.v1.ListAwsClusters"
+          + "Response\"@\332A\006parent\202\323\344\223\0021\022//v1/{parent=p"
+          + "rojects/*/locations/*}/awsClusters\022\326\001\n\020D"
+          + "eleteAwsCluster\0226.google.cloud.gkemultic"
+          + "loud.v1.DeleteAwsClusterRequest\032\035.google"
+          + ".longrunning.Operation\"k\312A*\n\025google.prot"
+          + "obuf.Empty\022\021OperationMetadata\332A\004name\202\323\344\223"
+          + "\0021*//v1/{name=projects/*/locations/*/aws"
+          + "Clusters/*}\022\207\002\n\034GenerateAwsClusterAgentT"
+          + "oken\022B.google.cloud.gkemulticloud.v1.Gen"
+          + "erateAwsClusterAgentTokenRequest\032C.googl"
+          + "e.cloud.gkemulticloud.v1.GenerateAwsClus"
+          + "terAgentTokenResponse\"^\202\323\344\223\002X\"S/v1/{aws_"
+          + "cluster=projects/*/locations/*/awsCluste"
+          + "rs/*}:generateAwsClusterAgentToken:\001*\022\354\001"
+          + "\n\026GenerateAwsAccessToken\022<.google.cloud."
+          + "gkemulticloud.v1.GenerateAwsAccessTokenR"
+          + "equest\032=.google.cloud.gkemulticloud.v1.G"
+          + "enerateAwsAccessTokenResponse\"U\202\323\344\223\002O\022M/"
+          + "v1/{aws_cluster=projects/*/locations/*/a"
+          + "wsClusters/*}:generateAwsAccessToken\022\216\002\n"
+          + "\021CreateAwsNodePool\0227.google.cloud.gkemul"
+          + "ticloud.v1.CreateAwsNodePoolRequest\032\035.go"
+          + "ogle.longrunning.Operation\"\240\001\312A \n\013AwsNod"
+          + "ePool\022\021OperationMetadata\332A%parent,aws_no"
+          + "de_pool,aws_node_pool_id\202\323\344\223\002O\">/v1/{par"
+          + "ent=projects/*/locations/*/awsClusters/*"
+          + "}/awsNodePools:\raws_node_pool\022\220\002\n\021Update"
+          + "AwsNodePool\0227.google.cloud.gkemulticloud"
+          + ".v1.UpdateAwsNodePoolRequest\032\035.google.lo"
+          + "ngrunning.Operation\"\242\001\312A \n\013AwsNodePool\022\021"
+          + "OperationMetadata\332A\031aws_node_pool,update"
+          + "_mask\202\323\344\223\002]2L/v1/{aws_node_pool.name=pro"
+          + "jects/*/locations/*/awsClusters/*/awsNod"
+          + "ePools/*}:\raws_node_pool\022\371\001\n\031RollbackAws"
+          + "NodePoolUpdate\022?.google.cloud.gkemulticl"
+          + "oud.v1.RollbackAwsNodePoolUpdateRequest\032"
+          + "\035.google.longrunning.Operation\"|\312A \n\013Aws"
+          + "NodePool\022\021OperationMetadata\332A\004name\202\323\344\223\002L"
+          + "\"G/v1/{name=projects/*/locations/*/awsCl"
+          + "usters/*/awsNodePools/*}:rollback:\001*\022\301\001\n"
+          + "\016GetAwsNodePool\0224.google.cloud.gkemultic"
+          + "loud.v1.GetAwsNodePoolRequest\032*.google.c"
+          + "loud.gkemulticloud.v1.AwsNodePool\"M\332A\004na"
+          + "me\202\323\344\223\002@\022>/v1/{name=projects/*/locations"
+          + "/*/awsClusters/*/awsNodePools/*}\022\324\001\n\020Lis"
+          + "tAwsNodePools\0226.google.cloud.gkemulticlo"
+          + "ud.v1.ListAwsNodePoolsRequest\0327.google.c"
+          + "loud.gkemulticloud.v1.ListAwsNodePoolsRe"
+          + "sponse\"O\332A\006parent\202\323\344\223\002@\022>/v1/{parent=pro"
+          + "jects/*/locations/*/awsClusters/*}/awsNo"
+          + "dePools\022\347\001\n\021DeleteAwsNodePool\0227.google.c"
+          + "loud.gkemulticloud.v1.DeleteAwsNodePoolR"
+          + "equest\032\035.google.longrunning.Operation\"z\312"
+          + "A*\n\025google.protobuf.Empty\022\021OperationMeta"
+          + "data\332A\004name\202\323\344\223\002@*>/v1/{name=projects/*/"
+          + "locations/*/awsClusters/*/awsNodePools/*"
+          + "}\022\337\001\n\022GetAwsOpenIdConfig\0228.google.cloud."
+          + "gkemulticloud.v1.GetAwsOpenIdConfigReque"
+          + "st\032..google.cloud.gkemulticloud.v1.AwsOp"
+          + "enIdConfig\"_\202\323\344\223\002Y\022W/v1/{aws_cluster=pro"
+          + "jects/*/locations/*/awsClusters/*}/.well"
+          + "-known/openid-configuration\022\300\001\n\021GetAwsJs"
+          + "onWebKeys\0227.google.cloud.gkemulticloud.v"
+          + "1.GetAwsJsonWebKeysRequest\032-.google.clou"
+          + "d.gkemulticloud.v1.AwsJsonWebKeys\"C\202\323\344\223\002"
+          + "=\022;/v1/{aws_cluster=projects/*/locations"
+          + "/*/awsClusters/*}/jwks\022\300\001\n\022GetAwsServerC"
+          + "onfig\0228.google.cloud.gkemulticloud.v1.Ge"
+          + "tAwsServerConfigRequest\032..google.cloud.g"
+          + "kemulticloud.v1.AwsServerConfig\"@\332A\004name"
+          + "\202\323\344\223\0023\0221/v1/{name=projects/*/locations/*"
+          + "/awsServerConfig}\032P\312A\034gkemulticloud.goog"
+          + "leapis.com\322A.https://www.googleapis.com/"
+          + "auth/cloud-platformB\342\001\n!com.google.cloud"
+          + ".gkemulticloud.v1B\017AwsServiceProtoP\001ZGcl"
+          + "oud.google.com/go/gkemulticloud/apiv1/gk"
+          + "emulticloudpb;gkemulticloudpb\252\002\035Google.C"
+          + "loud.GkeMultiCloud.V1\312\002\035Google\\Cloud\\Gke"
+          + "MultiCloud\\V1\352\002 Google::Cloud::GkeMultiC"
+          + "loud::V1b\006proto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -244,7 +311,9 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               com.google.api.FieldBehaviorProto.getDescriptor(),
               com.google.api.ResourceProto.getDescriptor(),
               com.google.cloud.gkemulticloud.v1.AwsResourcesProto.getDescriptor(),
+              com.google.cloud.gkemulticloud.v1.CommonResourcesProto.getDescriptor(),
               com.google.longrunning.OperationsProto.getDescriptor(),
+              com.google.protobuf.EmptyProto.getDescriptor(),
               com.google.protobuf.FieldMaskProto.getDescriptor(),
               com.google.protobuf.TimestampProto.getDescriptor(),
             });
@@ -294,7 +363,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_DeleteAwsClusterRequest_descriptor,
             new java.lang.String[] {
-              "Name", "ValidateOnly", "AllowMissing", "Etag",
+              "Name", "ValidateOnly", "AllowMissing", "IgnoreErrors", "Etag",
             });
     internal_static_google_cloud_gkemulticloud_v1_CreateAwsNodePoolRequest_descriptor =
         getDescriptor().getMessageTypes().get(6);
@@ -312,8 +381,16 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
             new java.lang.String[] {
               "AwsNodePool", "ValidateOnly", "UpdateMask",
             });
-    internal_static_google_cloud_gkemulticloud_v1_GetAwsNodePoolRequest_descriptor =
+    internal_static_google_cloud_gkemulticloud_v1_RollbackAwsNodePoolUpdateRequest_descriptor =
         getDescriptor().getMessageTypes().get(8);
+    internal_static_google_cloud_gkemulticloud_v1_RollbackAwsNodePoolUpdateRequest_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_RollbackAwsNodePoolUpdateRequest_descriptor,
+            new java.lang.String[] {
+              "Name", "RespectPdb",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_GetAwsNodePoolRequest_descriptor =
+        getDescriptor().getMessageTypes().get(9);
     internal_static_google_cloud_gkemulticloud_v1_GetAwsNodePoolRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_GetAwsNodePoolRequest_descriptor,
@@ -321,7 +398,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Name",
             });
     internal_static_google_cloud_gkemulticloud_v1_ListAwsNodePoolsRequest_descriptor =
-        getDescriptor().getMessageTypes().get(9);
+        getDescriptor().getMessageTypes().get(10);
     internal_static_google_cloud_gkemulticloud_v1_ListAwsNodePoolsRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_ListAwsNodePoolsRequest_descriptor,
@@ -329,7 +406,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Parent", "PageSize", "PageToken",
             });
     internal_static_google_cloud_gkemulticloud_v1_ListAwsNodePoolsResponse_descriptor =
-        getDescriptor().getMessageTypes().get(10);
+        getDescriptor().getMessageTypes().get(11);
     internal_static_google_cloud_gkemulticloud_v1_ListAwsNodePoolsResponse_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_ListAwsNodePoolsResponse_descriptor,
@@ -337,15 +414,31 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "AwsNodePools", "NextPageToken",
             });
     internal_static_google_cloud_gkemulticloud_v1_DeleteAwsNodePoolRequest_descriptor =
-        getDescriptor().getMessageTypes().get(11);
+        getDescriptor().getMessageTypes().get(12);
     internal_static_google_cloud_gkemulticloud_v1_DeleteAwsNodePoolRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_DeleteAwsNodePoolRequest_descriptor,
             new java.lang.String[] {
-              "Name", "ValidateOnly", "AllowMissing", "Etag",
+              "Name", "ValidateOnly", "AllowMissing", "IgnoreErrors", "Etag",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_GetAwsOpenIdConfigRequest_descriptor =
+        getDescriptor().getMessageTypes().get(13);
+    internal_static_google_cloud_gkemulticloud_v1_GetAwsOpenIdConfigRequest_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_GetAwsOpenIdConfigRequest_descriptor,
+            new java.lang.String[] {
+              "AwsCluster",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_GetAwsJsonWebKeysRequest_descriptor =
+        getDescriptor().getMessageTypes().get(14);
+    internal_static_google_cloud_gkemulticloud_v1_GetAwsJsonWebKeysRequest_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_GetAwsJsonWebKeysRequest_descriptor,
+            new java.lang.String[] {
+              "AwsCluster",
             });
     internal_static_google_cloud_gkemulticloud_v1_GetAwsServerConfigRequest_descriptor =
-        getDescriptor().getMessageTypes().get(12);
+        getDescriptor().getMessageTypes().get(15);
     internal_static_google_cloud_gkemulticloud_v1_GetAwsServerConfigRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_GetAwsServerConfigRequest_descriptor,
@@ -353,7 +446,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Name",
             });
     internal_static_google_cloud_gkemulticloud_v1_GenerateAwsAccessTokenRequest_descriptor =
-        getDescriptor().getMessageTypes().get(13);
+        getDescriptor().getMessageTypes().get(16);
     internal_static_google_cloud_gkemulticloud_v1_GenerateAwsAccessTokenRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_GenerateAwsAccessTokenRequest_descriptor,
@@ -361,13 +454,38 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "AwsCluster",
             });
     internal_static_google_cloud_gkemulticloud_v1_GenerateAwsAccessTokenResponse_descriptor =
-        getDescriptor().getMessageTypes().get(14);
+        getDescriptor().getMessageTypes().get(17);
     internal_static_google_cloud_gkemulticloud_v1_GenerateAwsAccessTokenResponse_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_GenerateAwsAccessTokenResponse_descriptor,
             new java.lang.String[] {
               "AccessToken", "ExpirationTime",
             });
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenRequest_descriptor =
+        getDescriptor().getMessageTypes().get(18);
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenRequest_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenRequest_descriptor,
+            new java.lang.String[] {
+              "AwsCluster",
+              "SubjectToken",
+              "SubjectTokenType",
+              "Version",
+              "NodePoolId",
+              "GrantType",
+              "Audience",
+              "Scope",
+              "RequestedTokenType",
+              "Options",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenResponse_descriptor =
+        getDescriptor().getMessageTypes().get(19);
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenResponse_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenResponse_descriptor,
+            new java.lang.String[] {
+              "AccessToken", "ExpiresIn", "TokenType",
+            });
     com.google.protobuf.ExtensionRegistry registry =
         com.google.protobuf.ExtensionRegistry.newInstance();
     registry.add(com.google.api.ClientProto.defaultHost);
@@ -384,7 +502,9 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     com.google.api.FieldBehaviorProto.getDescriptor();
     com.google.api.ResourceProto.getDescriptor();
     com.google.cloud.gkemulticloud.v1.AwsResourcesProto.getDescriptor();
+    com.google.cloud.gkemulticloud.v1.CommonResourcesProto.getDescriptor();
     com.google.longrunning.OperationsProto.getDescriptor();
+    com.google.protobuf.EmptyProto.getDescriptor();
     com.google.protobuf.FieldMaskProto.getDescriptor();
     com.google.protobuf.TimestampProto.getDescriptor();
   }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsVolumeTemplate.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsVolumeTemplate.java
index e6c5974c43e2..651af5a22db1 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsVolumeTemplate.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsVolumeTemplate.java
@@ -310,6 +310,27 @@ public int getIops() {
     return iops_;
   }
 
+  public static final int THROUGHPUT_FIELD_NUMBER = 5;
+  private int throughput_ = 0;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The throughput that the volume supports, in MiB/s. Only valid if
+   * volume_type is GP3.
+   *
+   * If the volume_type is GP3 and this is not speficied, it defaults to 125.
+   * </pre>
+   *
+   * <code>int32 throughput = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The throughput.
+   */
+  @java.lang.Override
+  public int getThroughput() {
+    return throughput_;
+  }
+
   public static final int KMS_KEY_ARN_FIELD_NUMBER = 4;
 
   @SuppressWarnings("serial")
@@ -397,6 +418,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(kmsKeyArn_)) {
       com.google.protobuf.GeneratedMessageV3.writeString(output, 4, kmsKeyArn_);
     }
+    if (throughput_ != 0) {
+      output.writeInt32(5, throughput_);
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -420,6 +444,9 @@ public int getSerializedSize() {
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(kmsKeyArn_)) {
       size += com.google.protobuf.GeneratedMessageV3.computeStringSize(4, kmsKeyArn_);
     }
+    if (throughput_ != 0) {
+      size += com.google.protobuf.CodedOutputStream.computeInt32Size(5, throughput_);
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -439,6 +466,7 @@ public boolean equals(final java.lang.Object obj) {
     if (getSizeGib() != other.getSizeGib()) return false;
     if (volumeType_ != other.volumeType_) return false;
     if (getIops() != other.getIops()) return false;
+    if (getThroughput() != other.getThroughput()) return false;
     if (!getKmsKeyArn().equals(other.getKmsKeyArn())) return false;
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
@@ -457,6 +485,8 @@ public int hashCode() {
     hash = (53 * hash) + volumeType_;
     hash = (37 * hash) + IOPS_FIELD_NUMBER;
     hash = (53 * hash) + getIops();
+    hash = (37 * hash) + THROUGHPUT_FIELD_NUMBER;
+    hash = (53 * hash) + getThroughput();
     hash = (37 * hash) + KMS_KEY_ARN_FIELD_NUMBER;
     hash = (53 * hash) + getKmsKeyArn().hashCode();
     hash = (29 * hash) + getUnknownFields().hashCode();
@@ -601,6 +631,7 @@ public Builder clear() {
       sizeGib_ = 0;
       volumeType_ = 0;
       iops_ = 0;
+      throughput_ = 0;
       kmsKeyArn_ = "";
       return this;
     }
@@ -648,6 +679,9 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.AwsVolumeTemplate r
         result.iops_ = iops_;
       }
       if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.throughput_ = throughput_;
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
         result.kmsKeyArn_ = kmsKeyArn_;
       }
     }
@@ -707,9 +741,12 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AwsVolumeTemplate oth
       if (other.getIops() != 0) {
         setIops(other.getIops());
       }
+      if (other.getThroughput() != 0) {
+        setThroughput(other.getThroughput());
+      }
       if (!other.getKmsKeyArn().isEmpty()) {
         kmsKeyArn_ = other.kmsKeyArn_;
-        bitField0_ |= 0x00000008;
+        bitField0_ |= 0x00000010;
         onChanged();
       }
       this.mergeUnknownFields(other.getUnknownFields());
@@ -759,9 +796,15 @@ public Builder mergeFrom(
             case 34:
               {
                 kmsKeyArn_ = input.readStringRequireUtf8();
-                bitField0_ |= 0x00000008;
+                bitField0_ |= 0x00000010;
                 break;
               } // case 34
+            case 40:
+              {
+                throughput_ = input.readInt32();
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 40
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -1012,6 +1055,68 @@ public Builder clearIops() {
       return this;
     }
 
+    private int throughput_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The throughput that the volume supports, in MiB/s. Only valid if
+     * volume_type is GP3.
+     *
+     * If the volume_type is GP3 and this is not speficied, it defaults to 125.
+     * </pre>
+     *
+     * <code>int32 throughput = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The throughput.
+     */
+    @java.lang.Override
+    public int getThroughput() {
+      return throughput_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The throughput that the volume supports, in MiB/s. Only valid if
+     * volume_type is GP3.
+     *
+     * If the volume_type is GP3 and this is not speficied, it defaults to 125.
+     * </pre>
+     *
+     * <code>int32 throughput = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The throughput to set.
+     * @return This builder for chaining.
+     */
+    public Builder setThroughput(int value) {
+
+      throughput_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The throughput that the volume supports, in MiB/s. Only valid if
+     * volume_type is GP3.
+     *
+     * If the volume_type is GP3 and this is not speficied, it defaults to 125.
+     * </pre>
+     *
+     * <code>int32 throughput = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearThroughput() {
+      bitField0_ = (bitField0_ & ~0x00000008);
+      throughput_ = 0;
+      onChanged();
+      return this;
+    }
+
     private java.lang.Object kmsKeyArn_ = "";
     /**
      *
@@ -1086,7 +1191,7 @@ public Builder setKmsKeyArn(java.lang.String value) {
         throw new NullPointerException();
       }
       kmsKeyArn_ = value;
-      bitField0_ |= 0x00000008;
+      bitField0_ |= 0x00000010;
       onChanged();
       return this;
     }
@@ -1107,7 +1212,7 @@ public Builder setKmsKeyArn(java.lang.String value) {
      */
     public Builder clearKmsKeyArn() {
       kmsKeyArn_ = getDefaultInstance().getKmsKeyArn();
-      bitField0_ = (bitField0_ & ~0x00000008);
+      bitField0_ = (bitField0_ & ~0x00000010);
       onChanged();
       return this;
     }
@@ -1133,7 +1238,7 @@ public Builder setKmsKeyArnBytes(com.google.protobuf.ByteString value) {
       }
       checkByteStringIsUtf8(value);
       kmsKeyArn_ = value;
-      bitField0_ |= 0x00000008;
+      bitField0_ |= 0x00000010;
       onChanged();
       return this;
     }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsVolumeTemplateOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsVolumeTemplateOrBuilder.java
index b3be10b3083d..2cae8a10329f 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsVolumeTemplateOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AwsVolumeTemplateOrBuilder.java
@@ -86,6 +86,22 @@ public interface AwsVolumeTemplateOrBuilder
    */
   int getIops();
 
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The throughput that the volume supports, in MiB/s. Only valid if
+   * volume_type is GP3.
+   *
+   * If the volume_type is GP3 and this is not speficied, it defaults to 125.
+   * </pre>
+   *
+   * <code>int32 throughput = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The throughput.
+   */
+  int getThroughput();
+
   /**
    *
    *
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureAuthorization.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureAuthorization.java
index baf1fee86aea..ebe9884fdd4c 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureAuthorization.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureAuthorization.java
@@ -39,6 +39,7 @@ private AzureAuthorization(com.google.protobuf.GeneratedMessageV3.Builder<?> bui
 
   private AzureAuthorization() {
     adminUsers_ = java.util.Collections.emptyList();
+    adminGroups_ = java.util.Collections.emptyList();
   }
 
   @java.lang.Override
@@ -70,7 +71,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -79,7 +80,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -90,7 +91,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterUser> getAdm
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -99,7 +100,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterUser> getAdm
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -111,7 +112,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterUser> getAdm
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -120,7 +121,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterUser> getAdm
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -131,7 +132,7 @@ public int getAdminUsersCount() {
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -140,7 +141,7 @@ public int getAdminUsersCount() {
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -151,7 +152,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser getAdminUsers(int inde
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -160,7 +161,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser getAdminUsers(int inde
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   @java.lang.Override
@@ -169,6 +170,113 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUserOrBuilder getAdminUsers
     return adminUsers_.get(index);
   }
 
+  public static final int ADMIN_GROUPS_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterGroup> adminGroups_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterGroup> getAdminGroupsList() {
+    return adminGroups_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public java.util.List<? extends com.google.cloud.gkemulticloud.v1.AzureClusterGroupOrBuilder>
+      getAdminGroupsOrBuilderList() {
+    return adminGroups_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public int getAdminGroupsCount() {
+    return adminGroups_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AzureClusterGroup getAdminGroups(int index) {
+    return adminGroups_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AzureClusterGroupOrBuilder getAdminGroupsOrBuilder(
+      int index) {
+    return adminGroups_.get(index);
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -186,6 +294,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     for (int i = 0; i < adminUsers_.size(); i++) {
       output.writeMessage(1, adminUsers_.get(i));
     }
+    for (int i = 0; i < adminGroups_.size(); i++) {
+      output.writeMessage(2, adminGroups_.get(i));
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -198,6 +309,9 @@ public int getSerializedSize() {
     for (int i = 0; i < adminUsers_.size(); i++) {
       size += com.google.protobuf.CodedOutputStream.computeMessageSize(1, adminUsers_.get(i));
     }
+    for (int i = 0; i < adminGroups_.size(); i++) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(2, adminGroups_.get(i));
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -215,6 +329,7 @@ public boolean equals(final java.lang.Object obj) {
         (com.google.cloud.gkemulticloud.v1.AzureAuthorization) obj;
 
     if (!getAdminUsersList().equals(other.getAdminUsersList())) return false;
+    if (!getAdminGroupsList().equals(other.getAdminGroupsList())) return false;
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -230,6 +345,10 @@ public int hashCode() {
       hash = (37 * hash) + ADMIN_USERS_FIELD_NUMBER;
       hash = (53 * hash) + getAdminUsersList().hashCode();
     }
+    if (getAdminGroupsCount() > 0) {
+      hash = (37 * hash) + ADMIN_GROUPS_FIELD_NUMBER;
+      hash = (53 * hash) + getAdminGroupsList().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -376,6 +495,13 @@ public Builder clear() {
         adminUsersBuilder_.clear();
       }
       bitField0_ = (bitField0_ & ~0x00000001);
+      if (adminGroupsBuilder_ == null) {
+        adminGroups_ = java.util.Collections.emptyList();
+      } else {
+        adminGroups_ = null;
+        adminGroupsBuilder_.clear();
+      }
+      bitField0_ = (bitField0_ & ~0x00000002);
       return this;
     }
 
@@ -422,6 +548,15 @@ private void buildPartialRepeatedFields(
       } else {
         result.adminUsers_ = adminUsersBuilder_.build();
       }
+      if (adminGroupsBuilder_ == null) {
+        if (((bitField0_ & 0x00000002) != 0)) {
+          adminGroups_ = java.util.Collections.unmodifiableList(adminGroups_);
+          bitField0_ = (bitField0_ & ~0x00000002);
+        }
+        result.adminGroups_ = adminGroups_;
+      } else {
+        result.adminGroups_ = adminGroupsBuilder_.build();
+      }
     }
 
     private void buildPartial0(com.google.cloud.gkemulticloud.v1.AzureAuthorization result) {
@@ -501,6 +636,33 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AzureAuthorization ot
           }
         }
       }
+      if (adminGroupsBuilder_ == null) {
+        if (!other.adminGroups_.isEmpty()) {
+          if (adminGroups_.isEmpty()) {
+            adminGroups_ = other.adminGroups_;
+            bitField0_ = (bitField0_ & ~0x00000002);
+          } else {
+            ensureAdminGroupsIsMutable();
+            adminGroups_.addAll(other.adminGroups_);
+          }
+          onChanged();
+        }
+      } else {
+        if (!other.adminGroups_.isEmpty()) {
+          if (adminGroupsBuilder_.isEmpty()) {
+            adminGroupsBuilder_.dispose();
+            adminGroupsBuilder_ = null;
+            adminGroups_ = other.adminGroups_;
+            bitField0_ = (bitField0_ & ~0x00000002);
+            adminGroupsBuilder_ =
+                com.google.protobuf.GeneratedMessageV3.alwaysUseFieldBuilders
+                    ? getAdminGroupsFieldBuilder()
+                    : null;
+          } else {
+            adminGroupsBuilder_.addAllMessages(other.adminGroups_);
+          }
+        }
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -541,6 +703,20 @@ public Builder mergeFrom(
                 }
                 break;
               } // case 10
+            case 18:
+              {
+                com.google.cloud.gkemulticloud.v1.AzureClusterGroup m =
+                    input.readMessage(
+                        com.google.cloud.gkemulticloud.v1.AzureClusterGroup.parser(),
+                        extensionRegistry);
+                if (adminGroupsBuilder_ == null) {
+                  ensureAdminGroupsIsMutable();
+                  adminGroups_.add(m);
+                } else {
+                  adminGroupsBuilder_.addMessage(m);
+                }
+                break;
+              } // case 18
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -582,7 +758,7 @@ private void ensureAdminUsersIsMutable() {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -591,7 +767,7 @@ private void ensureAdminUsersIsMutable() {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterUser> getAdminUsersList() {
@@ -605,7 +781,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterUser> getAdm
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -614,7 +790,7 @@ public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterUser> getAdm
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public int getAdminUsersCount() {
@@ -628,7 +804,7 @@ public int getAdminUsersCount() {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -637,7 +813,7 @@ public int getAdminUsersCount() {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AzureClusterUser getAdminUsers(int index) {
@@ -651,7 +827,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser getAdminUsers(int inde
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -660,7 +836,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser getAdminUsers(int inde
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder setAdminUsers(
@@ -681,7 +857,7 @@ public Builder setAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -690,7 +866,7 @@ public Builder setAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder setAdminUsers(
@@ -708,7 +884,7 @@ public Builder setAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -717,7 +893,7 @@ public Builder setAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(com.google.cloud.gkemulticloud.v1.AzureClusterUser value) {
@@ -737,7 +913,7 @@ public Builder addAdminUsers(com.google.cloud.gkemulticloud.v1.AzureClusterUser
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -746,7 +922,7 @@ public Builder addAdminUsers(com.google.cloud.gkemulticloud.v1.AzureClusterUser
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(
@@ -767,7 +943,7 @@ public Builder addAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -776,7 +952,7 @@ public Builder addAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(
@@ -794,7 +970,7 @@ public Builder addAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -803,7 +979,7 @@ public Builder addAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAdminUsers(
@@ -821,7 +997,7 @@ public Builder addAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -830,7 +1006,7 @@ public Builder addAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder addAllAdminUsers(
@@ -848,7 +1024,7 @@ public Builder addAllAdminUsers(
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -857,7 +1033,7 @@ public Builder addAllAdminUsers(
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder clearAdminUsers() {
@@ -874,7 +1050,7 @@ public Builder clearAdminUsers() {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -883,7 +1059,7 @@ public Builder clearAdminUsers() {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public Builder removeAdminUsers(int index) {
@@ -900,7 +1076,7 @@ public Builder removeAdminUsers(int index) {
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -909,7 +1085,7 @@ public Builder removeAdminUsers(int index) {
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder getAdminUsersBuilder(
@@ -920,7 +1096,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder getAdminUsersB
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -929,7 +1105,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder getAdminUsersB
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AzureClusterUserOrBuilder getAdminUsersOrBuilder(
@@ -944,7 +1120,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUserOrBuilder getAdminUsers
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -953,7 +1129,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUserOrBuilder getAdminUsers
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public java.util.List<? extends com.google.cloud.gkemulticloud.v1.AzureClusterUserOrBuilder>
@@ -968,7 +1144,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUserOrBuilder getAdminUsers
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -977,7 +1153,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUserOrBuilder getAdminUsers
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder addAdminUsersBuilder() {
@@ -988,7 +1164,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder addAdminUsersB
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -997,7 +1173,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder addAdminUsersB
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder addAdminUsersBuilder(
@@ -1010,7 +1186,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder addAdminUsersB
      *
      *
      * <pre>
-     * Required. Users that can perform operations as a cluster admin. A managed
+     * Optional. Users that can perform operations as a cluster admin. A managed
      * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
      * to the users. Up to ten admin users can be provided.
      *
@@ -1019,7 +1195,7 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder addAdminUsersB
      * </pre>
      *
      * <code>
-     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
      * </code>
      */
     public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder>
@@ -1044,6 +1220,491 @@ public com.google.cloud.gkemulticloud.v1.AzureClusterUser.Builder addAdminUsersB
       return adminUsersBuilder_;
     }
 
+    private java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterGroup> adminGroups_ =
+        java.util.Collections.emptyList();
+
+    private void ensureAdminGroupsIsMutable() {
+      if (!((bitField0_ & 0x00000002) != 0)) {
+        adminGroups_ =
+            new java.util.ArrayList<com.google.cloud.gkemulticloud.v1.AzureClusterGroup>(
+                adminGroups_);
+        bitField0_ |= 0x00000002;
+      }
+    }
+
+    private com.google.protobuf.RepeatedFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AzureClusterGroup,
+            com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder,
+            com.google.cloud.gkemulticloud.v1.AzureClusterGroupOrBuilder>
+        adminGroupsBuilder_;
+
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterGroup>
+        getAdminGroupsList() {
+      if (adminGroupsBuilder_ == null) {
+        return java.util.Collections.unmodifiableList(adminGroups_);
+      } else {
+        return adminGroupsBuilder_.getMessageList();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public int getAdminGroupsCount() {
+      if (adminGroupsBuilder_ == null) {
+        return adminGroups_.size();
+      } else {
+        return adminGroupsBuilder_.getCount();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AzureClusterGroup getAdminGroups(int index) {
+      if (adminGroupsBuilder_ == null) {
+        return adminGroups_.get(index);
+      } else {
+        return adminGroupsBuilder_.getMessage(index);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AzureClusterGroup value) {
+      if (adminGroupsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureAdminGroupsIsMutable();
+        adminGroups_.set(index, value);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.setMessage(index, value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder builderForValue) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.set(index, builderForValue.build());
+        onChanged();
+      } else {
+        adminGroupsBuilder_.setMessage(index, builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(com.google.cloud.gkemulticloud.v1.AzureClusterGroup value) {
+      if (adminGroupsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(value);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AzureClusterGroup value) {
+      if (adminGroupsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(index, value);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(index, value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(
+        com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder builderForValue) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(builderForValue.build());
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAdminGroups(
+        int index, com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder builderForValue) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.add(index, builderForValue.build());
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addMessage(index, builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder addAllAdminGroups(
+        java.lang.Iterable<? extends com.google.cloud.gkemulticloud.v1.AzureClusterGroup> values) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        com.google.protobuf.AbstractMessageLite.Builder.addAll(values, adminGroups_);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.addAllMessages(values);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearAdminGroups() {
+      if (adminGroupsBuilder_ == null) {
+        adminGroups_ = java.util.Collections.emptyList();
+        bitField0_ = (bitField0_ & ~0x00000002);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.clear();
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder removeAdminGroups(int index) {
+      if (adminGroupsBuilder_ == null) {
+        ensureAdminGroupsIsMutable();
+        adminGroups_.remove(index);
+        onChanged();
+      } else {
+        adminGroupsBuilder_.remove(index);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder getAdminGroupsBuilder(
+        int index) {
+      return getAdminGroupsFieldBuilder().getBuilder(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AzureClusterGroupOrBuilder getAdminGroupsOrBuilder(
+        int index) {
+      if (adminGroupsBuilder_ == null) {
+        return adminGroups_.get(index);
+      } else {
+        return adminGroupsBuilder_.getMessageOrBuilder(index);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public java.util.List<? extends com.google.cloud.gkemulticloud.v1.AzureClusterGroupOrBuilder>
+        getAdminGroupsOrBuilderList() {
+      if (adminGroupsBuilder_ != null) {
+        return adminGroupsBuilder_.getMessageOrBuilderList();
+      } else {
+        return java.util.Collections.unmodifiableList(adminGroups_);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder addAdminGroupsBuilder() {
+      return getAdminGroupsFieldBuilder()
+          .addBuilder(com.google.cloud.gkemulticloud.v1.AzureClusterGroup.getDefaultInstance());
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder addAdminGroupsBuilder(
+        int index) {
+      return getAdminGroupsFieldBuilder()
+          .addBuilder(
+              index, com.google.cloud.gkemulticloud.v1.AzureClusterGroup.getDefaultInstance());
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Groups of users that can perform operations as a cluster admin. A
+     * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+     * ClusterRole to the groups. Up to ten admin groups can be provided.
+     *
+     * For more info on RBAC, see
+     * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+     * </pre>
+     *
+     * <code>
+     * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder>
+        getAdminGroupsBuilderList() {
+      return getAdminGroupsFieldBuilder().getBuilderList();
+    }
+
+    private com.google.protobuf.RepeatedFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AzureClusterGroup,
+            com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder,
+            com.google.cloud.gkemulticloud.v1.AzureClusterGroupOrBuilder>
+        getAdminGroupsFieldBuilder() {
+      if (adminGroupsBuilder_ == null) {
+        adminGroupsBuilder_ =
+            new com.google.protobuf.RepeatedFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.AzureClusterGroup,
+                com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder,
+                com.google.cloud.gkemulticloud.v1.AzureClusterGroupOrBuilder>(
+                adminGroups_, ((bitField0_ & 0x00000002) != 0), getParentForChildren(), isClean());
+        adminGroups_ = null;
+      }
+      return adminGroupsBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureAuthorizationOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureAuthorizationOrBuilder.java
index 6743e407da5c..12c5f91107e5 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureAuthorizationOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureAuthorizationOrBuilder.java
@@ -27,7 +27,7 @@ public interface AzureAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -36,7 +36,7 @@ public interface AzureAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterUser> getAdminUsersList();
@@ -44,7 +44,7 @@ public interface AzureAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -53,7 +53,7 @@ public interface AzureAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   com.google.cloud.gkemulticloud.v1.AzureClusterUser getAdminUsers(int index);
@@ -61,7 +61,7 @@ public interface AzureAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -70,7 +70,7 @@ public interface AzureAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   int getAdminUsersCount();
@@ -78,7 +78,7 @@ public interface AzureAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -87,7 +87,7 @@ public interface AzureAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   java.util.List<? extends com.google.cloud.gkemulticloud.v1.AzureClusterUserOrBuilder>
@@ -96,7 +96,7 @@ public interface AzureAuthorizationOrBuilder
    *
    *
    * <pre>
-   * Required. Users that can perform operations as a cluster admin. A managed
+   * Optional. Users that can perform operations as a cluster admin. A managed
    * ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
    * to the users. Up to ten admin users can be provided.
    *
@@ -105,8 +105,95 @@ public interface AzureAuthorizationOrBuilder
    * </pre>
    *
    * <code>
-   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = REQUIRED];
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterUser admin_users = 1 [(.google.api.field_behavior) = OPTIONAL];
    * </code>
    */
   com.google.cloud.gkemulticloud.v1.AzureClusterUserOrBuilder getAdminUsersOrBuilder(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  java.util.List<com.google.cloud.gkemulticloud.v1.AzureClusterGroup> getAdminGroupsList();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AzureClusterGroup getAdminGroups(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  int getAdminGroupsCount();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  java.util.List<? extends com.google.cloud.gkemulticloud.v1.AzureClusterGroupOrBuilder>
+      getAdminGroupsOrBuilderList();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Groups of users that can perform operations as a cluster admin. A
+   * managed ClusterRoleBinding will be created to grant the `cluster-admin`
+   * ClusterRole to the groups. Up to ten admin groups can be provided.
+   *
+   * For more info on RBAC, see
+   * https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+   * </pre>
+   *
+   * <code>
+   * repeated .google.cloud.gkemulticloud.v1.AzureClusterGroup admin_groups = 2 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AzureClusterGroupOrBuilder getAdminGroupsOrBuilder(int index);
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureCluster.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureCluster.java
index 97536eac5cfb..616e01f717a6 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureCluster.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureCluster.java
@@ -581,6 +581,8 @@ public com.google.protobuf.ByteString getResourceGroupIdBytes() {
    * authentication configuration for how the Anthos Multi-Cloud API connects to
    * Azure APIs.
    *
+   * Either azure_client or azure_services_authentication should be provided.
+   *
    * The `AzureClient` resource must reside on the same Google Cloud Platform
    * project and region as the `AzureCluster`.
    *
@@ -616,6 +618,8 @@ public java.lang.String getAzureClient() {
    * authentication configuration for how the Anthos Multi-Cloud API connects to
    * Azure APIs.
    *
+   * Either azure_client or azure_services_authentication should be provided.
+   *
    * The `AzureClient` resource must reside on the same Google Cloud Platform
    * project and region as the `AzureCluster`.
    *
@@ -820,6 +824,8 @@ public com.google.cloud.gkemulticloud.v1.AzureAuthorizationOrBuilder getAuthoriz
    *
    * <pre>
    * Optional. Authentication configuration for management of Azure resources.
+   *
+   * Either azure_client or azure_services_authentication should be provided.
    * </pre>
    *
    * <code>
@@ -837,6 +843,8 @@ public boolean hasAzureServicesAuthentication() {
    *
    * <pre>
    * Optional. Authentication configuration for management of Azure resources.
+   *
+   * Either azure_client or azure_services_authentication should be provided.
    * </pre>
    *
    * <code>
@@ -857,6 +865,8 @@ public boolean hasAzureServicesAuthentication() {
    *
    * <pre>
    * Optional. Authentication configuration for management of Azure resources.
+   *
+   * Either azure_client or azure_services_authentication should be provided.
    * </pre>
    *
    * <code>
@@ -3311,6 +3321,8 @@ public Builder setResourceGroupIdBytes(com.google.protobuf.ByteString value) {
      * authentication configuration for how the Anthos Multi-Cloud API connects to
      * Azure APIs.
      *
+     * Either azure_client or azure_services_authentication should be provided.
+     *
      * The `AzureClient` resource must reside on the same Google Cloud Platform
      * project and region as the `AzureCluster`.
      *
@@ -3345,6 +3357,8 @@ public java.lang.String getAzureClient() {
      * authentication configuration for how the Anthos Multi-Cloud API connects to
      * Azure APIs.
      *
+     * Either azure_client or azure_services_authentication should be provided.
+     *
      * The `AzureClient` resource must reside on the same Google Cloud Platform
      * project and region as the `AzureCluster`.
      *
@@ -3379,6 +3393,8 @@ public com.google.protobuf.ByteString getAzureClientBytes() {
      * authentication configuration for how the Anthos Multi-Cloud API connects to
      * Azure APIs.
      *
+     * Either azure_client or azure_services_authentication should be provided.
+     *
      * The `AzureClient` resource must reside on the same Google Cloud Platform
      * project and region as the `AzureCluster`.
      *
@@ -3412,6 +3428,8 @@ public Builder setAzureClient(java.lang.String value) {
      * authentication configuration for how the Anthos Multi-Cloud API connects to
      * Azure APIs.
      *
+     * Either azure_client or azure_services_authentication should be provided.
+     *
      * The `AzureClient` resource must reside on the same Google Cloud Platform
      * project and region as the `AzureCluster`.
      *
@@ -3441,6 +3459,8 @@ public Builder clearAzureClient() {
      * authentication configuration for how the Anthos Multi-Cloud API connects to
      * Azure APIs.
      *
+     * Either azure_client or azure_services_authentication should be provided.
+     *
      * The `AzureClient` resource must reside on the same Google Cloud Platform
      * project and region as the `AzureCluster`.
      *
@@ -4090,6 +4110,8 @@ public com.google.cloud.gkemulticloud.v1.AzureAuthorization.Builder getAuthoriza
      *
      * <pre>
      * Optional. Authentication configuration for management of Azure resources.
+     *
+     * Either azure_client or azure_services_authentication should be provided.
      * </pre>
      *
      * <code>
@@ -4106,6 +4128,8 @@ public boolean hasAzureServicesAuthentication() {
      *
      * <pre>
      * Optional. Authentication configuration for management of Azure resources.
+     *
+     * Either azure_client or azure_services_authentication should be provided.
      * </pre>
      *
      * <code>
@@ -4129,6 +4153,8 @@ public boolean hasAzureServicesAuthentication() {
      *
      * <pre>
      * Optional. Authentication configuration for management of Azure resources.
+     *
+     * Either azure_client or azure_services_authentication should be provided.
      * </pre>
      *
      * <code>
@@ -4154,6 +4180,8 @@ public Builder setAzureServicesAuthentication(
      *
      * <pre>
      * Optional. Authentication configuration for management of Azure resources.
+     *
+     * Either azure_client or azure_services_authentication should be provided.
      * </pre>
      *
      * <code>
@@ -4176,6 +4204,8 @@ public Builder setAzureServicesAuthentication(
      *
      * <pre>
      * Optional. Authentication configuration for management of Azure resources.
+     *
+     * Either azure_client or azure_services_authentication should be provided.
      * </pre>
      *
      * <code>
@@ -4206,6 +4236,8 @@ public Builder mergeAzureServicesAuthentication(
      *
      * <pre>
      * Optional. Authentication configuration for management of Azure resources.
+     *
+     * Either azure_client or azure_services_authentication should be provided.
      * </pre>
      *
      * <code>
@@ -4227,6 +4259,8 @@ public Builder clearAzureServicesAuthentication() {
      *
      * <pre>
      * Optional. Authentication configuration for management of Azure resources.
+     *
+     * Either azure_client or azure_services_authentication should be provided.
      * </pre>
      *
      * <code>
@@ -4244,6 +4278,8 @@ public Builder clearAzureServicesAuthentication() {
      *
      * <pre>
      * Optional. Authentication configuration for management of Azure resources.
+     *
+     * Either azure_client or azure_services_authentication should be provided.
      * </pre>
      *
      * <code>
@@ -4265,6 +4301,8 @@ public Builder clearAzureServicesAuthentication() {
      *
      * <pre>
      * Optional. Authentication configuration for management of Azure resources.
+     *
+     * Either azure_client or azure_services_authentication should be provided.
      * </pre>
      *
      * <code>
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClusterGroup.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClusterGroup.java
new file mode 100644
index 000000000000..d219437c780a
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClusterGroup.java
@@ -0,0 +1,624 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * Identities of a group-type subject for Azure clusters.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.AzureClusterGroup}
+ */
+public final class AzureClusterGroup extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.AzureClusterGroup)
+    AzureClusterGroupOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use AzureClusterGroup.newBuilder() to construct.
+  private AzureClusterGroup(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private AzureClusterGroup() {
+    group_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new AzureClusterGroup();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AzureClusterGroup_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AzureClusterGroup_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.AzureClusterGroup.class,
+            com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder.class);
+  }
+
+  public static final int GROUP_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object group_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The group.
+   */
+  @java.lang.Override
+  public java.lang.String getGroup() {
+    java.lang.Object ref = group_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      group_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for group.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getGroupBytes() {
+    java.lang.Object ref = group_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      group_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(group_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, group_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(group_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, group_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.AzureClusterGroup)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.AzureClusterGroup other =
+        (com.google.cloud.gkemulticloud.v1.AzureClusterGroup) obj;
+
+    if (!getGroup().equals(other.getGroup())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + GROUP_FIELD_NUMBER;
+    hash = (53 * hash) + getGroup().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.AzureClusterGroup prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Identities of a group-type subject for Azure clusters.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.AzureClusterGroup}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.AzureClusterGroup)
+      com.google.cloud.gkemulticloud.v1.AzureClusterGroupOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureClusterGroup_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureClusterGroup_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.AzureClusterGroup.class,
+              com.google.cloud.gkemulticloud.v1.AzureClusterGroup.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.AzureClusterGroup.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      group_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureClusterGroup_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureClusterGroup getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureClusterGroup.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureClusterGroup build() {
+      com.google.cloud.gkemulticloud.v1.AzureClusterGroup result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureClusterGroup buildPartial() {
+      com.google.cloud.gkemulticloud.v1.AzureClusterGroup result =
+          new com.google.cloud.gkemulticloud.v1.AzureClusterGroup(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.AzureClusterGroup result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.group_ = group_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.AzureClusterGroup) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.AzureClusterGroup) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AzureClusterGroup other) {
+      if (other == com.google.cloud.gkemulticloud.v1.AzureClusterGroup.getDefaultInstance())
+        return this;
+      if (!other.getGroup().isEmpty()) {
+        group_ = other.group_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                group_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object group_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The group.
+     */
+    public java.lang.String getGroup() {
+      java.lang.Object ref = group_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        group_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for group.
+     */
+    public com.google.protobuf.ByteString getGroupBytes() {
+      java.lang.Object ref = group_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        group_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The group to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGroup(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      group_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearGroup() {
+      group_ = getDefaultInstance().getGroup();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+     * </pre>
+     *
+     * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for group to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGroupBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      group_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.AzureClusterGroup)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.AzureClusterGroup)
+  private static final com.google.cloud.gkemulticloud.v1.AzureClusterGroup DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.AzureClusterGroup();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureClusterGroup getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<AzureClusterGroup> PARSER =
+      new com.google.protobuf.AbstractParser<AzureClusterGroup>() {
+        @java.lang.Override
+        public AzureClusterGroup parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<AzureClusterGroup> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<AzureClusterGroup> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AzureClusterGroup getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClusterGroupOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClusterGroupOrBuilder.java
new file mode 100644
index 000000000000..0759b23e53fc
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClusterGroupOrBuilder.java
@@ -0,0 +1,50 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface AzureClusterGroupOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.AzureClusterGroup)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The group.
+   */
+  java.lang.String getGroup();
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the group, e.g. `my-group&#64;domain.com`.
+   * </pre>
+   *
+   * <code>string group = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for group.
+   */
+  com.google.protobuf.ByteString getGroupBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClusterOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClusterOrBuilder.java
index 483261ca5dde..42a749354ef3 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClusterOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureClusterOrBuilder.java
@@ -160,6 +160,8 @@ public interface AzureClusterOrBuilder
    * authentication configuration for how the Anthos Multi-Cloud API connects to
    * Azure APIs.
    *
+   * Either azure_client or azure_services_authentication should be provided.
+   *
    * The `AzureClient` resource must reside on the same Google Cloud Platform
    * project and region as the `AzureCluster`.
    *
@@ -184,6 +186,8 @@ public interface AzureClusterOrBuilder
    * authentication configuration for how the Anthos Multi-Cloud API connects to
    * Azure APIs.
    *
+   * Either azure_client or azure_services_authentication should be provided.
+   *
    * The `AzureClient` resource must reside on the same Google Cloud Platform
    * project and region as the `AzureCluster`.
    *
@@ -328,6 +332,8 @@ public interface AzureClusterOrBuilder
    *
    * <pre>
    * Optional. Authentication configuration for management of Azure resources.
+   *
+   * Either azure_client or azure_services_authentication should be provided.
    * </pre>
    *
    * <code>
@@ -342,6 +348,8 @@ public interface AzureClusterOrBuilder
    *
    * <pre>
    * Optional. Authentication configuration for management of Azure resources.
+   *
+   * Either azure_client or azure_services_authentication should be provided.
    * </pre>
    *
    * <code>
@@ -356,6 +364,8 @@ public interface AzureClusterOrBuilder
    *
    * <pre>
    * Optional. Authentication configuration for management of Azure resources.
+   *
+   * Either azure_client or azure_services_authentication should be provided.
    * </pre>
    *
    * <code>
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureJsonWebKeys.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureJsonWebKeys.java
new file mode 100644
index 000000000000..0656e26e7b96
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureJsonWebKeys.java
@@ -0,0 +1,957 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * AzureJsonWebKeys is a valid JSON Web Key Set as specififed in RFC 7517.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.AzureJsonWebKeys}
+ */
+public final class AzureJsonWebKeys extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.AzureJsonWebKeys)
+    AzureJsonWebKeysOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use AzureJsonWebKeys.newBuilder() to construct.
+  private AzureJsonWebKeys(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private AzureJsonWebKeys() {
+    keys_ = java.util.Collections.emptyList();
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new AzureJsonWebKeys();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AzureJsonWebKeys_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AzureJsonWebKeys_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys.class,
+            com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys.Builder.class);
+  }
+
+  public static final int KEYS_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private java.util.List<com.google.cloud.gkemulticloud.v1.Jwk> keys_;
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  @java.lang.Override
+  public java.util.List<com.google.cloud.gkemulticloud.v1.Jwk> getKeysList() {
+    return keys_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  @java.lang.Override
+  public java.util.List<? extends com.google.cloud.gkemulticloud.v1.JwkOrBuilder>
+      getKeysOrBuilderList() {
+    return keys_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  @java.lang.Override
+  public int getKeysCount() {
+    return keys_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.Jwk getKeys(int index) {
+    return keys_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.JwkOrBuilder getKeysOrBuilder(int index) {
+    return keys_.get(index);
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    for (int i = 0; i < keys_.size(); i++) {
+      output.writeMessage(1, keys_.get(i));
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    for (int i = 0; i < keys_.size(); i++) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(1, keys_.get(i));
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys other =
+        (com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys) obj;
+
+    if (!getKeysList().equals(other.getKeysList())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    if (getKeysCount() > 0) {
+      hash = (37 * hash) + KEYS_FIELD_NUMBER;
+      hash = (53 * hash) + getKeysList().hashCode();
+    }
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * AzureJsonWebKeys is a valid JSON Web Key Set as specififed in RFC 7517.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.AzureJsonWebKeys}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.AzureJsonWebKeys)
+      com.google.cloud.gkemulticloud.v1.AzureJsonWebKeysOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureJsonWebKeys_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureJsonWebKeys_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys.class,
+              com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      if (keysBuilder_ == null) {
+        keys_ = java.util.Collections.emptyList();
+      } else {
+        keys_ = null;
+        keysBuilder_.clear();
+      }
+      bitField0_ = (bitField0_ & ~0x00000001);
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureJsonWebKeys_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys build() {
+      com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys buildPartial() {
+      com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys result =
+          new com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys(this);
+      buildPartialRepeatedFields(result);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartialRepeatedFields(
+        com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys result) {
+      if (keysBuilder_ == null) {
+        if (((bitField0_ & 0x00000001) != 0)) {
+          keys_ = java.util.Collections.unmodifiableList(keys_);
+          bitField0_ = (bitField0_ & ~0x00000001);
+        }
+        result.keys_ = keys_;
+      } else {
+        result.keys_ = keysBuilder_.build();
+      }
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys result) {
+      int from_bitField0_ = bitField0_;
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys other) {
+      if (other == com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys.getDefaultInstance())
+        return this;
+      if (keysBuilder_ == null) {
+        if (!other.keys_.isEmpty()) {
+          if (keys_.isEmpty()) {
+            keys_ = other.keys_;
+            bitField0_ = (bitField0_ & ~0x00000001);
+          } else {
+            ensureKeysIsMutable();
+            keys_.addAll(other.keys_);
+          }
+          onChanged();
+        }
+      } else {
+        if (!other.keys_.isEmpty()) {
+          if (keysBuilder_.isEmpty()) {
+            keysBuilder_.dispose();
+            keysBuilder_ = null;
+            keys_ = other.keys_;
+            bitField0_ = (bitField0_ & ~0x00000001);
+            keysBuilder_ =
+                com.google.protobuf.GeneratedMessageV3.alwaysUseFieldBuilders
+                    ? getKeysFieldBuilder()
+                    : null;
+          } else {
+            keysBuilder_.addAllMessages(other.keys_);
+          }
+        }
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                com.google.cloud.gkemulticloud.v1.Jwk m =
+                    input.readMessage(
+                        com.google.cloud.gkemulticloud.v1.Jwk.parser(), extensionRegistry);
+                if (keysBuilder_ == null) {
+                  ensureKeysIsMutable();
+                  keys_.add(m);
+                } else {
+                  keysBuilder_.addMessage(m);
+                }
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.util.List<com.google.cloud.gkemulticloud.v1.Jwk> keys_ =
+        java.util.Collections.emptyList();
+
+    private void ensureKeysIsMutable() {
+      if (!((bitField0_ & 0x00000001) != 0)) {
+        keys_ = new java.util.ArrayList<com.google.cloud.gkemulticloud.v1.Jwk>(keys_);
+        bitField0_ |= 0x00000001;
+      }
+    }
+
+    private com.google.protobuf.RepeatedFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.Jwk,
+            com.google.cloud.gkemulticloud.v1.Jwk.Builder,
+            com.google.cloud.gkemulticloud.v1.JwkOrBuilder>
+        keysBuilder_;
+
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public java.util.List<com.google.cloud.gkemulticloud.v1.Jwk> getKeysList() {
+      if (keysBuilder_ == null) {
+        return java.util.Collections.unmodifiableList(keys_);
+      } else {
+        return keysBuilder_.getMessageList();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public int getKeysCount() {
+      if (keysBuilder_ == null) {
+        return keys_.size();
+      } else {
+        return keysBuilder_.getCount();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.Jwk getKeys(int index) {
+      if (keysBuilder_ == null) {
+        return keys_.get(index);
+      } else {
+        return keysBuilder_.getMessage(index);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder setKeys(int index, com.google.cloud.gkemulticloud.v1.Jwk value) {
+      if (keysBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureKeysIsMutable();
+        keys_.set(index, value);
+        onChanged();
+      } else {
+        keysBuilder_.setMessage(index, value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder setKeys(
+        int index, com.google.cloud.gkemulticloud.v1.Jwk.Builder builderForValue) {
+      if (keysBuilder_ == null) {
+        ensureKeysIsMutable();
+        keys_.set(index, builderForValue.build());
+        onChanged();
+      } else {
+        keysBuilder_.setMessage(index, builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder addKeys(com.google.cloud.gkemulticloud.v1.Jwk value) {
+      if (keysBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureKeysIsMutable();
+        keys_.add(value);
+        onChanged();
+      } else {
+        keysBuilder_.addMessage(value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder addKeys(int index, com.google.cloud.gkemulticloud.v1.Jwk value) {
+      if (keysBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        ensureKeysIsMutable();
+        keys_.add(index, value);
+        onChanged();
+      } else {
+        keysBuilder_.addMessage(index, value);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder addKeys(com.google.cloud.gkemulticloud.v1.Jwk.Builder builderForValue) {
+      if (keysBuilder_ == null) {
+        ensureKeysIsMutable();
+        keys_.add(builderForValue.build());
+        onChanged();
+      } else {
+        keysBuilder_.addMessage(builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder addKeys(
+        int index, com.google.cloud.gkemulticloud.v1.Jwk.Builder builderForValue) {
+      if (keysBuilder_ == null) {
+        ensureKeysIsMutable();
+        keys_.add(index, builderForValue.build());
+        onChanged();
+      } else {
+        keysBuilder_.addMessage(index, builderForValue.build());
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder addAllKeys(
+        java.lang.Iterable<? extends com.google.cloud.gkemulticloud.v1.Jwk> values) {
+      if (keysBuilder_ == null) {
+        ensureKeysIsMutable();
+        com.google.protobuf.AbstractMessageLite.Builder.addAll(values, keys_);
+        onChanged();
+      } else {
+        keysBuilder_.addAllMessages(values);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder clearKeys() {
+      if (keysBuilder_ == null) {
+        keys_ = java.util.Collections.emptyList();
+        bitField0_ = (bitField0_ & ~0x00000001);
+        onChanged();
+      } else {
+        keysBuilder_.clear();
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public Builder removeKeys(int index) {
+      if (keysBuilder_ == null) {
+        ensureKeysIsMutable();
+        keys_.remove(index);
+        onChanged();
+      } else {
+        keysBuilder_.remove(index);
+      }
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.Jwk.Builder getKeysBuilder(int index) {
+      return getKeysFieldBuilder().getBuilder(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.JwkOrBuilder getKeysOrBuilder(int index) {
+      if (keysBuilder_ == null) {
+        return keys_.get(index);
+      } else {
+        return keysBuilder_.getMessageOrBuilder(index);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public java.util.List<? extends com.google.cloud.gkemulticloud.v1.JwkOrBuilder>
+        getKeysOrBuilderList() {
+      if (keysBuilder_ != null) {
+        return keysBuilder_.getMessageOrBuilderList();
+      } else {
+        return java.util.Collections.unmodifiableList(keys_);
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.Jwk.Builder addKeysBuilder() {
+      return getKeysFieldBuilder()
+          .addBuilder(com.google.cloud.gkemulticloud.v1.Jwk.getDefaultInstance());
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public com.google.cloud.gkemulticloud.v1.Jwk.Builder addKeysBuilder(int index) {
+      return getKeysFieldBuilder()
+          .addBuilder(index, com.google.cloud.gkemulticloud.v1.Jwk.getDefaultInstance());
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The public component of the keys used by the cluster to sign token
+     * requests.
+     * </pre>
+     *
+     * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+     */
+    public java.util.List<com.google.cloud.gkemulticloud.v1.Jwk.Builder> getKeysBuilderList() {
+      return getKeysFieldBuilder().getBuilderList();
+    }
+
+    private com.google.protobuf.RepeatedFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.Jwk,
+            com.google.cloud.gkemulticloud.v1.Jwk.Builder,
+            com.google.cloud.gkemulticloud.v1.JwkOrBuilder>
+        getKeysFieldBuilder() {
+      if (keysBuilder_ == null) {
+        keysBuilder_ =
+            new com.google.protobuf.RepeatedFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.Jwk,
+                com.google.cloud.gkemulticloud.v1.Jwk.Builder,
+                com.google.cloud.gkemulticloud.v1.JwkOrBuilder>(
+                keys_, ((bitField0_ & 0x00000001) != 0), getParentForChildren(), isClean());
+        keys_ = null;
+      }
+      return keysBuilder_;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.AzureJsonWebKeys)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.AzureJsonWebKeys)
+  private static final com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<AzureJsonWebKeys> PARSER =
+      new com.google.protobuf.AbstractParser<AzureJsonWebKeys>() {
+        @java.lang.Override
+        public AzureJsonWebKeys parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<AzureJsonWebKeys> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<AzureJsonWebKeys> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureJsonWebKeysOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureJsonWebKeysOrBuilder.java
new file mode 100644
index 000000000000..84c45dc2291f
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureJsonWebKeysOrBuilder.java
@@ -0,0 +1,81 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface AzureJsonWebKeysOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.AzureJsonWebKeys)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  java.util.List<com.google.cloud.gkemulticloud.v1.Jwk> getKeysList();
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  com.google.cloud.gkemulticloud.v1.Jwk getKeys(int index);
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  int getKeysCount();
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  java.util.List<? extends com.google.cloud.gkemulticloud.v1.JwkOrBuilder> getKeysOrBuilderList();
+  /**
+   *
+   *
+   * <pre>
+   * The public component of the keys used by the cluster to sign token
+   * requests.
+   * </pre>
+   *
+   * <code>repeated .google.cloud.gkemulticloud.v1.Jwk keys = 1;</code>
+   */
+  com.google.cloud.gkemulticloud.v1.JwkOrBuilder getKeysOrBuilder(int index);
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureK8sVersionInfo.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureK8sVersionInfo.java
index a7440641424f..aaf36ad0d30d 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureK8sVersionInfo.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureK8sVersionInfo.java
@@ -22,7 +22,7 @@
  *
  *
  * <pre>
- * Information about a supported Kubernetes version.
+ * Kubernetes version information of GKE cluster on Azure.
  * </pre>
  *
  * Protobuf type {@code google.cloud.gkemulticloud.v1.AzureK8sVersionInfo}
@@ -70,7 +70,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * A supported Kubernetes version (for example, `1.19.10-gke.1000`)
+   * Kubernetes version name (for example, `1.19.10-gke.1000`)
    * </pre>
    *
    * <code>string version = 1;</code>
@@ -93,7 +93,7 @@ public java.lang.String getVersion() {
    *
    *
    * <pre>
-   * A supported Kubernetes version (for example, `1.19.10-gke.1000`)
+   * Kubernetes version name (for example, `1.19.10-gke.1000`)
    * </pre>
    *
    * <code>string version = 1;</code>
@@ -113,6 +113,148 @@ public com.google.protobuf.ByteString getVersionBytes() {
     }
   }
 
+  public static final int ENABLED_FIELD_NUMBER = 3;
+  private boolean enabled_ = false;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. True if the version is available for cluster creation. If a
+   * version is enabled for creation, it can be used to create new clusters.
+   * Otherwise, cluster creation will fail. However, cluster upgrade operations
+   * may succeed, even if the version is not enabled.
+   * </pre>
+   *
+   * <code>bool enabled = 3 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The enabled.
+   */
+  @java.lang.Override
+  public boolean getEnabled() {
+    return enabled_;
+  }
+
+  public static final int END_OF_LIFE_FIELD_NUMBER = 4;
+  private boolean endOfLife_ = false;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. True if this cluster version belongs to a minor version that has
+   * reached its end of life and is no longer in scope to receive security and
+   * bug fixes.
+   * </pre>
+   *
+   * <code>bool end_of_life = 4 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The endOfLife.
+   */
+  @java.lang.Override
+  public boolean getEndOfLife() {
+    return endOfLife_;
+  }
+
+  public static final int END_OF_LIFE_DATE_FIELD_NUMBER = 5;
+  private com.google.type.Date endOfLifeDate_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return Whether the endOfLifeDate field is set.
+   */
+  @java.lang.Override
+  public boolean hasEndOfLifeDate() {
+    return endOfLifeDate_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The endOfLifeDate.
+   */
+  @java.lang.Override
+  public com.google.type.Date getEndOfLifeDate() {
+    return endOfLifeDate_ == null ? com.google.type.Date.getDefaultInstance() : endOfLifeDate_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   */
+  @java.lang.Override
+  public com.google.type.DateOrBuilder getEndOfLifeDateOrBuilder() {
+    return endOfLifeDate_ == null ? com.google.type.Date.getDefaultInstance() : endOfLifeDate_;
+  }
+
+  public static final int RELEASE_DATE_FIELD_NUMBER = 6;
+  private com.google.type.Date releaseDate_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return Whether the releaseDate field is set.
+   */
+  @java.lang.Override
+  public boolean hasReleaseDate() {
+    return releaseDate_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The releaseDate.
+   */
+  @java.lang.Override
+  public com.google.type.Date getReleaseDate() {
+    return releaseDate_ == null ? com.google.type.Date.getDefaultInstance() : releaseDate_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   */
+  @java.lang.Override
+  public com.google.type.DateOrBuilder getReleaseDateOrBuilder() {
+    return releaseDate_ == null ? com.google.type.Date.getDefaultInstance() : releaseDate_;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -130,6 +272,18 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(version_)) {
       com.google.protobuf.GeneratedMessageV3.writeString(output, 1, version_);
     }
+    if (enabled_ != false) {
+      output.writeBool(3, enabled_);
+    }
+    if (endOfLife_ != false) {
+      output.writeBool(4, endOfLife_);
+    }
+    if (endOfLifeDate_ != null) {
+      output.writeMessage(5, getEndOfLifeDate());
+    }
+    if (releaseDate_ != null) {
+      output.writeMessage(6, getReleaseDate());
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -142,6 +296,18 @@ public int getSerializedSize() {
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(version_)) {
       size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, version_);
     }
+    if (enabled_ != false) {
+      size += com.google.protobuf.CodedOutputStream.computeBoolSize(3, enabled_);
+    }
+    if (endOfLife_ != false) {
+      size += com.google.protobuf.CodedOutputStream.computeBoolSize(4, endOfLife_);
+    }
+    if (endOfLifeDate_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(5, getEndOfLifeDate());
+    }
+    if (releaseDate_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(6, getReleaseDate());
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -159,6 +325,16 @@ public boolean equals(final java.lang.Object obj) {
         (com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfo) obj;
 
     if (!getVersion().equals(other.getVersion())) return false;
+    if (getEnabled() != other.getEnabled()) return false;
+    if (getEndOfLife() != other.getEndOfLife()) return false;
+    if (hasEndOfLifeDate() != other.hasEndOfLifeDate()) return false;
+    if (hasEndOfLifeDate()) {
+      if (!getEndOfLifeDate().equals(other.getEndOfLifeDate())) return false;
+    }
+    if (hasReleaseDate() != other.hasReleaseDate()) return false;
+    if (hasReleaseDate()) {
+      if (!getReleaseDate().equals(other.getReleaseDate())) return false;
+    }
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -172,6 +348,18 @@ public int hashCode() {
     hash = (19 * hash) + getDescriptor().hashCode();
     hash = (37 * hash) + VERSION_FIELD_NUMBER;
     hash = (53 * hash) + getVersion().hashCode();
+    hash = (37 * hash) + ENABLED_FIELD_NUMBER;
+    hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getEnabled());
+    hash = (37 * hash) + END_OF_LIFE_FIELD_NUMBER;
+    hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getEndOfLife());
+    if (hasEndOfLifeDate()) {
+      hash = (37 * hash) + END_OF_LIFE_DATE_FIELD_NUMBER;
+      hash = (53 * hash) + getEndOfLifeDate().hashCode();
+    }
+    if (hasReleaseDate()) {
+      hash = (37 * hash) + RELEASE_DATE_FIELD_NUMBER;
+      hash = (53 * hash) + getReleaseDate().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -277,7 +465,7 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * Information about a supported Kubernetes version.
+   * Kubernetes version information of GKE cluster on Azure.
    * </pre>
    *
    * Protobuf type {@code google.cloud.gkemulticloud.v1.AzureK8sVersionInfo}
@@ -313,6 +501,18 @@ public Builder clear() {
       super.clear();
       bitField0_ = 0;
       version_ = "";
+      enabled_ = false;
+      endOfLife_ = false;
+      endOfLifeDate_ = null;
+      if (endOfLifeDateBuilder_ != null) {
+        endOfLifeDateBuilder_.dispose();
+        endOfLifeDateBuilder_ = null;
+      }
+      releaseDate_ = null;
+      if (releaseDateBuilder_ != null) {
+        releaseDateBuilder_.dispose();
+        releaseDateBuilder_ = null;
+      }
       return this;
     }
 
@@ -352,6 +552,20 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfo
       if (((from_bitField0_ & 0x00000001) != 0)) {
         result.version_ = version_;
       }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.enabled_ = enabled_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        result.endOfLife_ = endOfLife_;
+      }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.endOfLifeDate_ =
+            endOfLifeDateBuilder_ == null ? endOfLifeDate_ : endOfLifeDateBuilder_.build();
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
+        result.releaseDate_ =
+            releaseDateBuilder_ == null ? releaseDate_ : releaseDateBuilder_.build();
+      }
     }
 
     @java.lang.Override
@@ -405,6 +619,18 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfo o
         bitField0_ |= 0x00000001;
         onChanged();
       }
+      if (other.getEnabled() != false) {
+        setEnabled(other.getEnabled());
+      }
+      if (other.getEndOfLife() != false) {
+        setEndOfLife(other.getEndOfLife());
+      }
+      if (other.hasEndOfLifeDate()) {
+        mergeEndOfLifeDate(other.getEndOfLifeDate());
+      }
+      if (other.hasReleaseDate()) {
+        mergeReleaseDate(other.getReleaseDate());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -437,6 +663,30 @@ public Builder mergeFrom(
                 bitField0_ |= 0x00000001;
                 break;
               } // case 10
+            case 24:
+              {
+                enabled_ = input.readBool();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 24
+            case 32:
+              {
+                endOfLife_ = input.readBool();
+                bitField0_ |= 0x00000004;
+                break;
+              } // case 32
+            case 42:
+              {
+                input.readMessage(getEndOfLifeDateFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 42
+            case 50:
+              {
+                input.readMessage(getReleaseDateFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00000010;
+                break;
+              } // case 50
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -461,7 +711,7 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * A supported Kubernetes version (for example, `1.19.10-gke.1000`)
+     * Kubernetes version name (for example, `1.19.10-gke.1000`)
      * </pre>
      *
      * <code>string version = 1;</code>
@@ -483,7 +733,7 @@ public java.lang.String getVersion() {
      *
      *
      * <pre>
-     * A supported Kubernetes version (for example, `1.19.10-gke.1000`)
+     * Kubernetes version name (for example, `1.19.10-gke.1000`)
      * </pre>
      *
      * <code>string version = 1;</code>
@@ -505,7 +755,7 @@ public com.google.protobuf.ByteString getVersionBytes() {
      *
      *
      * <pre>
-     * A supported Kubernetes version (for example, `1.19.10-gke.1000`)
+     * Kubernetes version name (for example, `1.19.10-gke.1000`)
      * </pre>
      *
      * <code>string version = 1;</code>
@@ -526,7 +776,7 @@ public Builder setVersion(java.lang.String value) {
      *
      *
      * <pre>
-     * A supported Kubernetes version (for example, `1.19.10-gke.1000`)
+     * Kubernetes version name (for example, `1.19.10-gke.1000`)
      * </pre>
      *
      * <code>string version = 1;</code>
@@ -543,7 +793,7 @@ public Builder clearVersion() {
      *
      *
      * <pre>
-     * A supported Kubernetes version (for example, `1.19.10-gke.1000`)
+     * Kubernetes version name (for example, `1.19.10-gke.1000`)
      * </pre>
      *
      * <code>string version = 1;</code>
@@ -562,6 +812,509 @@ public Builder setVersionBytes(com.google.protobuf.ByteString value) {
       return this;
     }
 
+    private boolean enabled_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if the version is available for cluster creation. If a
+     * version is enabled for creation, it can be used to create new clusters.
+     * Otherwise, cluster creation will fail. However, cluster upgrade operations
+     * may succeed, even if the version is not enabled.
+     * </pre>
+     *
+     * <code>bool enabled = 3 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The enabled.
+     */
+    @java.lang.Override
+    public boolean getEnabled() {
+      return enabled_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if the version is available for cluster creation. If a
+     * version is enabled for creation, it can be used to create new clusters.
+     * Otherwise, cluster creation will fail. However, cluster upgrade operations
+     * may succeed, even if the version is not enabled.
+     * </pre>
+     *
+     * <code>bool enabled = 3 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The enabled to set.
+     * @return This builder for chaining.
+     */
+    public Builder setEnabled(boolean value) {
+
+      enabled_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if the version is available for cluster creation. If a
+     * version is enabled for creation, it can be used to create new clusters.
+     * Otherwise, cluster creation will fail. However, cluster upgrade operations
+     * may succeed, even if the version is not enabled.
+     * </pre>
+     *
+     * <code>bool enabled = 3 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearEnabled() {
+      bitField0_ = (bitField0_ & ~0x00000002);
+      enabled_ = false;
+      onChanged();
+      return this;
+    }
+
+    private boolean endOfLife_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if this cluster version belongs to a minor version that has
+     * reached its end of life and is no longer in scope to receive security and
+     * bug fixes.
+     * </pre>
+     *
+     * <code>bool end_of_life = 4 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The endOfLife.
+     */
+    @java.lang.Override
+    public boolean getEndOfLife() {
+      return endOfLife_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if this cluster version belongs to a minor version that has
+     * reached its end of life and is no longer in scope to receive security and
+     * bug fixes.
+     * </pre>
+     *
+     * <code>bool end_of_life = 4 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The endOfLife to set.
+     * @return This builder for chaining.
+     */
+    public Builder setEndOfLife(boolean value) {
+
+      endOfLife_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. True if this cluster version belongs to a minor version that has
+     * reached its end of life and is no longer in scope to receive security and
+     * bug fixes.
+     * </pre>
+     *
+     * <code>bool end_of_life = 4 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearEndOfLife() {
+      bitField0_ = (bitField0_ & ~0x00000004);
+      endOfLife_ = false;
+      onChanged();
+      return this;
+    }
+
+    private com.google.type.Date endOfLifeDate_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>
+        endOfLifeDateBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the endOfLifeDate field is set.
+     */
+    public boolean hasEndOfLifeDate() {
+      return ((bitField0_ & 0x00000008) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The endOfLifeDate.
+     */
+    public com.google.type.Date getEndOfLifeDate() {
+      if (endOfLifeDateBuilder_ == null) {
+        return endOfLifeDate_ == null ? com.google.type.Date.getDefaultInstance() : endOfLifeDate_;
+      } else {
+        return endOfLifeDateBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setEndOfLifeDate(com.google.type.Date value) {
+      if (endOfLifeDateBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        endOfLifeDate_ = value;
+      } else {
+        endOfLifeDateBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setEndOfLifeDate(com.google.type.Date.Builder builderForValue) {
+      if (endOfLifeDateBuilder_ == null) {
+        endOfLifeDate_ = builderForValue.build();
+      } else {
+        endOfLifeDateBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeEndOfLifeDate(com.google.type.Date value) {
+      if (endOfLifeDateBuilder_ == null) {
+        if (((bitField0_ & 0x00000008) != 0)
+            && endOfLifeDate_ != null
+            && endOfLifeDate_ != com.google.type.Date.getDefaultInstance()) {
+          getEndOfLifeDateBuilder().mergeFrom(value);
+        } else {
+          endOfLifeDate_ = value;
+        }
+      } else {
+        endOfLifeDateBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearEndOfLifeDate() {
+      bitField0_ = (bitField0_ & ~0x00000008);
+      endOfLifeDate_ = null;
+      if (endOfLifeDateBuilder_ != null) {
+        endOfLifeDateBuilder_.dispose();
+        endOfLifeDateBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.type.Date.Builder getEndOfLifeDateBuilder() {
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return getEndOfLifeDateFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.type.DateOrBuilder getEndOfLifeDateOrBuilder() {
+      if (endOfLifeDateBuilder_ != null) {
+        return endOfLifeDateBuilder_.getMessageOrBuilder();
+      } else {
+        return endOfLifeDate_ == null ? com.google.type.Date.getDefaultInstance() : endOfLifeDate_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The estimated date (in Pacific Time) when this cluster version
+     * will reach its end of life. Or if this version is no longer supported (the
+     * `end_of_life` field is true), this is the actual date (in Pacific time)
+     * when the version reached its end of life.
+     * </pre>
+     *
+     * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>
+        getEndOfLifeDateFieldBuilder() {
+      if (endOfLifeDateBuilder_ == null) {
+        endOfLifeDateBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>(
+                getEndOfLifeDate(), getParentForChildren(), isClean());
+        endOfLifeDate_ = null;
+      }
+      return endOfLifeDateBuilder_;
+    }
+
+    private com.google.type.Date releaseDate_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>
+        releaseDateBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return Whether the releaseDate field is set.
+     */
+    public boolean hasReleaseDate() {
+      return ((bitField0_ & 0x00000010) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The releaseDate.
+     */
+    public com.google.type.Date getReleaseDate() {
+      if (releaseDateBuilder_ == null) {
+        return releaseDate_ == null ? com.google.type.Date.getDefaultInstance() : releaseDate_;
+      } else {
+        return releaseDateBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public Builder setReleaseDate(com.google.type.Date value) {
+      if (releaseDateBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        releaseDate_ = value;
+      } else {
+        releaseDateBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public Builder setReleaseDate(com.google.type.Date.Builder builderForValue) {
+      if (releaseDateBuilder_ == null) {
+        releaseDate_ = builderForValue.build();
+      } else {
+        releaseDateBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public Builder mergeReleaseDate(com.google.type.Date value) {
+      if (releaseDateBuilder_ == null) {
+        if (((bitField0_ & 0x00000010) != 0)
+            && releaseDate_ != null
+            && releaseDate_ != com.google.type.Date.getDefaultInstance()) {
+          getReleaseDateBuilder().mergeFrom(value);
+        } else {
+          releaseDate_ = value;
+        }
+      } else {
+        releaseDateBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public Builder clearReleaseDate() {
+      bitField0_ = (bitField0_ & ~0x00000010);
+      releaseDate_ = null;
+      if (releaseDateBuilder_ != null) {
+        releaseDateBuilder_.dispose();
+        releaseDateBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public com.google.type.Date.Builder getReleaseDateBuilder() {
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return getReleaseDateFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    public com.google.type.DateOrBuilder getReleaseDateOrBuilder() {
+      if (releaseDateBuilder_ != null) {
+        return releaseDateBuilder_.getMessageOrBuilder();
+      } else {
+        return releaseDate_ == null ? com.google.type.Date.getDefaultInstance() : releaseDate_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The date (in Pacific Time) when the cluster version was released.
+     * </pre>
+     *
+     * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>
+        getReleaseDateFieldBuilder() {
+      if (releaseDateBuilder_ == null) {
+        releaseDateBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.type.Date, com.google.type.Date.Builder, com.google.type.DateOrBuilder>(
+                getReleaseDate(), getParentForChildren(), isClean());
+        releaseDate_ = null;
+      }
+      return releaseDateBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureK8sVersionInfoOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureK8sVersionInfoOrBuilder.java
index 7cc6577194c1..14ce5b5846a1 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureK8sVersionInfoOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureK8sVersionInfoOrBuilder.java
@@ -27,7 +27,7 @@ public interface AzureK8sVersionInfoOrBuilder
    *
    *
    * <pre>
-   * A supported Kubernetes version (for example, `1.19.10-gke.1000`)
+   * Kubernetes version name (for example, `1.19.10-gke.1000`)
    * </pre>
    *
    * <code>string version = 1;</code>
@@ -39,7 +39,7 @@ public interface AzureK8sVersionInfoOrBuilder
    *
    *
    * <pre>
-   * A supported Kubernetes version (for example, `1.19.10-gke.1000`)
+   * Kubernetes version name (for example, `1.19.10-gke.1000`)
    * </pre>
    *
    * <code>string version = 1;</code>
@@ -47,4 +47,114 @@ public interface AzureK8sVersionInfoOrBuilder
    * @return The bytes for version.
    */
   com.google.protobuf.ByteString getVersionBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. True if the version is available for cluster creation. If a
+   * version is enabled for creation, it can be used to create new clusters.
+   * Otherwise, cluster creation will fail. However, cluster upgrade operations
+   * may succeed, even if the version is not enabled.
+   * </pre>
+   *
+   * <code>bool enabled = 3 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The enabled.
+   */
+  boolean getEnabled();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. True if this cluster version belongs to a minor version that has
+   * reached its end of life and is no longer in scope to receive security and
+   * bug fixes.
+   * </pre>
+   *
+   * <code>bool end_of_life = 4 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The endOfLife.
+   */
+  boolean getEndOfLife();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return Whether the endOfLifeDate field is set.
+   */
+  boolean hasEndOfLifeDate();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The endOfLifeDate.
+   */
+  com.google.type.Date getEndOfLifeDate();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The estimated date (in Pacific Time) when this cluster version
+   * will reach its end of life. Or if this version is no longer supported (the
+   * `end_of_life` field is true), this is the actual date (in Pacific time)
+   * when the version reached its end of life.
+   * </pre>
+   *
+   * <code>.google.type.Date end_of_life_date = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   */
+  com.google.type.DateOrBuilder getEndOfLifeDateOrBuilder();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return Whether the releaseDate field is set.
+   */
+  boolean hasReleaseDate();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The releaseDate.
+   */
+  com.google.type.Date getReleaseDate();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The date (in Pacific Time) when the cluster version was released.
+   * </pre>
+   *
+   * <code>.google.type.Date release_date = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   */
+  com.google.type.DateOrBuilder getReleaseDateOrBuilder();
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeConfig.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeConfig.java
index f391dbe47d72..26440efca056 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeConfig.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeConfig.java
@@ -335,8 +335,7 @@ public java.lang.String getTagsOrThrow(java.lang.String key) {
    *
    * <pre>
    * Optional. The OS image type to use on node pool instances.
-   * Can have a value of `ubuntu`, or `windows` if the cluster enables
-   * the Windows node pool preview feature.
+   * Can be unspecified, or have a value of `ubuntu`.
    *
    * When unspecified, it defaults to `ubuntu`.
    * </pre>
@@ -362,8 +361,7 @@ public java.lang.String getImageType() {
    *
    * <pre>
    * Optional. The OS image type to use on node pool instances.
-   * Can have a value of `ubuntu`, or `windows` if the cluster enables
-   * the Windows node pool preview feature.
+   * Can be unspecified, or have a value of `ubuntu`.
    *
    * When unspecified, it defaults to `ubuntu`.
    * </pre>
@@ -1969,8 +1967,7 @@ public Builder putAllTags(java.util.Map<java.lang.String, java.lang.String> valu
      *
      * <pre>
      * Optional. The OS image type to use on node pool instances.
-     * Can have a value of `ubuntu`, or `windows` if the cluster enables
-     * the Windows node pool preview feature.
+     * Can be unspecified, or have a value of `ubuntu`.
      *
      * When unspecified, it defaults to `ubuntu`.
      * </pre>
@@ -1995,8 +1992,7 @@ public java.lang.String getImageType() {
      *
      * <pre>
      * Optional. The OS image type to use on node pool instances.
-     * Can have a value of `ubuntu`, or `windows` if the cluster enables
-     * the Windows node pool preview feature.
+     * Can be unspecified, or have a value of `ubuntu`.
      *
      * When unspecified, it defaults to `ubuntu`.
      * </pre>
@@ -2021,8 +2017,7 @@ public com.google.protobuf.ByteString getImageTypeBytes() {
      *
      * <pre>
      * Optional. The OS image type to use on node pool instances.
-     * Can have a value of `ubuntu`, or `windows` if the cluster enables
-     * the Windows node pool preview feature.
+     * Can be unspecified, or have a value of `ubuntu`.
      *
      * When unspecified, it defaults to `ubuntu`.
      * </pre>
@@ -2046,8 +2041,7 @@ public Builder setImageType(java.lang.String value) {
      *
      * <pre>
      * Optional. The OS image type to use on node pool instances.
-     * Can have a value of `ubuntu`, or `windows` if the cluster enables
-     * the Windows node pool preview feature.
+     * Can be unspecified, or have a value of `ubuntu`.
      *
      * When unspecified, it defaults to `ubuntu`.
      * </pre>
@@ -2067,8 +2061,7 @@ public Builder clearImageType() {
      *
      * <pre>
      * Optional. The OS image type to use on node pool instances.
-     * Can have a value of `ubuntu`, or `windows` if the cluster enables
-     * the Windows node pool preview feature.
+     * Can be unspecified, or have a value of `ubuntu`.
      *
      * When unspecified, it defaults to `ubuntu`.
      * </pre>
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeConfigOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeConfigOrBuilder.java
index dd58f03276b6..6b0df8282694 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeConfigOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeConfigOrBuilder.java
@@ -196,8 +196,7 @@ java.lang.String getTagsOrDefault(
    *
    * <pre>
    * Optional. The OS image type to use on node pool instances.
-   * Can have a value of `ubuntu`, or `windows` if the cluster enables
-   * the Windows node pool preview feature.
+   * Can be unspecified, or have a value of `ubuntu`.
    *
    * When unspecified, it defaults to `ubuntu`.
    * </pre>
@@ -212,8 +211,7 @@ java.lang.String getTagsOrDefault(
    *
    * <pre>
    * Optional. The OS image type to use on node pool instances.
-   * Can have a value of `ubuntu`, or `windows` if the cluster enables
-   * the Windows node pool preview feature.
+   * Can be unspecified, or have a value of `ubuntu`.
    *
    * When unspecified, it defaults to `ubuntu`.
    * </pre>
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeManagement.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeManagement.java
new file mode 100644
index 000000000000..343430e3fa1a
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeManagement.java
@@ -0,0 +1,549 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * AzureNodeManagement defines the set of node management features turned on for
+ * an Azure node pool.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.AzureNodeManagement}
+ */
+public final class AzureNodeManagement extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.AzureNodeManagement)
+    AzureNodeManagementOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use AzureNodeManagement.newBuilder() to construct.
+  private AzureNodeManagement(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private AzureNodeManagement() {}
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new AzureNodeManagement();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AzureNodeManagement_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AzureNodeManagement_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.AzureNodeManagement.class,
+            com.google.cloud.gkemulticloud.v1.AzureNodeManagement.Builder.class);
+  }
+
+  public static final int AUTO_REPAIR_FIELD_NUMBER = 1;
+  private boolean autoRepair_ = false;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Whether or not the nodes will be automatically repaired. When set
+   * to true, the nodes in this node pool will be monitored and if they fail
+   * health checks consistently over a period of time, an automatic repair
+   * action will be triggered to replace them with new nodes.
+   * </pre>
+   *
+   * <code>bool auto_repair = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The autoRepair.
+   */
+  @java.lang.Override
+  public boolean getAutoRepair() {
+    return autoRepair_;
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (autoRepair_ != false) {
+      output.writeBool(1, autoRepair_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (autoRepair_ != false) {
+      size += com.google.protobuf.CodedOutputStream.computeBoolSize(1, autoRepair_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.AzureNodeManagement)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.AzureNodeManagement other =
+        (com.google.cloud.gkemulticloud.v1.AzureNodeManagement) obj;
+
+    if (getAutoRepair() != other.getAutoRepair()) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + AUTO_REPAIR_FIELD_NUMBER;
+    hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getAutoRepair());
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.AzureNodeManagement prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * AzureNodeManagement defines the set of node management features turned on for
+   * an Azure node pool.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.AzureNodeManagement}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.AzureNodeManagement)
+      com.google.cloud.gkemulticloud.v1.AzureNodeManagementOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureNodeManagement_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureNodeManagement_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.AzureNodeManagement.class,
+              com.google.cloud.gkemulticloud.v1.AzureNodeManagement.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.AzureNodeManagement.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      autoRepair_ = false;
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureNodeManagement_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureNodeManagement getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureNodeManagement.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureNodeManagement build() {
+      com.google.cloud.gkemulticloud.v1.AzureNodeManagement result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureNodeManagement buildPartial() {
+      com.google.cloud.gkemulticloud.v1.AzureNodeManagement result =
+          new com.google.cloud.gkemulticloud.v1.AzureNodeManagement(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.AzureNodeManagement result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.autoRepair_ = autoRepair_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.AzureNodeManagement) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.AzureNodeManagement) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AzureNodeManagement other) {
+      if (other == com.google.cloud.gkemulticloud.v1.AzureNodeManagement.getDefaultInstance())
+        return this;
+      if (other.getAutoRepair() != false) {
+        setAutoRepair(other.getAutoRepair());
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 8:
+              {
+                autoRepair_ = input.readBool();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 8
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private boolean autoRepair_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Whether or not the nodes will be automatically repaired. When set
+     * to true, the nodes in this node pool will be monitored and if they fail
+     * health checks consistently over a period of time, an automatic repair
+     * action will be triggered to replace them with new nodes.
+     * </pre>
+     *
+     * <code>bool auto_repair = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The autoRepair.
+     */
+    @java.lang.Override
+    public boolean getAutoRepair() {
+      return autoRepair_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Whether or not the nodes will be automatically repaired. When set
+     * to true, the nodes in this node pool will be monitored and if they fail
+     * health checks consistently over a period of time, an automatic repair
+     * action will be triggered to replace them with new nodes.
+     * </pre>
+     *
+     * <code>bool auto_repair = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The autoRepair to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAutoRepair(boolean value) {
+
+      autoRepair_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Whether or not the nodes will be automatically repaired. When set
+     * to true, the nodes in this node pool will be monitored and if they fail
+     * health checks consistently over a period of time, an automatic repair
+     * action will be triggered to replace them with new nodes.
+     * </pre>
+     *
+     * <code>bool auto_repair = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAutoRepair() {
+      bitField0_ = (bitField0_ & ~0x00000001);
+      autoRepair_ = false;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.AzureNodeManagement)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.AzureNodeManagement)
+  private static final com.google.cloud.gkemulticloud.v1.AzureNodeManagement DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.AzureNodeManagement();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureNodeManagement getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<AzureNodeManagement> PARSER =
+      new com.google.protobuf.AbstractParser<AzureNodeManagement>() {
+        @java.lang.Override
+        public AzureNodeManagement parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<AzureNodeManagement> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<AzureNodeManagement> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AzureNodeManagement getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeManagementOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeManagementOrBuilder.java
new file mode 100644
index 000000000000..14d8e42520d3
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodeManagementOrBuilder.java
@@ -0,0 +1,41 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface AzureNodeManagementOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.AzureNodeManagement)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Whether or not the nodes will be automatically repaired. When set
+   * to true, the nodes in this node pool will be monitored and if they fail
+   * health checks consistently over a period of time, an automatic repair
+   * action will be triggered to replace them with new nodes.
+   * </pre>
+   *
+   * <code>bool auto_repair = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The autoRepair.
+   */
+  boolean getAutoRepair();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodePool.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodePool.java
index 78337d0a9fac..44cfa7ca1f3c 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodePool.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodePool.java
@@ -1217,6 +1217,62 @@ public com.google.cloud.gkemulticloud.v1.AzureNodePoolErrorOrBuilder getErrorsOr
     return errors_.get(index);
   }
 
+  public static final int MANAGEMENT_FIELD_NUMBER = 30;
+  private com.google.cloud.gkemulticloud.v1.AzureNodeManagement management_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the management field is set.
+   */
+  @java.lang.Override
+  public boolean hasManagement() {
+    return management_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The management.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AzureNodeManagement getManagement() {
+    return management_ == null
+        ? com.google.cloud.gkemulticloud.v1.AzureNodeManagement.getDefaultInstance()
+        : management_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AzureNodeManagementOrBuilder getManagementOrBuilder() {
+    return management_ == null
+        ? com.google.cloud.gkemulticloud.v1.AzureNodeManagement.getDefaultInstance()
+        : management_;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -1276,6 +1332,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     for (int i = 0; i < errors_.size(); i++) {
       output.writeMessage(29, errors_.get(i));
     }
+    if (management_ != null) {
+      output.writeMessage(30, getManagement());
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -1338,6 +1397,9 @@ public int getSerializedSize() {
     for (int i = 0; i < errors_.size(); i++) {
       size += com.google.protobuf.CodedOutputStream.computeMessageSize(29, errors_.get(i));
     }
+    if (management_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(30, getManagement());
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -1384,6 +1446,10 @@ public boolean equals(final java.lang.Object obj) {
     }
     if (!getAzureAvailabilityZone().equals(other.getAzureAvailabilityZone())) return false;
     if (!getErrorsList().equals(other.getErrorsList())) return false;
+    if (hasManagement() != other.hasManagement()) return false;
+    if (hasManagement()) {
+      if (!getManagement().equals(other.getManagement())) return false;
+    }
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -1439,6 +1505,10 @@ public int hashCode() {
       hash = (37 * hash) + ERRORS_FIELD_NUMBER;
       hash = (53 * hash) + getErrorsList().hashCode();
     }
+    if (hasManagement()) {
+      hash = (37 * hash) + MANAGEMENT_FIELD_NUMBER;
+      hash = (53 * hash) + getManagement().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -1639,6 +1709,11 @@ public Builder clear() {
         errorsBuilder_.clear();
       }
       bitField0_ = (bitField0_ & ~0x00004000);
+      management_ = null;
+      if (managementBuilder_ != null) {
+        managementBuilder_.dispose();
+        managementBuilder_ = null;
+      }
       return this;
     }
 
@@ -1736,6 +1811,9 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.AzureNodePool resul
       if (((from_bitField0_ & 0x00002000) != 0)) {
         result.azureAvailabilityZone_ = azureAvailabilityZone_;
       }
+      if (((from_bitField0_ & 0x00008000) != 0)) {
+        result.management_ = managementBuilder_ == null ? management_ : managementBuilder_.build();
+      }
     }
 
     @java.lang.Override
@@ -1864,6 +1942,9 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AzureNodePool other)
           }
         }
       }
+      if (other.hasManagement()) {
+        mergeManagement(other.getManagement());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -1995,6 +2076,12 @@ public Builder mergeFrom(
                 }
                 break;
               } // case 234
+            case 242:
+              {
+                input.readMessage(getManagementFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00008000;
+                break;
+              } // case 242
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -4527,6 +4614,209 @@ public com.google.cloud.gkemulticloud.v1.AzureNodePoolError.Builder addErrorsBui
       return errorsBuilder_;
     }
 
+    private com.google.cloud.gkemulticloud.v1.AzureNodeManagement management_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AzureNodeManagement,
+            com.google.cloud.gkemulticloud.v1.AzureNodeManagement.Builder,
+            com.google.cloud.gkemulticloud.v1.AzureNodeManagementOrBuilder>
+        managementBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the management field is set.
+     */
+    public boolean hasManagement() {
+      return ((bitField0_ & 0x00008000) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The management.
+     */
+    public com.google.cloud.gkemulticloud.v1.AzureNodeManagement getManagement() {
+      if (managementBuilder_ == null) {
+        return management_ == null
+            ? com.google.cloud.gkemulticloud.v1.AzureNodeManagement.getDefaultInstance()
+            : management_;
+      } else {
+        return managementBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setManagement(com.google.cloud.gkemulticloud.v1.AzureNodeManagement value) {
+      if (managementBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        management_ = value;
+      } else {
+        managementBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00008000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setManagement(
+        com.google.cloud.gkemulticloud.v1.AzureNodeManagement.Builder builderForValue) {
+      if (managementBuilder_ == null) {
+        management_ = builderForValue.build();
+      } else {
+        managementBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00008000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeManagement(com.google.cloud.gkemulticloud.v1.AzureNodeManagement value) {
+      if (managementBuilder_ == null) {
+        if (((bitField0_ & 0x00008000) != 0)
+            && management_ != null
+            && management_
+                != com.google.cloud.gkemulticloud.v1.AzureNodeManagement.getDefaultInstance()) {
+          getManagementBuilder().mergeFrom(value);
+        } else {
+          management_ = value;
+        }
+      } else {
+        managementBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00008000;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearManagement() {
+      bitField0_ = (bitField0_ & ~0x00008000);
+      management_ = null;
+      if (managementBuilder_ != null) {
+        managementBuilder_.dispose();
+        managementBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AzureNodeManagement.Builder getManagementBuilder() {
+      bitField0_ |= 0x00008000;
+      onChanged();
+      return getManagementFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AzureNodeManagementOrBuilder getManagementOrBuilder() {
+      if (managementBuilder_ != null) {
+        return managementBuilder_.getMessageOrBuilder();
+      } else {
+        return management_ == null
+            ? com.google.cloud.gkemulticloud.v1.AzureNodeManagement.getDefaultInstance()
+            : management_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The Management configuration for this node pool.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AzureNodeManagement,
+            com.google.cloud.gkemulticloud.v1.AzureNodeManagement.Builder,
+            com.google.cloud.gkemulticloud.v1.AzureNodeManagementOrBuilder>
+        getManagementFieldBuilder() {
+      if (managementBuilder_ == null) {
+        managementBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.AzureNodeManagement,
+                com.google.cloud.gkemulticloud.v1.AzureNodeManagement.Builder,
+                com.google.cloud.gkemulticloud.v1.AzureNodeManagementOrBuilder>(
+                getManagement(), getParentForChildren(), isClean());
+        management_ = null;
+      }
+      return managementBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodePoolOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodePoolOrBuilder.java
index b6c68b850a01..59db5530ef45 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodePoolOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureNodePoolOrBuilder.java
@@ -610,4 +610,45 @@ java.lang.String getAnnotationsOrDefault(
    * </code>
    */
   com.google.cloud.gkemulticloud.v1.AzureNodePoolErrorOrBuilder getErrorsOrBuilder(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the management field is set.
+   */
+  boolean hasManagement();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The management.
+   */
+  com.google.cloud.gkemulticloud.v1.AzureNodeManagement getManagement();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The Management configuration for this node pool.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AzureNodeManagement management = 30 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AzureNodeManagementOrBuilder getManagementOrBuilder();
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureOpenIdConfig.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureOpenIdConfig.java
new file mode 100644
index 000000000000..a5f331adbc53
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureOpenIdConfig.java
@@ -0,0 +1,2203 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * AzureOpenIdConfig is an OIDC discovery document for the cluster.
+ * See the OpenID Connect Discovery 1.0 specification for details.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.AzureOpenIdConfig}
+ */
+public final class AzureOpenIdConfig extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.AzureOpenIdConfig)
+    AzureOpenIdConfigOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use AzureOpenIdConfig.newBuilder() to construct.
+  private AzureOpenIdConfig(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private AzureOpenIdConfig() {
+    issuer_ = "";
+    jwksUri_ = "";
+    responseTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+    subjectTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+    idTokenSigningAlgValuesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+    claimsSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+    grantTypes_ = com.google.protobuf.LazyStringArrayList.emptyList();
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new AzureOpenIdConfig();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AzureOpenIdConfig_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_AzureOpenIdConfig_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig.class,
+            com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig.Builder.class);
+  }
+
+  public static final int ISSUER_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object issuer_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * OIDC Issuer.
+   * </pre>
+   *
+   * <code>string issuer = 1;</code>
+   *
+   * @return The issuer.
+   */
+  @java.lang.Override
+  public java.lang.String getIssuer() {
+    java.lang.Object ref = issuer_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      issuer_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * OIDC Issuer.
+   * </pre>
+   *
+   * <code>string issuer = 1;</code>
+   *
+   * @return The bytes for issuer.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getIssuerBytes() {
+    java.lang.Object ref = issuer_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      issuer_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int JWKS_URI_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object jwksUri_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * JSON Web Key uri.
+   * </pre>
+   *
+   * <code>string jwks_uri = 2;</code>
+   *
+   * @return The jwksUri.
+   */
+  @java.lang.Override
+  public java.lang.String getJwksUri() {
+    java.lang.Object ref = jwksUri_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      jwksUri_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * JSON Web Key uri.
+   * </pre>
+   *
+   * <code>string jwks_uri = 2;</code>
+   *
+   * @return The bytes for jwksUri.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getJwksUriBytes() {
+    java.lang.Object ref = jwksUri_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      jwksUri_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int RESPONSE_TYPES_SUPPORTED_FIELD_NUMBER = 3;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList responseTypesSupported_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @return A list containing the responseTypesSupported.
+   */
+  public com.google.protobuf.ProtocolStringList getResponseTypesSupportedList() {
+    return responseTypesSupported_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @return The count of responseTypesSupported.
+   */
+  public int getResponseTypesSupportedCount() {
+    return responseTypesSupported_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The responseTypesSupported at the given index.
+   */
+  public java.lang.String getResponseTypesSupported(int index) {
+    return responseTypesSupported_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the responseTypesSupported at the given index.
+   */
+  public com.google.protobuf.ByteString getResponseTypesSupportedBytes(int index) {
+    return responseTypesSupported_.getByteString(index);
+  }
+
+  public static final int SUBJECT_TYPES_SUPPORTED_FIELD_NUMBER = 4;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList subjectTypesSupported_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @return A list containing the subjectTypesSupported.
+   */
+  public com.google.protobuf.ProtocolStringList getSubjectTypesSupportedList() {
+    return subjectTypesSupported_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @return The count of subjectTypesSupported.
+   */
+  public int getSubjectTypesSupportedCount() {
+    return subjectTypesSupported_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The subjectTypesSupported at the given index.
+   */
+  public java.lang.String getSubjectTypesSupported(int index) {
+    return subjectTypesSupported_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the subjectTypesSupported at the given index.
+   */
+  public com.google.protobuf.ByteString getSubjectTypesSupportedBytes(int index) {
+    return subjectTypesSupported_.getByteString(index);
+  }
+
+  public static final int ID_TOKEN_SIGNING_ALG_VALUES_SUPPORTED_FIELD_NUMBER = 5;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList idTokenSigningAlgValuesSupported_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @return A list containing the idTokenSigningAlgValuesSupported.
+   */
+  public com.google.protobuf.ProtocolStringList getIdTokenSigningAlgValuesSupportedList() {
+    return idTokenSigningAlgValuesSupported_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @return The count of idTokenSigningAlgValuesSupported.
+   */
+  public int getIdTokenSigningAlgValuesSupportedCount() {
+    return idTokenSigningAlgValuesSupported_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The idTokenSigningAlgValuesSupported at the given index.
+   */
+  public java.lang.String getIdTokenSigningAlgValuesSupported(int index) {
+    return idTokenSigningAlgValuesSupported_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the idTokenSigningAlgValuesSupported at the given index.
+   */
+  public com.google.protobuf.ByteString getIdTokenSigningAlgValuesSupportedBytes(int index) {
+    return idTokenSigningAlgValuesSupported_.getByteString(index);
+  }
+
+  public static final int CLAIMS_SUPPORTED_FIELD_NUMBER = 6;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList claimsSupported_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @return A list containing the claimsSupported.
+   */
+  public com.google.protobuf.ProtocolStringList getClaimsSupportedList() {
+    return claimsSupported_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @return The count of claimsSupported.
+   */
+  public int getClaimsSupportedCount() {
+    return claimsSupported_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The claimsSupported at the given index.
+   */
+  public java.lang.String getClaimsSupported(int index) {
+    return claimsSupported_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the claimsSupported at the given index.
+   */
+  public com.google.protobuf.ByteString getClaimsSupportedBytes(int index) {
+    return claimsSupported_.getByteString(index);
+  }
+
+  public static final int GRANT_TYPES_FIELD_NUMBER = 7;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList grantTypes_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @return A list containing the grantTypes.
+   */
+  public com.google.protobuf.ProtocolStringList getGrantTypesList() {
+    return grantTypes_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @return The count of grantTypes.
+   */
+  public int getGrantTypesCount() {
+    return grantTypes_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The grantTypes at the given index.
+   */
+  public java.lang.String getGrantTypes(int index) {
+    return grantTypes_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the grantTypes at the given index.
+   */
+  public com.google.protobuf.ByteString getGrantTypesBytes(int index) {
+    return grantTypes_.getByteString(index);
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(issuer_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, issuer_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(jwksUri_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 2, jwksUri_);
+    }
+    for (int i = 0; i < responseTypesSupported_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(
+          output, 3, responseTypesSupported_.getRaw(i));
+    }
+    for (int i = 0; i < subjectTypesSupported_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(
+          output, 4, subjectTypesSupported_.getRaw(i));
+    }
+    for (int i = 0; i < idTokenSigningAlgValuesSupported_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(
+          output, 5, idTokenSigningAlgValuesSupported_.getRaw(i));
+    }
+    for (int i = 0; i < claimsSupported_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 6, claimsSupported_.getRaw(i));
+    }
+    for (int i = 0; i < grantTypes_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 7, grantTypes_.getRaw(i));
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(issuer_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, issuer_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(jwksUri_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(2, jwksUri_);
+    }
+    {
+      int dataSize = 0;
+      for (int i = 0; i < responseTypesSupported_.size(); i++) {
+        dataSize += computeStringSizeNoTag(responseTypesSupported_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getResponseTypesSupportedList().size();
+    }
+    {
+      int dataSize = 0;
+      for (int i = 0; i < subjectTypesSupported_.size(); i++) {
+        dataSize += computeStringSizeNoTag(subjectTypesSupported_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getSubjectTypesSupportedList().size();
+    }
+    {
+      int dataSize = 0;
+      for (int i = 0; i < idTokenSigningAlgValuesSupported_.size(); i++) {
+        dataSize += computeStringSizeNoTag(idTokenSigningAlgValuesSupported_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getIdTokenSigningAlgValuesSupportedList().size();
+    }
+    {
+      int dataSize = 0;
+      for (int i = 0; i < claimsSupported_.size(); i++) {
+        dataSize += computeStringSizeNoTag(claimsSupported_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getClaimsSupportedList().size();
+    }
+    {
+      int dataSize = 0;
+      for (int i = 0; i < grantTypes_.size(); i++) {
+        dataSize += computeStringSizeNoTag(grantTypes_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getGrantTypesList().size();
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig other =
+        (com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig) obj;
+
+    if (!getIssuer().equals(other.getIssuer())) return false;
+    if (!getJwksUri().equals(other.getJwksUri())) return false;
+    if (!getResponseTypesSupportedList().equals(other.getResponseTypesSupportedList()))
+      return false;
+    if (!getSubjectTypesSupportedList().equals(other.getSubjectTypesSupportedList())) return false;
+    if (!getIdTokenSigningAlgValuesSupportedList()
+        .equals(other.getIdTokenSigningAlgValuesSupportedList())) return false;
+    if (!getClaimsSupportedList().equals(other.getClaimsSupportedList())) return false;
+    if (!getGrantTypesList().equals(other.getGrantTypesList())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + ISSUER_FIELD_NUMBER;
+    hash = (53 * hash) + getIssuer().hashCode();
+    hash = (37 * hash) + JWKS_URI_FIELD_NUMBER;
+    hash = (53 * hash) + getJwksUri().hashCode();
+    if (getResponseTypesSupportedCount() > 0) {
+      hash = (37 * hash) + RESPONSE_TYPES_SUPPORTED_FIELD_NUMBER;
+      hash = (53 * hash) + getResponseTypesSupportedList().hashCode();
+    }
+    if (getSubjectTypesSupportedCount() > 0) {
+      hash = (37 * hash) + SUBJECT_TYPES_SUPPORTED_FIELD_NUMBER;
+      hash = (53 * hash) + getSubjectTypesSupportedList().hashCode();
+    }
+    if (getIdTokenSigningAlgValuesSupportedCount() > 0) {
+      hash = (37 * hash) + ID_TOKEN_SIGNING_ALG_VALUES_SUPPORTED_FIELD_NUMBER;
+      hash = (53 * hash) + getIdTokenSigningAlgValuesSupportedList().hashCode();
+    }
+    if (getClaimsSupportedCount() > 0) {
+      hash = (37 * hash) + CLAIMS_SUPPORTED_FIELD_NUMBER;
+      hash = (53 * hash) + getClaimsSupportedList().hashCode();
+    }
+    if (getGrantTypesCount() > 0) {
+      hash = (37 * hash) + GRANT_TYPES_FIELD_NUMBER;
+      hash = (53 * hash) + getGrantTypesList().hashCode();
+    }
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * AzureOpenIdConfig is an OIDC discovery document for the cluster.
+   * See the OpenID Connect Discovery 1.0 specification for details.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.AzureOpenIdConfig}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.AzureOpenIdConfig)
+      com.google.cloud.gkemulticloud.v1.AzureOpenIdConfigOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureOpenIdConfig_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureOpenIdConfig_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig.class,
+              com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      issuer_ = "";
+      jwksUri_ = "";
+      responseTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      subjectTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      idTokenSigningAlgValuesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      claimsSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      grantTypes_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_AzureOpenIdConfig_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig build() {
+      com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig buildPartial() {
+      com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig result =
+          new com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.issuer_ = issuer_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.jwksUri_ = jwksUri_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        responseTypesSupported_.makeImmutable();
+        result.responseTypesSupported_ = responseTypesSupported_;
+      }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        subjectTypesSupported_.makeImmutable();
+        result.subjectTypesSupported_ = subjectTypesSupported_;
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
+        idTokenSigningAlgValuesSupported_.makeImmutable();
+        result.idTokenSigningAlgValuesSupported_ = idTokenSigningAlgValuesSupported_;
+      }
+      if (((from_bitField0_ & 0x00000020) != 0)) {
+        claimsSupported_.makeImmutable();
+        result.claimsSupported_ = claimsSupported_;
+      }
+      if (((from_bitField0_ & 0x00000040) != 0)) {
+        grantTypes_.makeImmutable();
+        result.grantTypes_ = grantTypes_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig other) {
+      if (other == com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig.getDefaultInstance())
+        return this;
+      if (!other.getIssuer().isEmpty()) {
+        issuer_ = other.issuer_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (!other.getJwksUri().isEmpty()) {
+        jwksUri_ = other.jwksUri_;
+        bitField0_ |= 0x00000002;
+        onChanged();
+      }
+      if (!other.responseTypesSupported_.isEmpty()) {
+        if (responseTypesSupported_.isEmpty()) {
+          responseTypesSupported_ = other.responseTypesSupported_;
+          bitField0_ |= 0x00000004;
+        } else {
+          ensureResponseTypesSupportedIsMutable();
+          responseTypesSupported_.addAll(other.responseTypesSupported_);
+        }
+        onChanged();
+      }
+      if (!other.subjectTypesSupported_.isEmpty()) {
+        if (subjectTypesSupported_.isEmpty()) {
+          subjectTypesSupported_ = other.subjectTypesSupported_;
+          bitField0_ |= 0x00000008;
+        } else {
+          ensureSubjectTypesSupportedIsMutable();
+          subjectTypesSupported_.addAll(other.subjectTypesSupported_);
+        }
+        onChanged();
+      }
+      if (!other.idTokenSigningAlgValuesSupported_.isEmpty()) {
+        if (idTokenSigningAlgValuesSupported_.isEmpty()) {
+          idTokenSigningAlgValuesSupported_ = other.idTokenSigningAlgValuesSupported_;
+          bitField0_ |= 0x00000010;
+        } else {
+          ensureIdTokenSigningAlgValuesSupportedIsMutable();
+          idTokenSigningAlgValuesSupported_.addAll(other.idTokenSigningAlgValuesSupported_);
+        }
+        onChanged();
+      }
+      if (!other.claimsSupported_.isEmpty()) {
+        if (claimsSupported_.isEmpty()) {
+          claimsSupported_ = other.claimsSupported_;
+          bitField0_ |= 0x00000020;
+        } else {
+          ensureClaimsSupportedIsMutable();
+          claimsSupported_.addAll(other.claimsSupported_);
+        }
+        onChanged();
+      }
+      if (!other.grantTypes_.isEmpty()) {
+        if (grantTypes_.isEmpty()) {
+          grantTypes_ = other.grantTypes_;
+          bitField0_ |= 0x00000040;
+        } else {
+          ensureGrantTypesIsMutable();
+          grantTypes_.addAll(other.grantTypes_);
+        }
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                issuer_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 18:
+              {
+                jwksUri_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 18
+            case 26:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureResponseTypesSupportedIsMutable();
+                responseTypesSupported_.add(s);
+                break;
+              } // case 26
+            case 34:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureSubjectTypesSupportedIsMutable();
+                subjectTypesSupported_.add(s);
+                break;
+              } // case 34
+            case 42:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureIdTokenSigningAlgValuesSupportedIsMutable();
+                idTokenSigningAlgValuesSupported_.add(s);
+                break;
+              } // case 42
+            case 50:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureClaimsSupportedIsMutable();
+                claimsSupported_.add(s);
+                break;
+              } // case 50
+            case 58:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureGrantTypesIsMutable();
+                grantTypes_.add(s);
+                break;
+              } // case 58
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object issuer_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * OIDC Issuer.
+     * </pre>
+     *
+     * <code>string issuer = 1;</code>
+     *
+     * @return The issuer.
+     */
+    public java.lang.String getIssuer() {
+      java.lang.Object ref = issuer_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        issuer_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * OIDC Issuer.
+     * </pre>
+     *
+     * <code>string issuer = 1;</code>
+     *
+     * @return The bytes for issuer.
+     */
+    public com.google.protobuf.ByteString getIssuerBytes() {
+      java.lang.Object ref = issuer_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        issuer_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * OIDC Issuer.
+     * </pre>
+     *
+     * <code>string issuer = 1;</code>
+     *
+     * @param value The issuer to set.
+     * @return This builder for chaining.
+     */
+    public Builder setIssuer(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      issuer_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * OIDC Issuer.
+     * </pre>
+     *
+     * <code>string issuer = 1;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearIssuer() {
+      issuer_ = getDefaultInstance().getIssuer();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * OIDC Issuer.
+     * </pre>
+     *
+     * <code>string issuer = 1;</code>
+     *
+     * @param value The bytes for issuer to set.
+     * @return This builder for chaining.
+     */
+    public Builder setIssuerBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      issuer_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object jwksUri_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * JSON Web Key uri.
+     * </pre>
+     *
+     * <code>string jwks_uri = 2;</code>
+     *
+     * @return The jwksUri.
+     */
+    public java.lang.String getJwksUri() {
+      java.lang.Object ref = jwksUri_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        jwksUri_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * JSON Web Key uri.
+     * </pre>
+     *
+     * <code>string jwks_uri = 2;</code>
+     *
+     * @return The bytes for jwksUri.
+     */
+    public com.google.protobuf.ByteString getJwksUriBytes() {
+      java.lang.Object ref = jwksUri_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        jwksUri_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * JSON Web Key uri.
+     * </pre>
+     *
+     * <code>string jwks_uri = 2;</code>
+     *
+     * @param value The jwksUri to set.
+     * @return This builder for chaining.
+     */
+    public Builder setJwksUri(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      jwksUri_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * JSON Web Key uri.
+     * </pre>
+     *
+     * <code>string jwks_uri = 2;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearJwksUri() {
+      jwksUri_ = getDefaultInstance().getJwksUri();
+      bitField0_ = (bitField0_ & ~0x00000002);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * JSON Web Key uri.
+     * </pre>
+     *
+     * <code>string jwks_uri = 2;</code>
+     *
+     * @param value The bytes for jwksUri to set.
+     * @return This builder for chaining.
+     */
+    public Builder setJwksUriBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      jwksUri_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+
+    private com.google.protobuf.LazyStringArrayList responseTypesSupported_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureResponseTypesSupportedIsMutable() {
+      if (!responseTypesSupported_.isModifiable()) {
+        responseTypesSupported_ =
+            new com.google.protobuf.LazyStringArrayList(responseTypesSupported_);
+      }
+      bitField0_ |= 0x00000004;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @return A list containing the responseTypesSupported.
+     */
+    public com.google.protobuf.ProtocolStringList getResponseTypesSupportedList() {
+      responseTypesSupported_.makeImmutable();
+      return responseTypesSupported_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @return The count of responseTypesSupported.
+     */
+    public int getResponseTypesSupportedCount() {
+      return responseTypesSupported_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param index The index of the element to return.
+     * @return The responseTypesSupported at the given index.
+     */
+    public java.lang.String getResponseTypesSupported(int index) {
+      return responseTypesSupported_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the responseTypesSupported at the given index.
+     */
+    public com.google.protobuf.ByteString getResponseTypesSupportedBytes(int index) {
+      return responseTypesSupported_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The responseTypesSupported to set.
+     * @return This builder for chaining.
+     */
+    public Builder setResponseTypesSupported(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureResponseTypesSupportedIsMutable();
+      responseTypesSupported_.set(index, value);
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param value The responseTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addResponseTypesSupported(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureResponseTypesSupportedIsMutable();
+      responseTypesSupported_.add(value);
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param values The responseTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllResponseTypesSupported(java.lang.Iterable<java.lang.String> values) {
+      ensureResponseTypesSupportedIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, responseTypesSupported_);
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearResponseTypesSupported() {
+      responseTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000004);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported response types.
+     * </pre>
+     *
+     * <code>repeated string response_types_supported = 3;</code>
+     *
+     * @param value The bytes of the responseTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addResponseTypesSupportedBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureResponseTypesSupportedIsMutable();
+      responseTypesSupported_.add(value);
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    private com.google.protobuf.LazyStringArrayList subjectTypesSupported_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureSubjectTypesSupportedIsMutable() {
+      if (!subjectTypesSupported_.isModifiable()) {
+        subjectTypesSupported_ =
+            new com.google.protobuf.LazyStringArrayList(subjectTypesSupported_);
+      }
+      bitField0_ |= 0x00000008;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @return A list containing the subjectTypesSupported.
+     */
+    public com.google.protobuf.ProtocolStringList getSubjectTypesSupportedList() {
+      subjectTypesSupported_.makeImmutable();
+      return subjectTypesSupported_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @return The count of subjectTypesSupported.
+     */
+    public int getSubjectTypesSupportedCount() {
+      return subjectTypesSupported_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param index The index of the element to return.
+     * @return The subjectTypesSupported at the given index.
+     */
+    public java.lang.String getSubjectTypesSupported(int index) {
+      return subjectTypesSupported_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the subjectTypesSupported at the given index.
+     */
+    public com.google.protobuf.ByteString getSubjectTypesSupportedBytes(int index) {
+      return subjectTypesSupported_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The subjectTypesSupported to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTypesSupported(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureSubjectTypesSupportedIsMutable();
+      subjectTypesSupported_.set(index, value);
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param value The subjectTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addSubjectTypesSupported(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureSubjectTypesSupportedIsMutable();
+      subjectTypesSupported_.add(value);
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param values The subjectTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllSubjectTypesSupported(java.lang.Iterable<java.lang.String> values) {
+      ensureSubjectTypesSupportedIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, subjectTypesSupported_);
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearSubjectTypesSupported() {
+      subjectTypesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000008);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported subject types.
+     * </pre>
+     *
+     * <code>repeated string subject_types_supported = 4;</code>
+     *
+     * @param value The bytes of the subjectTypesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addSubjectTypesSupportedBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureSubjectTypesSupportedIsMutable();
+      subjectTypesSupported_.add(value);
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+
+    private com.google.protobuf.LazyStringArrayList idTokenSigningAlgValuesSupported_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureIdTokenSigningAlgValuesSupportedIsMutable() {
+      if (!idTokenSigningAlgValuesSupported_.isModifiable()) {
+        idTokenSigningAlgValuesSupported_ =
+            new com.google.protobuf.LazyStringArrayList(idTokenSigningAlgValuesSupported_);
+      }
+      bitField0_ |= 0x00000010;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @return A list containing the idTokenSigningAlgValuesSupported.
+     */
+    public com.google.protobuf.ProtocolStringList getIdTokenSigningAlgValuesSupportedList() {
+      idTokenSigningAlgValuesSupported_.makeImmutable();
+      return idTokenSigningAlgValuesSupported_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @return The count of idTokenSigningAlgValuesSupported.
+     */
+    public int getIdTokenSigningAlgValuesSupportedCount() {
+      return idTokenSigningAlgValuesSupported_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param index The index of the element to return.
+     * @return The idTokenSigningAlgValuesSupported at the given index.
+     */
+    public java.lang.String getIdTokenSigningAlgValuesSupported(int index) {
+      return idTokenSigningAlgValuesSupported_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the idTokenSigningAlgValuesSupported at the given index.
+     */
+    public com.google.protobuf.ByteString getIdTokenSigningAlgValuesSupportedBytes(int index) {
+      return idTokenSigningAlgValuesSupported_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The idTokenSigningAlgValuesSupported to set.
+     * @return This builder for chaining.
+     */
+    public Builder setIdTokenSigningAlgValuesSupported(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureIdTokenSigningAlgValuesSupportedIsMutable();
+      idTokenSigningAlgValuesSupported_.set(index, value);
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param value The idTokenSigningAlgValuesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addIdTokenSigningAlgValuesSupported(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureIdTokenSigningAlgValuesSupportedIsMutable();
+      idTokenSigningAlgValuesSupported_.add(value);
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param values The idTokenSigningAlgValuesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllIdTokenSigningAlgValuesSupported(
+        java.lang.Iterable<java.lang.String> values) {
+      ensureIdTokenSigningAlgValuesSupportedIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(
+          values, idTokenSigningAlgValuesSupported_);
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearIdTokenSigningAlgValuesSupported() {
+      idTokenSigningAlgValuesSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000010);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * supported ID Token signing Algorithms.
+     * </pre>
+     *
+     * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+     *
+     * @param value The bytes of the idTokenSigningAlgValuesSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addIdTokenSigningAlgValuesSupportedBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureIdTokenSigningAlgValuesSupportedIsMutable();
+      idTokenSigningAlgValuesSupported_.add(value);
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+
+    private com.google.protobuf.LazyStringArrayList claimsSupported_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureClaimsSupportedIsMutable() {
+      if (!claimsSupported_.isModifiable()) {
+        claimsSupported_ = new com.google.protobuf.LazyStringArrayList(claimsSupported_);
+      }
+      bitField0_ |= 0x00000020;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @return A list containing the claimsSupported.
+     */
+    public com.google.protobuf.ProtocolStringList getClaimsSupportedList() {
+      claimsSupported_.makeImmutable();
+      return claimsSupported_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @return The count of claimsSupported.
+     */
+    public int getClaimsSupportedCount() {
+      return claimsSupported_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param index The index of the element to return.
+     * @return The claimsSupported at the given index.
+     */
+    public java.lang.String getClaimsSupported(int index) {
+      return claimsSupported_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the claimsSupported at the given index.
+     */
+    public com.google.protobuf.ByteString getClaimsSupportedBytes(int index) {
+      return claimsSupported_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The claimsSupported to set.
+     * @return This builder for chaining.
+     */
+    public Builder setClaimsSupported(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureClaimsSupportedIsMutable();
+      claimsSupported_.set(index, value);
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param value The claimsSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addClaimsSupported(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureClaimsSupportedIsMutable();
+      claimsSupported_.add(value);
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param values The claimsSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllClaimsSupported(java.lang.Iterable<java.lang.String> values) {
+      ensureClaimsSupportedIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, claimsSupported_);
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearClaimsSupported() {
+      claimsSupported_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000020);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported claims.
+     * </pre>
+     *
+     * <code>repeated string claims_supported = 6;</code>
+     *
+     * @param value The bytes of the claimsSupported to add.
+     * @return This builder for chaining.
+     */
+    public Builder addClaimsSupportedBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureClaimsSupportedIsMutable();
+      claimsSupported_.add(value);
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+
+    private com.google.protobuf.LazyStringArrayList grantTypes_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureGrantTypesIsMutable() {
+      if (!grantTypes_.isModifiable()) {
+        grantTypes_ = new com.google.protobuf.LazyStringArrayList(grantTypes_);
+      }
+      bitField0_ |= 0x00000040;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @return A list containing the grantTypes.
+     */
+    public com.google.protobuf.ProtocolStringList getGrantTypesList() {
+      grantTypes_.makeImmutable();
+      return grantTypes_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @return The count of grantTypes.
+     */
+    public int getGrantTypesCount() {
+      return grantTypes_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param index The index of the element to return.
+     * @return The grantTypes at the given index.
+     */
+    public java.lang.String getGrantTypes(int index) {
+      return grantTypes_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the grantTypes at the given index.
+     */
+    public com.google.protobuf.ByteString getGrantTypesBytes(int index) {
+      return grantTypes_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The grantTypes to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGrantTypes(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureGrantTypesIsMutable();
+      grantTypes_.set(index, value);
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param value The grantTypes to add.
+     * @return This builder for chaining.
+     */
+    public Builder addGrantTypes(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureGrantTypesIsMutable();
+      grantTypes_.add(value);
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param values The grantTypes to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllGrantTypes(java.lang.Iterable<java.lang.String> values) {
+      ensureGrantTypesIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, grantTypes_);
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearGrantTypes() {
+      grantTypes_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000040);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Supported grant types.
+     * </pre>
+     *
+     * <code>repeated string grant_types = 7;</code>
+     *
+     * @param value The bytes of the grantTypes to add.
+     * @return This builder for chaining.
+     */
+    public Builder addGrantTypesBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureGrantTypesIsMutable();
+      grantTypes_.add(value);
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.AzureOpenIdConfig)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.AzureOpenIdConfig)
+  private static final com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<AzureOpenIdConfig> PARSER =
+      new com.google.protobuf.AbstractParser<AzureOpenIdConfig>() {
+        @java.lang.Override
+        public AzureOpenIdConfig parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<AzureOpenIdConfig> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<AzureOpenIdConfig> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureOpenIdConfigOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureOpenIdConfigOrBuilder.java
new file mode 100644
index 000000000000..1eae706ee844
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureOpenIdConfigOrBuilder.java
@@ -0,0 +1,330 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface AzureOpenIdConfigOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.AzureOpenIdConfig)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * OIDC Issuer.
+   * </pre>
+   *
+   * <code>string issuer = 1;</code>
+   *
+   * @return The issuer.
+   */
+  java.lang.String getIssuer();
+  /**
+   *
+   *
+   * <pre>
+   * OIDC Issuer.
+   * </pre>
+   *
+   * <code>string issuer = 1;</code>
+   *
+   * @return The bytes for issuer.
+   */
+  com.google.protobuf.ByteString getIssuerBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * JSON Web Key uri.
+   * </pre>
+   *
+   * <code>string jwks_uri = 2;</code>
+   *
+   * @return The jwksUri.
+   */
+  java.lang.String getJwksUri();
+  /**
+   *
+   *
+   * <pre>
+   * JSON Web Key uri.
+   * </pre>
+   *
+   * <code>string jwks_uri = 2;</code>
+   *
+   * @return The bytes for jwksUri.
+   */
+  com.google.protobuf.ByteString getJwksUriBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @return A list containing the responseTypesSupported.
+   */
+  java.util.List<java.lang.String> getResponseTypesSupportedList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @return The count of responseTypesSupported.
+   */
+  int getResponseTypesSupportedCount();
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The responseTypesSupported at the given index.
+   */
+  java.lang.String getResponseTypesSupported(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Supported response types.
+   * </pre>
+   *
+   * <code>repeated string response_types_supported = 3;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the responseTypesSupported at the given index.
+   */
+  com.google.protobuf.ByteString getResponseTypesSupportedBytes(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @return A list containing the subjectTypesSupported.
+   */
+  java.util.List<java.lang.String> getSubjectTypesSupportedList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @return The count of subjectTypesSupported.
+   */
+  int getSubjectTypesSupportedCount();
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The subjectTypesSupported at the given index.
+   */
+  java.lang.String getSubjectTypesSupported(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Supported subject types.
+   * </pre>
+   *
+   * <code>repeated string subject_types_supported = 4;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the subjectTypesSupported at the given index.
+   */
+  com.google.protobuf.ByteString getSubjectTypesSupportedBytes(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @return A list containing the idTokenSigningAlgValuesSupported.
+   */
+  java.util.List<java.lang.String> getIdTokenSigningAlgValuesSupportedList();
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @return The count of idTokenSigningAlgValuesSupported.
+   */
+  int getIdTokenSigningAlgValuesSupportedCount();
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The idTokenSigningAlgValuesSupported at the given index.
+   */
+  java.lang.String getIdTokenSigningAlgValuesSupported(int index);
+  /**
+   *
+   *
+   * <pre>
+   * supported ID Token signing Algorithms.
+   * </pre>
+   *
+   * <code>repeated string id_token_signing_alg_values_supported = 5;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the idTokenSigningAlgValuesSupported at the given index.
+   */
+  com.google.protobuf.ByteString getIdTokenSigningAlgValuesSupportedBytes(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @return A list containing the claimsSupported.
+   */
+  java.util.List<java.lang.String> getClaimsSupportedList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @return The count of claimsSupported.
+   */
+  int getClaimsSupportedCount();
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The claimsSupported at the given index.
+   */
+  java.lang.String getClaimsSupported(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Supported claims.
+   * </pre>
+   *
+   * <code>repeated string claims_supported = 6;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the claimsSupported at the given index.
+   */
+  com.google.protobuf.ByteString getClaimsSupportedBytes(int index);
+
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @return A list containing the grantTypes.
+   */
+  java.util.List<java.lang.String> getGrantTypesList();
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @return The count of grantTypes.
+   */
+  int getGrantTypesCount();
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @param index The index of the element to return.
+   * @return The grantTypes at the given index.
+   */
+  java.lang.String getGrantTypes(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Supported grant types.
+   * </pre>
+   *
+   * <code>repeated string grant_types = 7;</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the grantTypes at the given index.
+   */
+  com.google.protobuf.ByteString getGrantTypesBytes(int index);
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureResourcesProto.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureResourcesProto.java
index 037b2badaed6..d7edcc87e264 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureResourcesProto.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureResourcesProto.java
@@ -87,6 +87,10 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_AzureClusterUser_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_AzureClusterUser_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_AzureClusterGroup_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_AzureClusterGroup_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_AzureNodePool_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -95,6 +99,10 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_AzureNodePool_AnnotationsEntry_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_AzureNodePool_AnnotationsEntry_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_AzureNodeManagement_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_AzureNodeManagement_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_AzureNodeConfig_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -111,6 +119,14 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_AzureNodePoolAutoscaling_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_AzureNodePoolAutoscaling_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_AzureOpenIdConfig_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_AzureOpenIdConfig_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_AzureJsonWebKeys_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_AzureJsonWebKeys_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_AzureServerConfig_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -149,167 +165,185 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "d.v1\032\037google/api/field_behavior.proto\032\031g"
           + "oogle/api/resource.proto\0324google/cloud/g"
           + "kemulticloud/v1/common_resources.proto\032\037"
-          + "google/protobuf/timestamp.proto\"\353\014\n\014Azur"
-          + "eCluster\022\014\n\004name\030\001 \001(\t\022\031\n\013description\030\002 "
-          + "\001(\tB\004\342A\001\001\022\032\n\014azure_region\030\003 \001(\tB\004\342A\001\002\022\037\n"
-          + "\021resource_group_id\030\021 \001(\tB\004\342A\001\002\022\032\n\014azure_"
-          + "client\030\020 \001(\tB\004\342A\001\001\022O\n\nnetworking\030\004 \001(\01325"
-          + ".google.cloud.gkemulticloud.v1.AzureClus"
-          + "terNetworkingB\004\342A\001\002\022M\n\rcontrol_plane\030\005 \001"
-          + "(\01320.google.cloud.gkemulticloud.v1.Azure"
-          + "ControlPlaneB\004\342A\001\002\022N\n\rauthorization\030\006 \001("
-          + "\01321.google.cloud.gkemulticloud.v1.AzureA"
-          + "uthorizationB\004\342A\001\002\022g\n\035azure_services_aut"
-          + "hentication\030\026 \001(\0132:.google.cloud.gkemult"
-          + "icloud.v1.AzureServicesAuthenticationB\004\342"
-          + "A\001\001\022F\n\005state\030\007 \001(\01621.google.cloud.gkemul"
-          + "ticloud.v1.AzureCluster.StateB\004\342A\001\003\022\026\n\010e"
-          + "ndpoint\030\010 \001(\tB\004\342A\001\003\022\021\n\003uid\030\t \001(\tB\004\342A\001\003\022\031"
-          + "\n\013reconciling\030\n \001(\010B\004\342A\001\003\0225\n\013create_time"
-          + "\030\013 \001(\0132\032.google.protobuf.TimestampB\004\342A\001\003"
-          + "\0225\n\013update_time\030\014 \001(\0132\032.google.protobuf."
-          + "TimestampB\004\342A\001\003\022\014\n\004etag\030\r \001(\t\022W\n\013annotat"
-          + "ions\030\016 \003(\0132<.google.cloud.gkemulticloud."
-          + "v1.AzureCluster.AnnotationsEntryB\004\342A\001\001\022]"
-          + "\n\030workload_identity_config\030\022 \001(\01325.googl"
-          + "e.cloud.gkemulticloud.v1.WorkloadIdentit"
-          + "yConfigB\004\342A\001\003\022$\n\026cluster_ca_certificate\030"
-          + "\023 \001(\tB\004\342A\001\003\0229\n\005fleet\030\024 \001(\0132$.google.clou"
-          + "d.gkemulticloud.v1.FleetB\004\342A\001\002\022U\n\021manage"
-          + "d_resources\030\025 \001(\01324.google.cloud.gkemult"
-          + "icloud.v1.AzureClusterResourcesB\004\342A\001\003\022J\n"
-          + "\016logging_config\030\027 \001(\0132,.google.cloud.gke"
-          + "multicloud.v1.LoggingConfigB\004\342A\001\001\022F\n\006err"
-          + "ors\030\030 \003(\01320.google.cloud.gkemulticloud.v"
-          + "1.AzureClusterErrorB\004\342A\001\003\022P\n\021monitoring_"
-          + "config\030\031 \001(\0132/.google.cloud.gkemulticlou"
-          + "d.v1.MonitoringConfigB\004\342A\001\001\0322\n\020Annotatio"
-          + "nsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001\""
-          + "u\n\005State\022\025\n\021STATE_UNSPECIFIED\020\000\022\020\n\014PROVI"
-          + "SIONING\020\001\022\013\n\007RUNNING\020\002\022\017\n\013RECONCILING\020\003\022"
-          + "\014\n\010STOPPING\020\004\022\t\n\005ERROR\020\005\022\014\n\010DEGRADED\020\006:u"
-          + "\352Ar\n)gkemulticloud.googleapis.com/AzureC"
-          + "luster\022Eprojects/{project}/locations/{lo"
-          + "cation}/azureClusters/{azure_cluster}\"\273\001"
-          + "\n\026AzureClusterNetworking\022 \n\022virtual_netw"
-          + "ork_id\030\001 \001(\tB\004\342A\001\002\022%\n\027pod_address_cidr_b"
-          + "locks\030\002 \003(\tB\004\342A\001\002\022)\n\033service_address_cid"
-          + "r_blocks\030\003 \003(\tB\004\342A\001\002\022-\n\037service_load_bal"
-          + "ancer_subnet_id\030\005 \001(\tB\004\342A\001\001\"\256\006\n\021AzureCon"
-          + "trolPlane\022\025\n\007version\030\001 \001(\tB\004\342A\001\002\022\027\n\tsubn"
-          + "et_id\030\002 \001(\tB\004\342A\001\001\022\025\n\007vm_size\030\003 \001(\tB\004\342A\001\001"
-          + "\022G\n\nssh_config\030\013 \001(\0132-.google.cloud.gkem"
-          + "ulticloud.v1.AzureSshConfigB\004\342A\001\002\022K\n\013roo"
-          + "t_volume\030\004 \001(\01320.google.cloud.gkemulticl"
-          + "oud.v1.AzureDiskTemplateB\004\342A\001\001\022K\n\013main_v"
-          + "olume\030\005 \001(\01320.google.cloud.gkemulticloud"
-          + ".v1.AzureDiskTemplateB\004\342A\001\001\022Y\n\023database_"
-          + "encryption\030\n \001(\01326.google.cloud.gkemulti"
-          + "cloud.v1.AzureDatabaseEncryptionB\004\342A\001\001\022K"
-          + "\n\014proxy_config\030\014 \001(\0132/.google.cloud.gkem"
-          + "ulticloud.v1.AzureProxyConfigB\004\342A\001\001\022U\n\021c"
-          + "onfig_encryption\030\016 \001(\01324.google.cloud.gk"
-          + "emulticloud.v1.AzureConfigEncryptionB\004\342A"
-          + "\001\001\022N\n\004tags\030\007 \003(\0132:.google.cloud.gkemulti"
-          + "cloud.v1.AzureControlPlane.TagsEntryB\004\342A"
-          + "\001\001\022Q\n\022replica_placements\030\r \003(\0132/.google."
-          + "cloud.gkemulticloud.v1.ReplicaPlacementB"
-          + "\004\342A\001\001\022 \n\022endpoint_subnet_id\030\017 \001(\tB\004\342A\001\001\032"
-          + "+\n\tTagsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t"
-          + ":\0028\001\"R\n\020ReplicaPlacement\022\027\n\tsubnet_id\030\001 "
-          + "\001(\tB\004\342A\001\002\022%\n\027azure_availability_zone\030\002 \001"
-          + "(\tB\004\342A\001\002\"@\n\020AzureProxyConfig\022\031\n\021resource"
-          + "_group_id\030\001 \001(\t\022\021\n\tsecret_id\030\002 \001(\t\"/\n\027Az"
-          + "ureDatabaseEncryption\022\024\n\006key_id\030\003 \001(\tB\004\342"
-          + "A\001\002\"G\n\025AzureConfigEncryption\022\024\n\006key_id\030\002"
-          + " \001(\tB\004\342A\001\002\022\030\n\npublic_key\030\003 \001(\tB\004\342A\001\001\"+\n\021"
-          + "AzureDiskTemplate\022\026\n\010size_gib\030\001 \001(\005B\004\342A\001"
-          + "\001\"\215\004\n\013AzureClient\022\014\n\004name\030\001 \001(\t\022\027\n\ttenan"
-          + "t_id\030\002 \001(\tB\004\342A\001\002\022\034\n\016application_id\030\003 \001(\t"
-          + "B\004\342A\001\002\022\031\n\013reconciling\030\t \001(\010B\004\342A\001\003\022V\n\013ann"
-          + "otations\030\010 \003(\0132;.google.cloud.gkemulticl"
-          + "oud.v1.AzureClient.AnnotationsEntryB\004\342A\001"
-          + "\001\022\035\n\017pem_certificate\030\007 \001(\tB\004\342A\001\003\022\021\n\003uid\030"
-          + "\005 \001(\tB\004\342A\001\003\0225\n\013create_time\030\006 \001(\0132\032.googl"
-          + "e.protobuf.TimestampB\004\342A\001\003\0225\n\013update_tim"
-          + "e\030\n \001(\0132\032.google.protobuf.TimestampB\004\342A\001"
-          + "\003\0322\n\020AnnotationsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005va"
-          + "lue\030\002 \001(\t:\0028\001:r\352Ao\n(gkemulticloud.google"
-          + "apis.com/AzureClient\022Cprojects/{project}"
-          + "/locations/{location}/azureClients/{azur"
-          + "e_client}\"`\n\022AzureAuthorization\022J\n\013admin"
-          + "_users\030\001 \003(\0132/.google.cloud.gkemulticlou"
-          + "d.v1.AzureClusterUserB\004\342A\001\002\"T\n\033AzureServ"
-          + "icesAuthentication\022\027\n\ttenant_id\030\001 \001(\tB\004\342"
-          + "A\001\002\022\034\n\016application_id\030\002 \001(\tB\004\342A\001\002\"*\n\020Azu"
-          + "reClusterUser\022\026\n\010username\030\001 \001(\tB\004\342A\001\002\"\277\010"
-          + "\n\rAzureNodePool\022\014\n\004name\030\001 \001(\t\022\025\n\007version"
-          + "\030\002 \001(\tB\004\342A\001\002\022D\n\006config\030\026 \001(\0132..google.cl"
-          + "oud.gkemulticloud.v1.AzureNodeConfigB\004\342A"
-          + "\001\002\022\027\n\tsubnet_id\030\003 \001(\tB\004\342A\001\002\022R\n\013autoscali"
-          + "ng\030\004 \001(\01327.google.cloud.gkemulticloud.v1"
-          + ".AzureNodePoolAutoscalingB\004\342A\001\002\022G\n\005state"
-          + "\030\006 \001(\01622.google.cloud.gkemulticloud.v1.A"
-          + "zureNodePool.StateB\004\342A\001\003\022\021\n\003uid\030\010 \001(\tB\004\342"
-          + "A\001\003\022\031\n\013reconciling\030\t \001(\010B\004\342A\001\003\0225\n\013create"
-          + "_time\030\n \001(\0132\032.google.protobuf.TimestampB"
-          + "\004\342A\001\003\0225\n\013update_time\030\013 \001(\0132\032.google.prot"
-          + "obuf.TimestampB\004\342A\001\003\022\014\n\004etag\030\014 \001(\t\022X\n\013an"
-          + "notations\030\r \003(\0132=.google.cloud.gkemultic"
-          + "loud.v1.AzureNodePool.AnnotationsEntryB\004"
-          + "\342A\001\001\022S\n\023max_pods_constraint\030\025 \001(\01320.goog"
-          + "le.cloud.gkemulticloud.v1.MaxPodsConstra"
-          + "intB\004\342A\001\002\022%\n\027azure_availability_zone\030\027 \001"
-          + "(\tB\004\342A\001\001\022G\n\006errors\030\035 \003(\01321.google.cloud."
-          + "gkemulticloud.v1.AzureNodePoolErrorB\004\342A\001"
-          + "\003\0322\n\020AnnotationsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005va"
-          + "lue\030\002 \001(\t:\0028\001\"u\n\005State\022\025\n\021STATE_UNSPECIF"
-          + "IED\020\000\022\020\n\014PROVISIONING\020\001\022\013\n\007RUNNING\020\002\022\017\n\013"
-          + "RECONCILING\020\003\022\014\n\010STOPPING\020\004\022\t\n\005ERROR\020\005\022\014"
-          + "\n\010DEGRADED\020\006:\230\001\352A\224\001\n*gkemulticloud.googl"
-          + "eapis.com/AzureNodePool\022fprojects/{proje"
-          + "ct}/locations/{location}/azureClusters/{"
-          + "azure_cluster}/azureNodePools/{azure_nod"
-          + "e_pool}\"\270\005\n\017AzureNodeConfig\022\025\n\007vm_size\030\001"
-          + " \001(\tB\004\342A\001\001\022K\n\013root_volume\030\002 \001(\01320.google"
-          + ".cloud.gkemulticloud.v1.AzureDiskTemplat"
-          + "eB\004\342A\001\001\022L\n\004tags\030\003 \003(\01328.google.cloud.gke"
-          + "multicloud.v1.AzureNodeConfig.TagsEntryB"
-          + "\004\342A\001\001\022\030\n\nimage_type\030\010 \001(\tB\004\342A\001\001\022G\n\nssh_c"
-          + "onfig\030\007 \001(\0132-.google.cloud.gkemulticloud"
-          + ".v1.AzureSshConfigB\004\342A\001\002\022K\n\014proxy_config"
-          + "\030\t \001(\0132/.google.cloud.gkemulticloud.v1.A"
-          + "zureProxyConfigB\004\342A\001\001\022U\n\021config_encrypti"
-          + "on\030\014 \001(\01324.google.cloud.gkemulticloud.v1"
-          + ".AzureConfigEncryptionB\004\342A\001\001\022>\n\006taints\030\n"
-          + " \003(\0132(.google.cloud.gkemulticloud.v1.Nod"
-          + "eTaintB\004\342A\001\001\022P\n\006labels\030\013 \003(\0132:.google.cl"
-          + "oud.gkemulticloud.v1.AzureNodeConfig.Lab"
-          + "elsEntryB\004\342A\001\001\032+\n\tTagsEntry\022\013\n\003key\030\001 \001(\t"
-          + "\022\r\n\005value\030\002 \001(\t:\0028\001\032-\n\013LabelsEntry\022\013\n\003ke"
-          + "y\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001\"V\n\030AzureNodeP"
-          + "oolAutoscaling\022\034\n\016min_node_count\030\001 \001(\005B\004"
-          + "\342A\001\002\022\034\n\016max_node_count\030\002 \001(\005B\004\342A\001\002\"\376\001\n\021A"
+          + "google/protobuf/timestamp.proto\032\026google/"
+          + "type/date.proto\"\353\014\n\014AzureCluster\022\014\n\004name"
+          + "\030\001 \001(\t\022\031\n\013description\030\002 \001(\tB\004\342A\001\001\022\032\n\014azu"
+          + "re_region\030\003 \001(\tB\004\342A\001\002\022\037\n\021resource_group_"
+          + "id\030\021 \001(\tB\004\342A\001\002\022\032\n\014azure_client\030\020 \001(\tB\004\342A"
+          + "\001\001\022O\n\nnetworking\030\004 \001(\01325.google.cloud.gk"
+          + "emulticloud.v1.AzureClusterNetworkingB\004\342"
+          + "A\001\002\022M\n\rcontrol_plane\030\005 \001(\01320.google.clou"
+          + "d.gkemulticloud.v1.AzureControlPlaneB\004\342A"
+          + "\001\002\022N\n\rauthorization\030\006 \001(\01321.google.cloud"
+          + ".gkemulticloud.v1.AzureAuthorizationB\004\342A"
+          + "\001\002\022g\n\035azure_services_authentication\030\026 \001("
+          + "\0132:.google.cloud.gkemulticloud.v1.AzureS"
+          + "ervicesAuthenticationB\004\342A\001\001\022F\n\005state\030\007 \001"
+          + "(\01621.google.cloud.gkemulticloud.v1.Azure"
+          + "Cluster.StateB\004\342A\001\003\022\026\n\010endpoint\030\010 \001(\tB\004\342"
+          + "A\001\003\022\021\n\003uid\030\t \001(\tB\004\342A\001\003\022\031\n\013reconciling\030\n "
+          + "\001(\010B\004\342A\001\003\0225\n\013create_time\030\013 \001(\0132\032.google."
+          + "protobuf.TimestampB\004\342A\001\003\0225\n\013update_time\030"
+          + "\014 \001(\0132\032.google.protobuf.TimestampB\004\342A\001\003\022"
+          + "\014\n\004etag\030\r \001(\t\022W\n\013annotations\030\016 \003(\0132<.goo"
+          + "gle.cloud.gkemulticloud.v1.AzureCluster."
+          + "AnnotationsEntryB\004\342A\001\001\022]\n\030workload_ident"
+          + "ity_config\030\022 \001(\01325.google.cloud.gkemulti"
+          + "cloud.v1.WorkloadIdentityConfigB\004\342A\001\003\022$\n"
+          + "\026cluster_ca_certificate\030\023 \001(\tB\004\342A\001\003\0229\n\005f"
+          + "leet\030\024 \001(\0132$.google.cloud.gkemulticloud."
+          + "v1.FleetB\004\342A\001\002\022U\n\021managed_resources\030\025 \001("
+          + "\01324.google.cloud.gkemulticloud.v1.AzureC"
+          + "lusterResourcesB\004\342A\001\003\022J\n\016logging_config\030"
+          + "\027 \001(\0132,.google.cloud.gkemulticloud.v1.Lo"
+          + "ggingConfigB\004\342A\001\001\022F\n\006errors\030\030 \003(\01320.goog"
+          + "le.cloud.gkemulticloud.v1.AzureClusterEr"
+          + "rorB\004\342A\001\003\022P\n\021monitoring_config\030\031 \001(\0132/.g"
+          + "oogle.cloud.gkemulticloud.v1.MonitoringC"
+          + "onfigB\004\342A\001\001\0322\n\020AnnotationsEntry\022\013\n\003key\030\001"
+          + " \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001\"u\n\005State\022\025\n\021STAT"
+          + "E_UNSPECIFIED\020\000\022\020\n\014PROVISIONING\020\001\022\013\n\007RUN"
+          + "NING\020\002\022\017\n\013RECONCILING\020\003\022\014\n\010STOPPING\020\004\022\t\n"
+          + "\005ERROR\020\005\022\014\n\010DEGRADED\020\006:u\352Ar\n)gkemulticlo"
+          + "ud.googleapis.com/AzureCluster\022Eprojects"
+          + "/{project}/locations/{location}/azureClu"
+          + "sters/{azure_cluster}\"\273\001\n\026AzureClusterNe"
+          + "tworking\022 \n\022virtual_network_id\030\001 \001(\tB\004\342A"
+          + "\001\002\022%\n\027pod_address_cidr_blocks\030\002 \003(\tB\004\342A\001"
+          + "\002\022)\n\033service_address_cidr_blocks\030\003 \003(\tB\004"
+          + "\342A\001\002\022-\n\037service_load_balancer_subnet_id\030"
+          + "\005 \001(\tB\004\342A\001\001\"\256\006\n\021AzureControlPlane\022\025\n\007ver"
+          + "sion\030\001 \001(\tB\004\342A\001\002\022\027\n\tsubnet_id\030\002 \001(\tB\004\342A\001"
+          + "\001\022\025\n\007vm_size\030\003 \001(\tB\004\342A\001\001\022G\n\nssh_config\030\013"
+          + " \001(\0132-.google.cloud.gkemulticloud.v1.Azu"
+          + "reSshConfigB\004\342A\001\002\022K\n\013root_volume\030\004 \001(\01320"
+          + ".google.cloud.gkemulticloud.v1.AzureDisk"
+          + "TemplateB\004\342A\001\001\022K\n\013main_volume\030\005 \001(\01320.go"
+          + "ogle.cloud.gkemulticloud.v1.AzureDiskTem"
+          + "plateB\004\342A\001\001\022Y\n\023database_encryption\030\n \001(\013"
+          + "26.google.cloud.gkemulticloud.v1.AzureDa"
+          + "tabaseEncryptionB\004\342A\001\001\022K\n\014proxy_config\030\014"
+          + " \001(\0132/.google.cloud.gkemulticloud.v1.Azu"
+          + "reProxyConfigB\004\342A\001\001\022U\n\021config_encryption"
+          + "\030\016 \001(\01324.google.cloud.gkemulticloud.v1.A"
+          + "zureConfigEncryptionB\004\342A\001\001\022N\n\004tags\030\007 \003(\013"
+          + "2:.google.cloud.gkemulticloud.v1.AzureCo"
+          + "ntrolPlane.TagsEntryB\004\342A\001\001\022Q\n\022replica_pl"
+          + "acements\030\r \003(\0132/.google.cloud.gkemulticl"
+          + "oud.v1.ReplicaPlacementB\004\342A\001\001\022 \n\022endpoin"
+          + "t_subnet_id\030\017 \001(\tB\004\342A\001\001\032+\n\tTagsEntry\022\013\n\003"
+          + "key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001\"R\n\020ReplicaP"
+          + "lacement\022\027\n\tsubnet_id\030\001 \001(\tB\004\342A\001\002\022%\n\027azu"
+          + "re_availability_zone\030\002 \001(\tB\004\342A\001\002\"@\n\020Azur"
+          + "eProxyConfig\022\031\n\021resource_group_id\030\001 \001(\t\022"
+          + "\021\n\tsecret_id\030\002 \001(\t\"/\n\027AzureDatabaseEncry"
+          + "ption\022\024\n\006key_id\030\003 \001(\tB\004\342A\001\002\"G\n\025AzureConf"
+          + "igEncryption\022\024\n\006key_id\030\002 \001(\tB\004\342A\001\002\022\030\n\npu"
+          + "blic_key\030\003 \001(\tB\004\342A\001\001\"+\n\021AzureDiskTemplat"
+          + "e\022\026\n\010size_gib\030\001 \001(\005B\004\342A\001\001\"\215\004\n\013AzureClien"
+          + "t\022\014\n\004name\030\001 \001(\t\022\027\n\ttenant_id\030\002 \001(\tB\004\342A\001\002"
+          + "\022\034\n\016application_id\030\003 \001(\tB\004\342A\001\002\022\031\n\013reconc"
+          + "iling\030\t \001(\010B\004\342A\001\003\022V\n\013annotations\030\010 \003(\0132;"
+          + ".google.cloud.gkemulticloud.v1.AzureClie"
+          + "nt.AnnotationsEntryB\004\342A\001\001\022\035\n\017pem_certifi"
+          + "cate\030\007 \001(\tB\004\342A\001\003\022\021\n\003uid\030\005 \001(\tB\004\342A\001\003\0225\n\013c"
+          + "reate_time\030\006 \001(\0132\032.google.protobuf.Times"
+          + "tampB\004\342A\001\003\0225\n\013update_time\030\n \001(\0132\032.google"
+          + ".protobuf.TimestampB\004\342A\001\003\0322\n\020Annotations"
+          + "Entry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001:r\352"
+          + "Ao\n(gkemulticloud.googleapis.com/AzureCl"
+          + "ient\022Cprojects/{project}/locations/{loca"
+          + "tion}/azureClients/{azure_client}\"\256\001\n\022Az"
+          + "ureAuthorization\022J\n\013admin_users\030\001 \003(\0132/."
+          + "google.cloud.gkemulticloud.v1.AzureClust"
+          + "erUserB\004\342A\001\001\022L\n\014admin_groups\030\002 \003(\01320.goo"
+          + "gle.cloud.gkemulticloud.v1.AzureClusterG"
+          + "roupB\004\342A\001\001\"T\n\033AzureServicesAuthenticatio"
+          + "n\022\027\n\ttenant_id\030\001 \001(\tB\004\342A\001\002\022\034\n\016applicatio"
+          + "n_id\030\002 \001(\tB\004\342A\001\002\"*\n\020AzureClusterUser\022\026\n\010"
+          + "username\030\001 \001(\tB\004\342A\001\002\"(\n\021AzureClusterGrou"
+          + "p\022\023\n\005group\030\001 \001(\tB\004\342A\001\002\"\215\t\n\rAzureNodePool"
+          + "\022\014\n\004name\030\001 \001(\t\022\025\n\007version\030\002 \001(\tB\004\342A\001\002\022D\n"
+          + "\006config\030\026 \001(\0132..google.cloud.gkemulticlo"
+          + "ud.v1.AzureNodeConfigB\004\342A\001\002\022\027\n\tsubnet_id"
+          + "\030\003 \001(\tB\004\342A\001\002\022R\n\013autoscaling\030\004 \001(\01327.goog"
+          + "le.cloud.gkemulticloud.v1.AzureNodePoolA"
+          + "utoscalingB\004\342A\001\002\022G\n\005state\030\006 \001(\01622.google"
+          + ".cloud.gkemulticloud.v1.AzureNodePool.St"
+          + "ateB\004\342A\001\003\022\021\n\003uid\030\010 \001(\tB\004\342A\001\003\022\031\n\013reconcil"
+          + "ing\030\t \001(\010B\004\342A\001\003\0225\n\013create_time\030\n \001(\0132\032.g"
+          + "oogle.protobuf.TimestampB\004\342A\001\003\0225\n\013update"
+          + "_time\030\013 \001(\0132\032.google.protobuf.TimestampB"
+          + "\004\342A\001\003\022\014\n\004etag\030\014 \001(\t\022X\n\013annotations\030\r \003(\013"
+          + "2=.google.cloud.gkemulticloud.v1.AzureNo"
+          + "dePool.AnnotationsEntryB\004\342A\001\001\022S\n\023max_pod"
+          + "s_constraint\030\025 \001(\01320.google.cloud.gkemul"
+          + "ticloud.v1.MaxPodsConstraintB\004\342A\001\002\022%\n\027az"
+          + "ure_availability_zone\030\027 \001(\tB\004\342A\001\001\022G\n\006err"
+          + "ors\030\035 \003(\01321.google.cloud.gkemulticloud.v"
+          + "1.AzureNodePoolErrorB\004\342A\001\003\022L\n\nmanagement"
+          + "\030\036 \001(\01322.google.cloud.gkemulticloud.v1.A"
+          + "zureNodeManagementB\004\342A\001\001\0322\n\020AnnotationsE"
+          + "ntry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001\"u\n\005"
+          + "State\022\025\n\021STATE_UNSPECIFIED\020\000\022\020\n\014PROVISIO"
+          + "NING\020\001\022\013\n\007RUNNING\020\002\022\017\n\013RECONCILING\020\003\022\014\n\010"
+          + "STOPPING\020\004\022\t\n\005ERROR\020\005\022\014\n\010DEGRADED\020\006:\230\001\352A"
+          + "\224\001\n*gkemulticloud.googleapis.com/AzureNo"
+          + "dePool\022fprojects/{project}/locations/{lo"
+          + "cation}/azureClusters/{azure_cluster}/az"
+          + "ureNodePools/{azure_node_pool}\"0\n\023AzureN"
+          + "odeManagement\022\031\n\013auto_repair\030\001 \001(\010B\004\342A\001\001"
+          + "\"\270\005\n\017AzureNodeConfig\022\025\n\007vm_size\030\001 \001(\tB\004\342"
+          + "A\001\001\022K\n\013root_volume\030\002 \001(\01320.google.cloud."
+          + "gkemulticloud.v1.AzureDiskTemplateB\004\342A\001\001"
+          + "\022L\n\004tags\030\003 \003(\01328.google.cloud.gkemulticl"
+          + "oud.v1.AzureNodeConfig.TagsEntryB\004\342A\001\001\022\030"
+          + "\n\nimage_type\030\010 \001(\tB\004\342A\001\001\022G\n\nssh_config\030\007"
+          + " \001(\0132-.google.cloud.gkemulticloud.v1.Azu"
+          + "reSshConfigB\004\342A\001\002\022K\n\014proxy_config\030\t \001(\0132"
+          + "/.google.cloud.gkemulticloud.v1.AzurePro"
+          + "xyConfigB\004\342A\001\001\022U\n\021config_encryption\030\014 \001("
+          + "\01324.google.cloud.gkemulticloud.v1.AzureC"
+          + "onfigEncryptionB\004\342A\001\001\022>\n\006taints\030\n \003(\0132(."
+          + "google.cloud.gkemulticloud.v1.NodeTaintB"
+          + "\004\342A\001\001\022P\n\006labels\030\013 \003(\0132:.google.cloud.gke"
+          + "multicloud.v1.AzureNodeConfig.LabelsEntr"
+          + "yB\004\342A\001\001\032+\n\tTagsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005val"
+          + "ue\030\002 \001(\t:\0028\001\032-\n\013LabelsEntry\022\013\n\003key\030\001 \001(\t"
+          + "\022\r\n\005value\030\002 \001(\t:\0028\001\"V\n\030AzureNodePoolAuto"
+          + "scaling\022\034\n\016min_node_count\030\001 \001(\005B\004\342A\001\002\022\034\n"
+          + "\016max_node_count\030\002 \001(\005B\004\342A\001\002\"\326\001\n\021AzureOpe"
+          + "nIdConfig\022\016\n\006issuer\030\001 \001(\t\022\020\n\010jwks_uri\030\002 "
+          + "\001(\t\022 \n\030response_types_supported\030\003 \003(\t\022\037\n"
+          + "\027subject_types_supported\030\004 \003(\t\022-\n%id_tok"
+          + "en_signing_alg_values_supported\030\005 \003(\t\022\030\n"
+          + "\020claims_supported\030\006 \003(\t\022\023\n\013grant_types\030\007"
+          + " \003(\t\"D\n\020AzureJsonWebKeys\0220\n\004keys\030\001 \003(\0132\""
+          + ".google.cloud.gkemulticloud.v1.Jwk\"\376\001\n\021A"
           + "zureServerConfig\022\014\n\004name\030\001 \001(\t\022J\n\016valid_"
           + "versions\030\002 \003(\01322.google.cloud.gkemulticl"
           + "oud.v1.AzureK8sVersionInfo\022\037\n\027supported_"
           + "azure_regions\030\003 \003(\t:n\352Ak\n.gkemulticloud."
           + "googleapis.com/AzureServerConfig\0229projec"
           + "ts/{project}/locations/{location}/azureS"
-          + "erverConfig\"&\n\023AzureK8sVersionInfo\022\017\n\007ve"
-          + "rsion\030\001 \001(\t\".\n\016AzureSshConfig\022\034\n\016authori"
-          + "zed_key\030\001 \001(\tB\004\342A\001\002\"{\n\025AzureClusterResou"
-          + "rces\022\'\n\031network_security_group_id\030\001 \001(\tB"
-          + "\004\342A\001\003\0229\n+control_plane_application_secur"
-          + "ity_group_id\030\002 \001(\tB\004\342A\001\003\"$\n\021AzureCluster"
-          + "Error\022\017\n\007message\030\001 \001(\t\"%\n\022AzureNodePoolE"
-          + "rror\022\017\n\007message\030\001 \001(\tB\346\001\n!com.google.clo"
-          + "ud.gkemulticloud.v1B\023AzureResourcesProto"
-          + "P\001ZGcloud.google.com/go/gkemulticloud/ap"
-          + "iv1/gkemulticloudpb;gkemulticloudpb\252\002\035Go"
-          + "ogle.Cloud.GkeMultiCloud.V1\312\002\035Google\\Clo"
-          + "ud\\GkeMultiCloud\\V1\352\002 Google::Cloud::Gke"
-          + "MultiCloud::V1b\006proto3"
+          + "erverConfig\"\272\001\n\023AzureK8sVersionInfo\022\017\n\007v"
+          + "ersion\030\001 \001(\t\022\025\n\007enabled\030\003 \001(\010B\004\342A\001\001\022\031\n\013e"
+          + "nd_of_life\030\004 \001(\010B\004\342A\001\001\0221\n\020end_of_life_da"
+          + "te\030\005 \001(\0132\021.google.type.DateB\004\342A\001\001\022-\n\014rel"
+          + "ease_date\030\006 \001(\0132\021.google.type.DateB\004\342A\001\001"
+          + "\".\n\016AzureSshConfig\022\034\n\016authorized_key\030\001 \001"
+          + "(\tB\004\342A\001\002\"{\n\025AzureClusterResources\022\'\n\031net"
+          + "work_security_group_id\030\001 \001(\tB\004\342A\001\003\0229\n+co"
+          + "ntrol_plane_application_security_group_i"
+          + "d\030\002 \001(\tB\004\342A\001\003\"$\n\021AzureClusterError\022\017\n\007me"
+          + "ssage\030\001 \001(\t\"%\n\022AzureNodePoolError\022\017\n\007mes"
+          + "sage\030\001 \001(\tB\346\001\n!com.google.cloud.gkemulti"
+          + "cloud.v1B\023AzureResourcesProtoP\001ZGcloud.g"
+          + "oogle.com/go/gkemulticloud/apiv1/gkemult"
+          + "icloudpb;gkemulticloudpb\252\002\035Google.Cloud."
+          + "GkeMultiCloud.V1\312\002\035Google\\Cloud\\GkeMulti"
+          + "Cloud\\V1\352\002 Google::Cloud::GkeMultiCloud:"
+          + ":V1b\006proto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -319,6 +353,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               com.google.api.ResourceProto.getDescriptor(),
               com.google.cloud.gkemulticloud.v1.CommonResourcesProto.getDescriptor(),
               com.google.protobuf.TimestampProto.getDescriptor(),
+              com.google.type.DateProto.getDescriptor(),
             });
     internal_static_google_cloud_gkemulticloud_v1_AzureCluster_descriptor =
         getDescriptor().getMessageTypes().get(0);
@@ -473,7 +508,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AzureAuthorization_descriptor,
             new java.lang.String[] {
-              "AdminUsers",
+              "AdminUsers", "AdminGroups",
             });
     internal_static_google_cloud_gkemulticloud_v1_AzureServicesAuthentication_descriptor =
         getDescriptor().getMessageTypes().get(10);
@@ -491,8 +526,16 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
             new java.lang.String[] {
               "Username",
             });
-    internal_static_google_cloud_gkemulticloud_v1_AzureNodePool_descriptor =
+    internal_static_google_cloud_gkemulticloud_v1_AzureClusterGroup_descriptor =
         getDescriptor().getMessageTypes().get(12);
+    internal_static_google_cloud_gkemulticloud_v1_AzureClusterGroup_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_AzureClusterGroup_descriptor,
+            new java.lang.String[] {
+              "Group",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_AzureNodePool_descriptor =
+        getDescriptor().getMessageTypes().get(13);
     internal_static_google_cloud_gkemulticloud_v1_AzureNodePool_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AzureNodePool_descriptor,
@@ -512,6 +555,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "MaxPodsConstraint",
               "AzureAvailabilityZone",
               "Errors",
+              "Management",
             });
     internal_static_google_cloud_gkemulticloud_v1_AzureNodePool_AnnotationsEntry_descriptor =
         internal_static_google_cloud_gkemulticloud_v1_AzureNodePool_descriptor
@@ -523,8 +567,16 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
             new java.lang.String[] {
               "Key", "Value",
             });
+    internal_static_google_cloud_gkemulticloud_v1_AzureNodeManagement_descriptor =
+        getDescriptor().getMessageTypes().get(14);
+    internal_static_google_cloud_gkemulticloud_v1_AzureNodeManagement_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_AzureNodeManagement_descriptor,
+            new java.lang.String[] {
+              "AutoRepair",
+            });
     internal_static_google_cloud_gkemulticloud_v1_AzureNodeConfig_descriptor =
-        getDescriptor().getMessageTypes().get(13);
+        getDescriptor().getMessageTypes().get(15);
     internal_static_google_cloud_gkemulticloud_v1_AzureNodeConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AzureNodeConfig_descriptor,
@@ -560,15 +612,37 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Key", "Value",
             });
     internal_static_google_cloud_gkemulticloud_v1_AzureNodePoolAutoscaling_descriptor =
-        getDescriptor().getMessageTypes().get(14);
+        getDescriptor().getMessageTypes().get(16);
     internal_static_google_cloud_gkemulticloud_v1_AzureNodePoolAutoscaling_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AzureNodePoolAutoscaling_descriptor,
             new java.lang.String[] {
               "MinNodeCount", "MaxNodeCount",
             });
+    internal_static_google_cloud_gkemulticloud_v1_AzureOpenIdConfig_descriptor =
+        getDescriptor().getMessageTypes().get(17);
+    internal_static_google_cloud_gkemulticloud_v1_AzureOpenIdConfig_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_AzureOpenIdConfig_descriptor,
+            new java.lang.String[] {
+              "Issuer",
+              "JwksUri",
+              "ResponseTypesSupported",
+              "SubjectTypesSupported",
+              "IdTokenSigningAlgValuesSupported",
+              "ClaimsSupported",
+              "GrantTypes",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_AzureJsonWebKeys_descriptor =
+        getDescriptor().getMessageTypes().get(18);
+    internal_static_google_cloud_gkemulticloud_v1_AzureJsonWebKeys_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_AzureJsonWebKeys_descriptor,
+            new java.lang.String[] {
+              "Keys",
+            });
     internal_static_google_cloud_gkemulticloud_v1_AzureServerConfig_descriptor =
-        getDescriptor().getMessageTypes().get(15);
+        getDescriptor().getMessageTypes().get(19);
     internal_static_google_cloud_gkemulticloud_v1_AzureServerConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AzureServerConfig_descriptor,
@@ -576,15 +650,15 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Name", "ValidVersions", "SupportedAzureRegions",
             });
     internal_static_google_cloud_gkemulticloud_v1_AzureK8sVersionInfo_descriptor =
-        getDescriptor().getMessageTypes().get(16);
+        getDescriptor().getMessageTypes().get(20);
     internal_static_google_cloud_gkemulticloud_v1_AzureK8sVersionInfo_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AzureK8sVersionInfo_descriptor,
             new java.lang.String[] {
-              "Version",
+              "Version", "Enabled", "EndOfLife", "EndOfLifeDate", "ReleaseDate",
             });
     internal_static_google_cloud_gkemulticloud_v1_AzureSshConfig_descriptor =
-        getDescriptor().getMessageTypes().get(17);
+        getDescriptor().getMessageTypes().get(21);
     internal_static_google_cloud_gkemulticloud_v1_AzureSshConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AzureSshConfig_descriptor,
@@ -592,7 +666,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "AuthorizedKey",
             });
     internal_static_google_cloud_gkemulticloud_v1_AzureClusterResources_descriptor =
-        getDescriptor().getMessageTypes().get(18);
+        getDescriptor().getMessageTypes().get(22);
     internal_static_google_cloud_gkemulticloud_v1_AzureClusterResources_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AzureClusterResources_descriptor,
@@ -600,7 +674,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "NetworkSecurityGroupId", "ControlPlaneApplicationSecurityGroupId",
             });
     internal_static_google_cloud_gkemulticloud_v1_AzureClusterError_descriptor =
-        getDescriptor().getMessageTypes().get(19);
+        getDescriptor().getMessageTypes().get(23);
     internal_static_google_cloud_gkemulticloud_v1_AzureClusterError_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AzureClusterError_descriptor,
@@ -608,7 +682,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Message",
             });
     internal_static_google_cloud_gkemulticloud_v1_AzureNodePoolError_descriptor =
-        getDescriptor().getMessageTypes().get(20);
+        getDescriptor().getMessageTypes().get(24);
     internal_static_google_cloud_gkemulticloud_v1_AzureNodePoolError_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_AzureNodePoolError_descriptor,
@@ -625,6 +699,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     com.google.api.ResourceProto.getDescriptor();
     com.google.cloud.gkemulticloud.v1.CommonResourcesProto.getDescriptor();
     com.google.protobuf.TimestampProto.getDescriptor();
+    com.google.type.DateProto.getDescriptor();
   }
 
   // @@protoc_insertion_point(outer_class_scope)
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServerConfig.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServerConfig.java
index 0648982c7d71..bc9ada500fff 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServerConfig.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServerConfig.java
@@ -136,7 +136,10 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -150,7 +153,10 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -164,7 +170,10 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -177,7 +186,10 @@ public int getValidVersionsCount() {
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -190,7 +202,10 @@ public com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfo getValidVersions(in
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -878,7 +893,10 @@ private void ensureValidVersionsIsMutable() {
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -895,7 +913,10 @@ private void ensureValidVersionsIsMutable() {
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -911,7 +932,10 @@ public int getValidVersionsCount() {
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -927,7 +951,10 @@ public com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfo getValidVersions(in
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -950,7 +977,10 @@ public Builder setValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -970,7 +1000,10 @@ public Builder setValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -992,7 +1025,10 @@ public Builder addValidVersions(com.google.cloud.gkemulticloud.v1.AzureK8sVersio
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1015,7 +1051,10 @@ public Builder addValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1035,7 +1074,10 @@ public Builder addValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1055,7 +1097,10 @@ public Builder addValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1076,7 +1121,10 @@ public Builder addAllValidVersions(
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1095,7 +1143,10 @@ public Builder clearValidVersions() {
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1114,7 +1165,10 @@ public Builder removeValidVersions(int index) {
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1127,7 +1181,10 @@ public com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfo.Builder getValidVer
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1144,7 +1201,10 @@ public com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfoOrBuilder getValidVe
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1161,7 +1221,10 @@ public com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfoOrBuilder getValidVe
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1174,7 +1237,10 @@ public com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfo.Builder addValidVer
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -1189,7 +1255,10 @@ public com.google.cloud.gkemulticloud.v1.AzureK8sVersionInfo.Builder addValidVer
      *
      *
      * <pre>
-     * List of valid Kubernetes versions.
+     * List of all released Kubernetes versions, including ones which are end of
+     * life and can no longer be used.  Filter by the `enabled`
+     * property to limit to currently available versions.
+     * Valid versions supported for both create and update operations
      * </pre>
      *
      * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServerConfigOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServerConfigOrBuilder.java
index 05ab1e8bd725..41c0fcd9ff4c 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServerConfigOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServerConfigOrBuilder.java
@@ -64,7 +64,10 @@ public interface AzureServerConfigOrBuilder
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -74,7 +77,10 @@ public interface AzureServerConfigOrBuilder
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -84,7 +90,10 @@ public interface AzureServerConfigOrBuilder
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -94,7 +103,10 @@ public interface AzureServerConfigOrBuilder
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
@@ -105,7 +117,10 @@ public interface AzureServerConfigOrBuilder
    *
    *
    * <pre>
-   * List of valid Kubernetes versions.
+   * List of all released Kubernetes versions, including ones which are end of
+   * life and can no longer be used.  Filter by the `enabled`
+   * property to limit to currently available versions.
+   * Valid versions supported for both create and update operations
    * </pre>
    *
    * <code>repeated .google.cloud.gkemulticloud.v1.AzureK8sVersionInfo valid_versions = 2;</code>
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServiceProto.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServiceProto.java
index 081e9eab7c57..318617c75e99 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServiceProto.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/AzureServiceProto.java
@@ -75,6 +75,14 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_DeleteAzureNodePoolRequest_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_DeleteAzureNodePoolRequest_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_GetAzureOpenIdConfigRequest_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_GetAzureOpenIdConfigRequest_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_GetAzureJsonWebKeysRequest_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_GetAzureJsonWebKeysRequest_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_GetAzureServerConfigRequest_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -107,6 +115,14 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_GenerateAzureAccessTokenResponse_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_GenerateAzureAccessTokenResponse_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenRequest_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenRequest_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenResponse_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenResponse_fieldAccessorTable;
 
   public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     return descriptor;
@@ -122,183 +138,221 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "/api/client.proto\032\037google/api/field_beha"
           + "vior.proto\032\031google/api/resource.proto\0323g"
           + "oogle/cloud/gkemulticloud/v1/azure_resou"
-          + "rces.proto\032#google/longrunning/operation"
-          + "s.proto\032 google/protobuf/field_mask.prot"
-          + "o\032\037google/protobuf/timestamp.proto\"\340\001\n\031C"
-          + "reateAzureClusterRequest\022B\n\006parent\030\001 \001(\t"
-          + "B2\342A\001\002\372A+\022)gkemulticloud.googleapis.com/"
-          + "AzureCluster\022H\n\razure_cluster\030\002 \001(\0132+.go"
-          + "ogle.cloud.gkemulticloud.v1.AzureCluster"
-          + "B\004\342A\001\002\022\036\n\020azure_cluster_id\030\003 \001(\tB\004\342A\001\002\022\025"
-          + "\n\rvalidate_only\030\004 \001(\010\"\263\001\n\031UpdateAzureClu"
-          + "sterRequest\022H\n\razure_cluster\030\001 \001(\0132+.goo"
-          + "gle.cloud.gkemulticloud.v1.AzureClusterB"
-          + "\004\342A\001\002\022\025\n\rvalidate_only\030\002 \001(\010\0225\n\013update_m"
-          + "ask\030\004 \001(\0132\032.google.protobuf.FieldMaskB\004\342"
-          + "A\001\002\"Z\n\026GetAzureClusterRequest\022@\n\004name\030\001 "
-          + "\001(\tB2\342A\001\002\372A+\n)gkemulticloud.googleapis.c"
-          + "om/AzureCluster\"\205\001\n\030ListAzureClustersReq"
-          + "uest\022B\n\006parent\030\001 \001(\tB2\342A\001\002\372A+\022)gkemultic"
-          + "loud.googleapis.com/AzureCluster\022\021\n\tpage"
-          + "_size\030\002 \001(\005\022\022\n\npage_token\030\003 \001(\t\"y\n\031ListA"
-          + "zureClustersResponse\022C\n\016azure_clusters\030\001"
-          + " \003(\0132+.google.cloud.gkemulticloud.v1.Azu"
-          + "reCluster\022\027\n\017next_page_token\030\002 \001(\t\"\231\001\n\031D"
-          + "eleteAzureClusterRequest\022@\n\004name\030\001 \001(\tB2"
-          + "\342A\001\002\372A+\n)gkemulticloud.googleapis.com/Az"
-          + "ureCluster\022\025\n\rallow_missing\030\002 \001(\010\022\025\n\rval"
-          + "idate_only\030\003 \001(\010\022\014\n\004etag\030\004 \001(\t\"\347\001\n\032Creat"
-          + "eAzureNodePoolRequest\022C\n\006parent\030\001 \001(\tB3\342"
-          + "A\001\002\372A,\022*gkemulticloud.googleapis.com/Azu"
-          + "reNodePool\022K\n\017azure_node_pool\030\002 \001(\0132,.go"
-          + "ogle.cloud.gkemulticloud.v1.AzureNodePoo"
-          + "lB\004\342A\001\002\022 \n\022azure_node_pool_id\030\003 \001(\tB\004\342A\001"
-          + "\002\022\025\n\rvalidate_only\030\004 \001(\010\"\267\001\n\032UpdateAzure"
-          + "NodePoolRequest\022K\n\017azure_node_pool\030\001 \001(\013"
-          + "2,.google.cloud.gkemulticloud.v1.AzureNo"
-          + "dePoolB\004\342A\001\002\022\025\n\rvalidate_only\030\002 \001(\010\0225\n\013u"
-          + "pdate_mask\030\003 \001(\0132\032.google.protobuf.Field"
-          + "MaskB\004\342A\001\002\"\\\n\027GetAzureNodePoolRequest\022A\n"
-          + "\004name\030\001 \001(\tB3\342A\001\002\372A,\n*gkemulticloud.goog"
-          + "leapis.com/AzureNodePool\"\207\001\n\031ListAzureNo"
-          + "dePoolsRequest\022C\n\006parent\030\001 \001(\tB3\342A\001\002\372A,\022"
-          + "*gkemulticloud.googleapis.com/AzureNodeP"
-          + "ool\022\021\n\tpage_size\030\002 \001(\005\022\022\n\npage_token\030\003 \001"
-          + "(\t\"}\n\032ListAzureNodePoolsResponse\022F\n\020azur"
-          + "e_node_pools\030\001 \003(\0132,.google.cloud.gkemul"
-          + "ticloud.v1.AzureNodePool\022\027\n\017next_page_to"
-          + "ken\030\002 \001(\t\"\233\001\n\032DeleteAzureNodePoolRequest"
+          + "rces.proto\0324google/cloud/gkemulticloud/v"
+          + "1/common_resources.proto\032#google/longrun"
+          + "ning/operations.proto\032\033google/protobuf/e"
+          + "mpty.proto\032 google/protobuf/field_mask.p"
+          + "roto\032\037google/protobuf/timestamp.proto\"\340\001"
+          + "\n\031CreateAzureClusterRequest\022B\n\006parent\030\001 "
+          + "\001(\tB2\342A\001\002\372A+\022)gkemulticloud.googleapis.c"
+          + "om/AzureCluster\022H\n\razure_cluster\030\002 \001(\0132+"
+          + ".google.cloud.gkemulticloud.v1.AzureClus"
+          + "terB\004\342A\001\002\022\036\n\020azure_cluster_id\030\003 \001(\tB\004\342A\001"
+          + "\002\022\025\n\rvalidate_only\030\004 \001(\010\"\263\001\n\031UpdateAzure"
+          + "ClusterRequest\022H\n\razure_cluster\030\001 \001(\0132+."
+          + "google.cloud.gkemulticloud.v1.AzureClust"
+          + "erB\004\342A\001\002\022\025\n\rvalidate_only\030\002 \001(\010\0225\n\013updat"
+          + "e_mask\030\004 \001(\0132\032.google.protobuf.FieldMask"
+          + "B\004\342A\001\002\"Z\n\026GetAzureClusterRequest\022@\n\004name"
+          + "\030\001 \001(\tB2\342A\001\002\372A+\n)gkemulticloud.googleapi"
+          + "s.com/AzureCluster\"\205\001\n\030ListAzureClusters"
+          + "Request\022B\n\006parent\030\001 \001(\tB2\342A\001\002\372A+\022)gkemul"
+          + "ticloud.googleapis.com/AzureCluster\022\021\n\tp"
+          + "age_size\030\002 \001(\005\022\022\n\npage_token\030\003 \001(\t\"y\n\031Li"
+          + "stAzureClustersResponse\022C\n\016azure_cluster"
+          + "s\030\001 \003(\0132+.google.cloud.gkemulticloud.v1."
+          + "AzureCluster\022\027\n\017next_page_token\030\002 \001(\t\"\231\001"
+          + "\n\031DeleteAzureClusterRequest\022@\n\004name\030\001 \001("
+          + "\tB2\342A\001\002\372A+\n)gkemulticloud.googleapis.com"
+          + "/AzureCluster\022\025\n\rallow_missing\030\002 \001(\010\022\025\n\r"
+          + "validate_only\030\003 \001(\010\022\014\n\004etag\030\004 \001(\t\"\347\001\n\032Cr"
+          + "eateAzureNodePoolRequest\022C\n\006parent\030\001 \001(\t"
+          + "B3\342A\001\002\372A,\022*gkemulticloud.googleapis.com/"
+          + "AzureNodePool\022K\n\017azure_node_pool\030\002 \001(\0132,"
+          + ".google.cloud.gkemulticloud.v1.AzureNode"
+          + "PoolB\004\342A\001\002\022 \n\022azure_node_pool_id\030\003 \001(\tB\004"
+          + "\342A\001\002\022\025\n\rvalidate_only\030\004 \001(\010\"\267\001\n\032UpdateAz"
+          + "ureNodePoolRequest\022K\n\017azure_node_pool\030\001 "
+          + "\001(\0132,.google.cloud.gkemulticloud.v1.Azur"
+          + "eNodePoolB\004\342A\001\002\022\025\n\rvalidate_only\030\002 \001(\010\0225"
+          + "\n\013update_mask\030\003 \001(\0132\032.google.protobuf.Fi"
+          + "eldMaskB\004\342A\001\002\"\\\n\027GetAzureNodePoolRequest"
           + "\022A\n\004name\030\001 \001(\tB3\342A\001\002\372A,\n*gkemulticloud.g"
-          + "oogleapis.com/AzureNodePool\022\025\n\rvalidate_"
-          + "only\030\002 \001(\010\022\025\n\rallow_missing\030\003 \001(\010\022\014\n\004eta"
-          + "g\030\004 \001(\t\"d\n\033GetAzureServerConfigRequest\022E"
-          + "\n\004name\030\001 \001(\tB7\342A\001\002\372A0\n.gkemulticloud.goo"
-          + "gleapis.com/AzureServerConfig\"\333\001\n\030Create"
-          + "AzureClientRequest\022A\n\006parent\030\001 \001(\tB1\342A\001\002"
-          + "\372A*\022(gkemulticloud.googleapis.com/AzureC"
-          + "lient\022F\n\014azure_client\030\002 \001(\0132*.google.clo"
-          + "ud.gkemulticloud.v1.AzureClientB\004\342A\001\002\022\035\n"
-          + "\017azure_client_id\030\004 \001(\tB\004\342A\001\002\022\025\n\rvalidate"
-          + "_only\030\003 \001(\010\"X\n\025GetAzureClientRequest\022?\n\004"
-          + "name\030\001 \001(\tB1\342A\001\002\372A*\n(gkemulticloud.googl"
-          + "eapis.com/AzureClient\"\203\001\n\027ListAzureClien"
-          + "tsRequest\022A\n\006parent\030\001 \001(\tB1\342A\001\002\372A*\022(gkem"
-          + "ulticloud.googleapis.com/AzureClient\022\021\n\t"
-          + "page_size\030\002 \001(\005\022\022\n\npage_token\030\003 \001(\t\"v\n\030L"
-          + "istAzureClientsResponse\022A\n\razure_clients"
-          + "\030\001 \003(\0132*.google.cloud.gkemulticloud.v1.A"
-          + "zureClient\022\027\n\017next_page_token\030\002 \001(\t\"\211\001\n\030"
-          + "DeleteAzureClientRequest\022?\n\004name\030\001 \001(\tB1"
-          + "\342A\001\002\372A*\n(gkemulticloud.googleapis.com/Az"
-          + "ureClient\022\025\n\rallow_missing\030\002 \001(\010\022\025\n\rvali"
-          + "date_only\030\003 \001(\010\"l\n\037GenerateAzureAccessTo"
-          + "kenRequest\022I\n\razure_cluster\030\001 \001(\tB2\342A\001\002\372"
-          + "A+\n)gkemulticloud.googleapis.com/AzureCl"
-          + "uster\"y\n GenerateAzureAccessTokenRespons"
-          + "e\022\032\n\014access_token\030\001 \001(\tB\004\342A\001\003\0229\n\017expirat"
-          + "ion_time\030\002 \001(\0132\032.google.protobuf.Timesta"
-          + "mpB\004\342A\001\0032\335\035\n\rAzureClusters\022\375\001\n\021CreateAzu"
-          + "reClient\0227.google.cloud.gkemulticloud.v1"
-          + ".CreateAzureClientRequest\032\035.google.longr"
-          + "unning.Operation\"\217\001\312A \n\013AzureClient\022\021Ope"
-          + "rationMetadata\332A#parent,azure_client,azu"
-          + "re_client_id\202\323\344\223\002@\"0/v1/{parent=projects"
-          + "/*/locations/*}/azureClients:\014azure_clie"
-          + "nt\022\263\001\n\016GetAzureClient\0224.google.cloud.gke"
-          + "multicloud.v1.GetAzureClientRequest\032*.go"
-          + "ogle.cloud.gkemulticloud.v1.AzureClient\""
-          + "?\332A\004name\202\323\344\223\0022\0220/v1/{name=projects/*/loc"
-          + "ations/*/azureClients/*}\022\306\001\n\020ListAzureCl"
-          + "ients\0226.google.cloud.gkemulticloud.v1.Li"
-          + "stAzureClientsRequest\0327.google.cloud.gke"
-          + "multicloud.v1.ListAzureClientsResponse\"A"
-          + "\332A\006parent\202\323\344\223\0022\0220/v1/{parent=projects/*/"
-          + "locations/*}/azureClients\022\331\001\n\021DeleteAzur"
+          + "oogleapis.com/AzureNodePool\"\207\001\n\031ListAzur"
+          + "eNodePoolsRequest\022C\n\006parent\030\001 \001(\tB3\342A\001\002\372"
+          + "A,\022*gkemulticloud.googleapis.com/AzureNo"
+          + "dePool\022\021\n\tpage_size\030\002 \001(\005\022\022\n\npage_token\030"
+          + "\003 \001(\t\"}\n\032ListAzureNodePoolsResponse\022F\n\020a"
+          + "zure_node_pools\030\001 \003(\0132,.google.cloud.gke"
+          + "multicloud.v1.AzureNodePool\022\027\n\017next_page"
+          + "_token\030\002 \001(\t\"\233\001\n\032DeleteAzureNodePoolRequ"
+          + "est\022A\n\004name\030\001 \001(\tB3\342A\001\002\372A,\n*gkemulticlou"
+          + "d.googleapis.com/AzureNodePool\022\025\n\rvalida"
+          + "te_only\030\002 \001(\010\022\025\n\rallow_missing\030\003 \001(\010\022\014\n\004"
+          + "etag\030\004 \001(\t\"h\n\033GetAzureOpenIdConfigReques"
+          + "t\022I\n\razure_cluster\030\001 \001(\tB2\342A\001\002\372A+\n)gkemu"
+          + "lticloud.googleapis.com/AzureCluster\"g\n\032"
+          + "GetAzureJsonWebKeysRequest\022I\n\razure_clus"
+          + "ter\030\001 \001(\tB2\342A\001\002\372A+\n)gkemulticloud.google"
+          + "apis.com/AzureCluster\"d\n\033GetAzureServerC"
+          + "onfigRequest\022E\n\004name\030\001 \001(\tB7\342A\001\002\372A0\n.gke"
+          + "multicloud.googleapis.com/AzureServerCon"
+          + "fig\"\333\001\n\030CreateAzureClientRequest\022A\n\006pare"
+          + "nt\030\001 \001(\tB1\342A\001\002\372A*\022(gkemulticloud.googlea"
+          + "pis.com/AzureClient\022F\n\014azure_client\030\002 \001("
+          + "\0132*.google.cloud.gkemulticloud.v1.AzureC"
+          + "lientB\004\342A\001\002\022\035\n\017azure_client_id\030\004 \001(\tB\004\342A"
+          + "\001\002\022\025\n\rvalidate_only\030\003 \001(\010\"X\n\025GetAzureCli"
+          + "entRequest\022?\n\004name\030\001 \001(\tB1\342A\001\002\372A*\n(gkemu"
+          + "lticloud.googleapis.com/AzureClient\"\203\001\n\027"
+          + "ListAzureClientsRequest\022A\n\006parent\030\001 \001(\tB"
+          + "1\342A\001\002\372A*\022(gkemulticloud.googleapis.com/A"
+          + "zureClient\022\021\n\tpage_size\030\002 \001(\005\022\022\n\npage_to"
+          + "ken\030\003 \001(\t\"v\n\030ListAzureClientsResponse\022A\n"
+          + "\razure_clients\030\001 \003(\0132*.google.cloud.gkem"
+          + "ulticloud.v1.AzureClient\022\027\n\017next_page_to"
+          + "ken\030\002 \001(\t\"\211\001\n\030DeleteAzureClientRequest\022?"
+          + "\n\004name\030\001 \001(\tB1\342A\001\002\372A*\n(gkemulticloud.goo"
+          + "gleapis.com/AzureClient\022\025\n\rallow_missing"
+          + "\030\002 \001(\010\022\025\n\rvalidate_only\030\003 \001(\010\"l\n\037Generat"
+          + "eAzureAccessTokenRequest\022I\n\razure_cluste"
+          + "r\030\001 \001(\tB2\342A\001\002\372A+\n)gkemulticloud.googleap"
+          + "is.com/AzureCluster\"y\n GenerateAzureAcce"
+          + "ssTokenResponse\022\032\n\014access_token\030\001 \001(\tB\004\342"
+          + "A\001\003\0229\n\017expiration_time\030\002 \001(\0132\032.google.pr"
+          + "otobuf.TimestampB\004\342A\001\003\"\346\002\n%GenerateAzure"
+          + "ClusterAgentTokenRequest\022I\n\razure_cluste"
+          + "r\030\001 \001(\tB2\342A\001\002\372A+\n)gkemulticloud.googleap"
+          + "is.com/AzureCluster\022\033\n\rsubject_token\030\002 \001"
+          + "(\tB\004\342A\001\002\022 \n\022subject_token_type\030\003 \001(\tB\004\342A"
+          + "\001\002\022\025\n\007version\030\004 \001(\tB\004\342A\001\002\022\032\n\014node_pool_i"
+          + "d\030\005 \001(\tB\004\342A\001\001\022\030\n\ngrant_type\030\006 \001(\tB\004\342A\001\001\022"
+          + "\026\n\010audience\030\007 \001(\tB\004\342A\001\001\022\023\n\005scope\030\010 \001(\tB\004"
+          + "\342A\001\001\022\"\n\024requested_token_type\030\t \001(\tB\004\342A\001\001"
+          + "\022\025\n\007options\030\n \001(\tB\004\342A\001\001\"f\n&GenerateAzure"
+          + "ClusterAgentTokenResponse\022\024\n\014access_toke"
+          + "n\030\001 \001(\t\022\022\n\nexpires_in\030\002 \001(\005\022\022\n\ntoken_typ"
+          + "e\030\003 \001(\t2\314#\n\rAzureClusters\022\375\001\n\021CreateAzur"
           + "eClient\0227.google.cloud.gkemulticloud.v1."
-          + "DeleteAzureClientRequest\032\035.google.longru"
-          + "nning.Operation\"l\312A*\n\025google.protobuf.Em"
-          + "pty\022\021OperationMetadata\332A\004name\202\323\344\223\0022*0/v1"
-          + "/{name=projects/*/locations/*/azureClien"
-          + "ts/*}\022\204\002\n\022CreateAzureCluster\0228.google.cl"
-          + "oud.gkemulticloud.v1.CreateAzureClusterR"
-          + "equest\032\035.google.longrunning.Operation\"\224\001"
-          + "\312A!\n\014AzureCluster\022\021OperationMetadata\332A%p"
-          + "arent,azure_cluster,azure_cluster_id\202\323\344\223"
-          + "\002B\"1/v1/{parent=projects/*/locations/*}/"
-          + "azureClusters:\razure_cluster\022\206\002\n\022UpdateA"
-          + "zureCluster\0228.google.cloud.gkemulticloud"
-          + ".v1.UpdateAzureClusterRequest\032\035.google.l"
-          + "ongrunning.Operation\"\226\001\312A!\n\014AzureCluster"
-          + "\022\021OperationMetadata\332A\031azure_cluster,upda"
-          + "te_mask\202\323\344\223\002P2?/v1/{azure_cluster.name=p"
-          + "rojects/*/locations/*/azureClusters/*}:\r"
-          + "azure_cluster\022\267\001\n\017GetAzureCluster\0225.goog"
-          + "le.cloud.gkemulticloud.v1.GetAzureCluste"
-          + "rRequest\032+.google.cloud.gkemulticloud.v1"
-          + ".AzureCluster\"@\332A\004name\202\323\344\223\0023\0221/v1/{name="
-          + "projects/*/locations/*/azureClusters/*}\022"
-          + "\312\001\n\021ListAzureClusters\0227.google.cloud.gke"
-          + "multicloud.v1.ListAzureClustersRequest\0328"
-          + ".google.cloud.gkemulticloud.v1.ListAzure"
-          + "ClustersResponse\"B\332A\006parent\202\323\344\223\0023\0221/v1/{"
-          + "parent=projects/*/locations/*}/azureClus"
-          + "ters\022\334\001\n\022DeleteAzureCluster\0228.google.clo"
-          + "ud.gkemulticloud.v1.DeleteAzureClusterRe"
-          + "quest\032\035.google.longrunning.Operation\"m\312A"
-          + "*\n\025google.protobuf.Empty\022\021OperationMetad"
-          + "ata\332A\004name\202\323\344\223\0023*1/v1/{name=projects/*/l"
-          + "ocations/*/azureClusters/*}\022\370\001\n\030Generate"
-          + "AzureAccessToken\022>.google.cloud.gkemulti"
-          + "cloud.v1.GenerateAzureAccessTokenRequest"
-          + "\032?.google.cloud.gkemulticloud.v1.Generat"
-          + "eAzureAccessTokenResponse\"[\202\323\344\223\002U\022S/v1/{"
-          + "azure_cluster=projects/*/locations/*/azu"
-          + "reClusters/*}:generateAzureAccessToken\022\236"
-          + "\002\n\023CreateAzureNodePool\0229.google.cloud.gk"
-          + "emulticloud.v1.CreateAzureNodePoolReques"
-          + "t\032\035.google.longrunning.Operation\"\254\001\312A\"\n\r"
-          + "AzureNodePool\022\021OperationMetadata\332A)paren"
-          + "t,azure_node_pool,azure_node_pool_id\202\323\344\223"
-          + "\002U\"B/v1/{parent=projects/*/locations/*/a"
-          + "zureClusters/*}/azureNodePools:\017azure_no"
-          + "de_pool\022\240\002\n\023UpdateAzureNodePool\0229.google"
-          + ".cloud.gkemulticloud.v1.UpdateAzureNodeP"
-          + "oolRequest\032\035.google.longrunning.Operatio"
-          + "n\"\256\001\312A\"\n\rAzureNodePool\022\021OperationMetadat"
-          + "a\332A\033azure_node_pool,update_mask\202\323\344\223\002e2R/"
-          + "v1/{azure_node_pool.name=projects/*/loca"
-          + "tions/*/azureClusters/*/azureNodePools/*"
-          + "}:\017azure_node_pool\022\313\001\n\020GetAzureNodePool\022"
-          + "6.google.cloud.gkemulticloud.v1.GetAzure"
-          + "NodePoolRequest\032,.google.cloud.gkemultic"
-          + "loud.v1.AzureNodePool\"Q\332A\004name\202\323\344\223\002D\022B/v"
-          + "1/{name=projects/*/locations/*/azureClus"
-          + "ters/*/azureNodePools/*}\022\336\001\n\022ListAzureNo"
-          + "dePools\0228.google.cloud.gkemulticloud.v1."
-          + "ListAzureNodePoolsRequest\0329.google.cloud"
-          + ".gkemulticloud.v1.ListAzureNodePoolsResp"
-          + "onse\"S\332A\006parent\202\323\344\223\002D\022B/v1/{parent=proje"
-          + "cts/*/locations/*/azureClusters/*}/azure"
-          + "NodePools\022\357\001\n\023DeleteAzureNodePool\0229.goog"
-          + "le.cloud.gkemulticloud.v1.DeleteAzureNod"
-          + "ePoolRequest\032\035.google.longrunning.Operat"
-          + "ion\"~\312A*\n\025google.protobuf.Empty\022\021Operati"
-          + "onMetadata\332A\004name\202\323\344\223\002D*B/v1/{name=proje"
-          + "cts/*/locations/*/azureClusters/*/azureN"
-          + "odePools/*}\022\310\001\n\024GetAzureServerConfig\022:.g"
-          + "oogle.cloud.gkemulticloud.v1.GetAzureSer"
-          + "verConfigRequest\0320.google.cloud.gkemulti"
-          + "cloud.v1.AzureServerConfig\"B\332A\004name\202\323\344\223\002"
-          + "5\0223/v1/{name=projects/*/locations/*/azur"
-          + "eServerConfig}\032P\312A\034gkemulticloud.googlea"
-          + "pis.com\322A.https://www.googleapis.com/aut"
-          + "h/cloud-platformB\344\001\n!com.google.cloud.gk"
-          + "emulticloud.v1B\021AzureServiceProtoP\001ZGclo"
-          + "ud.google.com/go/gkemulticloud/apiv1/gke"
-          + "multicloudpb;gkemulticloudpb\252\002\035Google.Cl"
-          + "oud.GkeMultiCloud.V1\312\002\035Google\\Cloud\\GkeM"
-          + "ultiCloud\\V1\352\002 Google::Cloud::GkeMultiCl"
-          + "oud::V1b\006proto3"
+          + "CreateAzureClientRequest\032\035.google.longru"
+          + "nning.Operation\"\217\001\312A \n\013AzureClient\022\021Oper"
+          + "ationMetadata\332A#parent,azure_client,azur"
+          + "e_client_id\202\323\344\223\002@\"0/v1/{parent=projects/"
+          + "*/locations/*}/azureClients:\014azure_clien"
+          + "t\022\263\001\n\016GetAzureClient\0224.google.cloud.gkem"
+          + "ulticloud.v1.GetAzureClientRequest\032*.goo"
+          + "gle.cloud.gkemulticloud.v1.AzureClient\"?"
+          + "\332A\004name\202\323\344\223\0022\0220/v1/{name=projects/*/loca"
+          + "tions/*/azureClients/*}\022\306\001\n\020ListAzureCli"
+          + "ents\0226.google.cloud.gkemulticloud.v1.Lis"
+          + "tAzureClientsRequest\0327.google.cloud.gkem"
+          + "ulticloud.v1.ListAzureClientsResponse\"A\332"
+          + "A\006parent\202\323\344\223\0022\0220/v1/{parent=projects/*/l"
+          + "ocations/*}/azureClients\022\331\001\n\021DeleteAzure"
+          + "Client\0227.google.cloud.gkemulticloud.v1.D"
+          + "eleteAzureClientRequest\032\035.google.longrun"
+          + "ning.Operation\"l\312A*\n\025google.protobuf.Emp"
+          + "ty\022\021OperationMetadata\332A\004name\202\323\344\223\0022*0/v1/"
+          + "{name=projects/*/locations/*/azureClient"
+          + "s/*}\022\204\002\n\022CreateAzureCluster\0228.google.clo"
+          + "ud.gkemulticloud.v1.CreateAzureClusterRe"
+          + "quest\032\035.google.longrunning.Operation\"\224\001\312"
+          + "A!\n\014AzureCluster\022\021OperationMetadata\332A%pa"
+          + "rent,azure_cluster,azure_cluster_id\202\323\344\223\002"
+          + "B\"1/v1/{parent=projects/*/locations/*}/a"
+          + "zureClusters:\razure_cluster\022\206\002\n\022UpdateAz"
+          + "ureCluster\0228.google.cloud.gkemulticloud."
+          + "v1.UpdateAzureClusterRequest\032\035.google.lo"
+          + "ngrunning.Operation\"\226\001\312A!\n\014AzureCluster\022"
+          + "\021OperationMetadata\332A\031azure_cluster,updat"
+          + "e_mask\202\323\344\223\002P2?/v1/{azure_cluster.name=pr"
+          + "ojects/*/locations/*/azureClusters/*}:\ra"
+          + "zure_cluster\022\267\001\n\017GetAzureCluster\0225.googl"
+          + "e.cloud.gkemulticloud.v1.GetAzureCluster"
+          + "Request\032+.google.cloud.gkemulticloud.v1."
+          + "AzureCluster\"@\332A\004name\202\323\344\223\0023\0221/v1/{name=p"
+          + "rojects/*/locations/*/azureClusters/*}\022\312"
+          + "\001\n\021ListAzureClusters\0227.google.cloud.gkem"
+          + "ulticloud.v1.ListAzureClustersRequest\0328."
+          + "google.cloud.gkemulticloud.v1.ListAzureC"
+          + "lustersResponse\"B\332A\006parent\202\323\344\223\0023\0221/v1/{p"
+          + "arent=projects/*/locations/*}/azureClust"
+          + "ers\022\334\001\n\022DeleteAzureCluster\0228.google.clou"
+          + "d.gkemulticloud.v1.DeleteAzureClusterReq"
+          + "uest\032\035.google.longrunning.Operation\"m\312A*"
+          + "\n\025google.protobuf.Empty\022\021OperationMetada"
+          + "ta\332A\004name\202\323\344\223\0023*1/v1/{name=projects/*/lo"
+          + "cations/*/azureClusters/*}\022\223\002\n\036GenerateA"
+          + "zureClusterAgentToken\022D.google.cloud.gke"
+          + "multicloud.v1.GenerateAzureClusterAgentT"
+          + "okenRequest\032E.google.cloud.gkemulticloud"
+          + ".v1.GenerateAzureClusterAgentTokenRespon"
+          + "se\"d\202\323\344\223\002^\"Y/v1/{azure_cluster=projects/"
+          + "*/locations/*/azureClusters/*}:generateA"
+          + "zureClusterAgentToken:\001*\022\370\001\n\030GenerateAzu"
+          + "reAccessToken\022>.google.cloud.gkemulticlo"
+          + "ud.v1.GenerateAzureAccessTokenRequest\032?."
+          + "google.cloud.gkemulticloud.v1.GenerateAz"
+          + "ureAccessTokenResponse\"[\202\323\344\223\002U\022S/v1/{azu"
+          + "re_cluster=projects/*/locations/*/azureC"
+          + "lusters/*}:generateAzureAccessToken\022\236\002\n\023"
+          + "CreateAzureNodePool\0229.google.cloud.gkemu"
+          + "lticloud.v1.CreateAzureNodePoolRequest\032\035"
+          + ".google.longrunning.Operation\"\254\001\312A\"\n\rAzu"
+          + "reNodePool\022\021OperationMetadata\332A)parent,a"
+          + "zure_node_pool,azure_node_pool_id\202\323\344\223\002U\""
+          + "B/v1/{parent=projects/*/locations/*/azur"
+          + "eClusters/*}/azureNodePools:\017azure_node_"
+          + "pool\022\240\002\n\023UpdateAzureNodePool\0229.google.cl"
+          + "oud.gkemulticloud.v1.UpdateAzureNodePool"
+          + "Request\032\035.google.longrunning.Operation\"\256"
+          + "\001\312A\"\n\rAzureNodePool\022\021OperationMetadata\332A"
+          + "\033azure_node_pool,update_mask\202\323\344\223\002e2R/v1/"
+          + "{azure_node_pool.name=projects/*/locatio"
+          + "ns/*/azureClusters/*/azureNodePools/*}:\017"
+          + "azure_node_pool\022\313\001\n\020GetAzureNodePool\0226.g"
+          + "oogle.cloud.gkemulticloud.v1.GetAzureNod"
+          + "ePoolRequest\032,.google.cloud.gkemulticlou"
+          + "d.v1.AzureNodePool\"Q\332A\004name\202\323\344\223\002D\022B/v1/{"
+          + "name=projects/*/locations/*/azureCluster"
+          + "s/*/azureNodePools/*}\022\336\001\n\022ListAzureNodeP"
+          + "ools\0228.google.cloud.gkemulticloud.v1.Lis"
+          + "tAzureNodePoolsRequest\0329.google.cloud.gk"
+          + "emulticloud.v1.ListAzureNodePoolsRespons"
+          + "e\"S\332A\006parent\202\323\344\223\002D\022B/v1/{parent=projects"
+          + "/*/locations/*/azureClusters/*}/azureNod"
+          + "ePools\022\357\001\n\023DeleteAzureNodePool\0229.google."
+          + "cloud.gkemulticloud.v1.DeleteAzureNodePo"
+          + "olRequest\032\035.google.longrunning.Operation"
+          + "\"~\312A*\n\025google.protobuf.Empty\022\021OperationM"
+          + "etadata\332A\004name\202\323\344\223\002D*B/v1/{name=projects"
+          + "/*/locations/*/azureClusters/*/azureNode"
+          + "Pools/*}\022\371\001\n\024GetAzureOpenIdConfig\022:.goog"
+          + "le.cloud.gkemulticloud.v1.GetAzureOpenId"
+          + "ConfigRequest\0320.google.cloud.gkemulticlo"
+          + "ud.v1.AzureOpenIdConfig\"s\332A\razure_cluste"
+          + "r\202\323\344\223\002]\022[/v1/{azure_cluster=projects/*/l"
+          + "ocations/*/azureClusters/*}/.well-known/"
+          + "openid-configuration\022\332\001\n\023GetAzureJsonWeb"
+          + "Keys\0229.google.cloud.gkemulticloud.v1.Get"
+          + "AzureJsonWebKeysRequest\032/.google.cloud.g"
+          + "kemulticloud.v1.AzureJsonWebKeys\"W\332A\razu"
+          + "re_cluster\202\323\344\223\002A\022?/v1/{azure_cluster=pro"
+          + "jects/*/locations/*/azureClusters/*}/jwk"
+          + "s\022\310\001\n\024GetAzureServerConfig\022:.google.clou"
+          + "d.gkemulticloud.v1.GetAzureServerConfigR"
+          + "equest\0320.google.cloud.gkemulticloud.v1.A"
+          + "zureServerConfig\"B\332A\004name\202\323\344\223\0025\0223/v1/{na"
+          + "me=projects/*/locations/*/azureServerCon"
+          + "fig}\032P\312A\034gkemulticloud.googleapis.com\322A."
+          + "https://www.googleapis.com/auth/cloud-pl"
+          + "atformB\344\001\n!com.google.cloud.gkemulticlou"
+          + "d.v1B\021AzureServiceProtoP\001ZGcloud.google."
+          + "com/go/gkemulticloud/apiv1/gkemulticloud"
+          + "pb;gkemulticloudpb\252\002\035Google.Cloud.GkeMul"
+          + "tiCloud.V1\312\002\035Google\\Cloud\\GkeMultiCloud\\"
+          + "V1\352\002 Google::Cloud::GkeMultiCloud::V1b\006p"
+          + "roto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -309,7 +363,9 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               com.google.api.FieldBehaviorProto.getDescriptor(),
               com.google.api.ResourceProto.getDescriptor(),
               com.google.cloud.gkemulticloud.v1.AzureResourcesProto.getDescriptor(),
+              com.google.cloud.gkemulticloud.v1.CommonResourcesProto.getDescriptor(),
               com.google.longrunning.OperationsProto.getDescriptor(),
+              com.google.protobuf.EmptyProto.getDescriptor(),
               com.google.protobuf.FieldMaskProto.getDescriptor(),
               com.google.protobuf.TimestampProto.getDescriptor(),
             });
@@ -409,8 +465,24 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
             new java.lang.String[] {
               "Name", "ValidateOnly", "AllowMissing", "Etag",
             });
-    internal_static_google_cloud_gkemulticloud_v1_GetAzureServerConfigRequest_descriptor =
+    internal_static_google_cloud_gkemulticloud_v1_GetAzureOpenIdConfigRequest_descriptor =
         getDescriptor().getMessageTypes().get(12);
+    internal_static_google_cloud_gkemulticloud_v1_GetAzureOpenIdConfigRequest_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_GetAzureOpenIdConfigRequest_descriptor,
+            new java.lang.String[] {
+              "AzureCluster",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_GetAzureJsonWebKeysRequest_descriptor =
+        getDescriptor().getMessageTypes().get(13);
+    internal_static_google_cloud_gkemulticloud_v1_GetAzureJsonWebKeysRequest_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_GetAzureJsonWebKeysRequest_descriptor,
+            new java.lang.String[] {
+              "AzureCluster",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_GetAzureServerConfigRequest_descriptor =
+        getDescriptor().getMessageTypes().get(14);
     internal_static_google_cloud_gkemulticloud_v1_GetAzureServerConfigRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_GetAzureServerConfigRequest_descriptor,
@@ -418,7 +490,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Name",
             });
     internal_static_google_cloud_gkemulticloud_v1_CreateAzureClientRequest_descriptor =
-        getDescriptor().getMessageTypes().get(13);
+        getDescriptor().getMessageTypes().get(15);
     internal_static_google_cloud_gkemulticloud_v1_CreateAzureClientRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_CreateAzureClientRequest_descriptor,
@@ -426,7 +498,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Parent", "AzureClient", "AzureClientId", "ValidateOnly",
             });
     internal_static_google_cloud_gkemulticloud_v1_GetAzureClientRequest_descriptor =
-        getDescriptor().getMessageTypes().get(14);
+        getDescriptor().getMessageTypes().get(16);
     internal_static_google_cloud_gkemulticloud_v1_GetAzureClientRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_GetAzureClientRequest_descriptor,
@@ -434,7 +506,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Name",
             });
     internal_static_google_cloud_gkemulticloud_v1_ListAzureClientsRequest_descriptor =
-        getDescriptor().getMessageTypes().get(15);
+        getDescriptor().getMessageTypes().get(17);
     internal_static_google_cloud_gkemulticloud_v1_ListAzureClientsRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_ListAzureClientsRequest_descriptor,
@@ -442,7 +514,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Parent", "PageSize", "PageToken",
             });
     internal_static_google_cloud_gkemulticloud_v1_ListAzureClientsResponse_descriptor =
-        getDescriptor().getMessageTypes().get(16);
+        getDescriptor().getMessageTypes().get(18);
     internal_static_google_cloud_gkemulticloud_v1_ListAzureClientsResponse_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_ListAzureClientsResponse_descriptor,
@@ -450,7 +522,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "AzureClients", "NextPageToken",
             });
     internal_static_google_cloud_gkemulticloud_v1_DeleteAzureClientRequest_descriptor =
-        getDescriptor().getMessageTypes().get(17);
+        getDescriptor().getMessageTypes().get(19);
     internal_static_google_cloud_gkemulticloud_v1_DeleteAzureClientRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_DeleteAzureClientRequest_descriptor,
@@ -458,7 +530,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Name", "AllowMissing", "ValidateOnly",
             });
     internal_static_google_cloud_gkemulticloud_v1_GenerateAzureAccessTokenRequest_descriptor =
-        getDescriptor().getMessageTypes().get(18);
+        getDescriptor().getMessageTypes().get(20);
     internal_static_google_cloud_gkemulticloud_v1_GenerateAzureAccessTokenRequest_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_GenerateAzureAccessTokenRequest_descriptor,
@@ -466,13 +538,38 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "AzureCluster",
             });
     internal_static_google_cloud_gkemulticloud_v1_GenerateAzureAccessTokenResponse_descriptor =
-        getDescriptor().getMessageTypes().get(19);
+        getDescriptor().getMessageTypes().get(21);
     internal_static_google_cloud_gkemulticloud_v1_GenerateAzureAccessTokenResponse_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_GenerateAzureAccessTokenResponse_descriptor,
             new java.lang.String[] {
               "AccessToken", "ExpirationTime",
             });
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenRequest_descriptor =
+        getDescriptor().getMessageTypes().get(22);
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenRequest_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenRequest_descriptor,
+            new java.lang.String[] {
+              "AzureCluster",
+              "SubjectToken",
+              "SubjectTokenType",
+              "Version",
+              "NodePoolId",
+              "GrantType",
+              "Audience",
+              "Scope",
+              "RequestedTokenType",
+              "Options",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenResponse_descriptor =
+        getDescriptor().getMessageTypes().get(23);
+    internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenResponse_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenResponse_descriptor,
+            new java.lang.String[] {
+              "AccessToken", "ExpiresIn", "TokenType",
+            });
     com.google.protobuf.ExtensionRegistry registry =
         com.google.protobuf.ExtensionRegistry.newInstance();
     registry.add(com.google.api.ClientProto.defaultHost);
@@ -489,7 +586,9 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     com.google.api.FieldBehaviorProto.getDescriptor();
     com.google.api.ResourceProto.getDescriptor();
     com.google.cloud.gkemulticloud.v1.AzureResourcesProto.getDescriptor();
+    com.google.cloud.gkemulticloud.v1.CommonResourcesProto.getDescriptor();
     com.google.longrunning.OperationsProto.getDescriptor();
+    com.google.protobuf.EmptyProto.getDescriptor();
     com.google.protobuf.FieldMaskProto.getDescriptor();
     com.google.protobuf.TimestampProto.getDescriptor();
   }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/BinaryAuthorization.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/BinaryAuthorization.java
new file mode 100644
index 000000000000..11c4ef79291b
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/BinaryAuthorization.java
@@ -0,0 +1,780 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/common_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * Configuration for Binary Authorization.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.BinaryAuthorization}
+ */
+public final class BinaryAuthorization extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.BinaryAuthorization)
+    BinaryAuthorizationOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use BinaryAuthorization.newBuilder() to construct.
+  private BinaryAuthorization(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private BinaryAuthorization() {
+    evaluationMode_ = 0;
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new BinaryAuthorization();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.CommonResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_BinaryAuthorization_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.CommonResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_BinaryAuthorization_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorization.class,
+            com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder.class);
+  }
+
+  /**
+   *
+   *
+   * <pre>
+   * Binary Authorization mode of operation.
+   * </pre>
+   *
+   * Protobuf enum {@code google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode}
+   */
+  public enum EvaluationMode implements com.google.protobuf.ProtocolMessageEnum {
+    /**
+     *
+     *
+     * <pre>
+     * Default value
+     * </pre>
+     *
+     * <code>EVALUATION_MODE_UNSPECIFIED = 0;</code>
+     */
+    EVALUATION_MODE_UNSPECIFIED(0),
+    /**
+     *
+     *
+     * <pre>
+     * Disable BinaryAuthorization
+     * </pre>
+     *
+     * <code>DISABLED = 1;</code>
+     */
+    DISABLED(1),
+    /**
+     *
+     *
+     * <pre>
+     * Enforce Kubernetes admission requests with BinaryAuthorization using the
+     * project's singleton policy.
+     * </pre>
+     *
+     * <code>PROJECT_SINGLETON_POLICY_ENFORCE = 2;</code>
+     */
+    PROJECT_SINGLETON_POLICY_ENFORCE(2),
+    UNRECOGNIZED(-1),
+    ;
+
+    /**
+     *
+     *
+     * <pre>
+     * Default value
+     * </pre>
+     *
+     * <code>EVALUATION_MODE_UNSPECIFIED = 0;</code>
+     */
+    public static final int EVALUATION_MODE_UNSPECIFIED_VALUE = 0;
+    /**
+     *
+     *
+     * <pre>
+     * Disable BinaryAuthorization
+     * </pre>
+     *
+     * <code>DISABLED = 1;</code>
+     */
+    public static final int DISABLED_VALUE = 1;
+    /**
+     *
+     *
+     * <pre>
+     * Enforce Kubernetes admission requests with BinaryAuthorization using the
+     * project's singleton policy.
+     * </pre>
+     *
+     * <code>PROJECT_SINGLETON_POLICY_ENFORCE = 2;</code>
+     */
+    public static final int PROJECT_SINGLETON_POLICY_ENFORCE_VALUE = 2;
+
+    public final int getNumber() {
+      if (this == UNRECOGNIZED) {
+        throw new java.lang.IllegalArgumentException(
+            "Can't get the number of an unknown enum value.");
+      }
+      return value;
+    }
+
+    /**
+     * @param value The numeric wire value of the corresponding enum entry.
+     * @return The enum associated with the given numeric wire value.
+     * @deprecated Use {@link #forNumber(int)} instead.
+     */
+    @java.lang.Deprecated
+    public static EvaluationMode valueOf(int value) {
+      return forNumber(value);
+    }
+
+    /**
+     * @param value The numeric wire value of the corresponding enum entry.
+     * @return The enum associated with the given numeric wire value.
+     */
+    public static EvaluationMode forNumber(int value) {
+      switch (value) {
+        case 0:
+          return EVALUATION_MODE_UNSPECIFIED;
+        case 1:
+          return DISABLED;
+        case 2:
+          return PROJECT_SINGLETON_POLICY_ENFORCE;
+        default:
+          return null;
+      }
+    }
+
+    public static com.google.protobuf.Internal.EnumLiteMap<EvaluationMode> internalGetValueMap() {
+      return internalValueMap;
+    }
+
+    private static final com.google.protobuf.Internal.EnumLiteMap<EvaluationMode> internalValueMap =
+        new com.google.protobuf.Internal.EnumLiteMap<EvaluationMode>() {
+          public EvaluationMode findValueByNumber(int number) {
+            return EvaluationMode.forNumber(number);
+          }
+        };
+
+    public final com.google.protobuf.Descriptors.EnumValueDescriptor getValueDescriptor() {
+      if (this == UNRECOGNIZED) {
+        throw new java.lang.IllegalStateException(
+            "Can't get the descriptor of an unrecognized enum value.");
+      }
+      return getDescriptor().getValues().get(ordinal());
+    }
+
+    public final com.google.protobuf.Descriptors.EnumDescriptor getDescriptorForType() {
+      return getDescriptor();
+    }
+
+    public static final com.google.protobuf.Descriptors.EnumDescriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDescriptor()
+          .getEnumTypes()
+          .get(0);
+    }
+
+    private static final EvaluationMode[] VALUES = values();
+
+    public static EvaluationMode valueOf(com.google.protobuf.Descriptors.EnumValueDescriptor desc) {
+      if (desc.getType() != getDescriptor()) {
+        throw new java.lang.IllegalArgumentException("EnumValueDescriptor is not for this type.");
+      }
+      if (desc.getIndex() == -1) {
+        return UNRECOGNIZED;
+      }
+      return VALUES[desc.getIndex()];
+    }
+
+    private final int value;
+
+    private EvaluationMode(int value) {
+      this.value = value;
+    }
+
+    // @@protoc_insertion_point(enum_scope:google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode)
+  }
+
+  public static final int EVALUATION_MODE_FIELD_NUMBER = 1;
+  private int evaluationMode_ = 0;
+  /**
+   *
+   *
+   * <pre>
+   * Mode of operation for binauthz policy evaluation. If unspecified, defaults
+   * to DISABLED.
+   * </pre>
+   *
+   * <code>.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode evaluation_mode = 1;
+   * </code>
+   *
+   * @return The enum numeric value on the wire for evaluationMode.
+   */
+  @java.lang.Override
+  public int getEvaluationModeValue() {
+    return evaluationMode_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Mode of operation for binauthz policy evaluation. If unspecified, defaults
+   * to DISABLED.
+   * </pre>
+   *
+   * <code>.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode evaluation_mode = 1;
+   * </code>
+   *
+   * @return The evaluationMode.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode getEvaluationMode() {
+    com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode result =
+        com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode.forNumber(
+            evaluationMode_);
+    return result == null
+        ? com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode.UNRECOGNIZED
+        : result;
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (evaluationMode_
+        != com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode
+            .EVALUATION_MODE_UNSPECIFIED
+            .getNumber()) {
+      output.writeEnum(1, evaluationMode_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (evaluationMode_
+        != com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode
+            .EVALUATION_MODE_UNSPECIFIED
+            .getNumber()) {
+      size += com.google.protobuf.CodedOutputStream.computeEnumSize(1, evaluationMode_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.BinaryAuthorization)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.BinaryAuthorization other =
+        (com.google.cloud.gkemulticloud.v1.BinaryAuthorization) obj;
+
+    if (evaluationMode_ != other.evaluationMode_) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + EVALUATION_MODE_FIELD_NUMBER;
+    hash = (53 * hash) + evaluationMode_;
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.BinaryAuthorization prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Configuration for Binary Authorization.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.BinaryAuthorization}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.BinaryAuthorization)
+      com.google.cloud.gkemulticloud.v1.BinaryAuthorizationOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.CommonResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_BinaryAuthorization_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.CommonResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_BinaryAuthorization_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.BinaryAuthorization.class,
+              com.google.cloud.gkemulticloud.v1.BinaryAuthorization.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.BinaryAuthorization.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      evaluationMode_ = 0;
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.CommonResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_BinaryAuthorization_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.BinaryAuthorization getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.BinaryAuthorization build() {
+      com.google.cloud.gkemulticloud.v1.BinaryAuthorization result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.BinaryAuthorization buildPartial() {
+      com.google.cloud.gkemulticloud.v1.BinaryAuthorization result =
+          new com.google.cloud.gkemulticloud.v1.BinaryAuthorization(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.BinaryAuthorization result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.evaluationMode_ = evaluationMode_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.BinaryAuthorization) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.BinaryAuthorization) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.BinaryAuthorization other) {
+      if (other == com.google.cloud.gkemulticloud.v1.BinaryAuthorization.getDefaultInstance())
+        return this;
+      if (other.evaluationMode_ != 0) {
+        setEvaluationModeValue(other.getEvaluationModeValue());
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 8:
+              {
+                evaluationMode_ = input.readEnum();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 8
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private int evaluationMode_ = 0;
+    /**
+     *
+     *
+     * <pre>
+     * Mode of operation for binauthz policy evaluation. If unspecified, defaults
+     * to DISABLED.
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode evaluation_mode = 1;
+     * </code>
+     *
+     * @return The enum numeric value on the wire for evaluationMode.
+     */
+    @java.lang.Override
+    public int getEvaluationModeValue() {
+      return evaluationMode_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Mode of operation for binauthz policy evaluation. If unspecified, defaults
+     * to DISABLED.
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode evaluation_mode = 1;
+     * </code>
+     *
+     * @param value The enum numeric value on the wire for evaluationMode to set.
+     * @return This builder for chaining.
+     */
+    public Builder setEvaluationModeValue(int value) {
+      evaluationMode_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Mode of operation for binauthz policy evaluation. If unspecified, defaults
+     * to DISABLED.
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode evaluation_mode = 1;
+     * </code>
+     *
+     * @return The evaluationMode.
+     */
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode
+        getEvaluationMode() {
+      com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode result =
+          com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode.forNumber(
+              evaluationMode_);
+      return result == null
+          ? com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode.UNRECOGNIZED
+          : result;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Mode of operation for binauthz policy evaluation. If unspecified, defaults
+     * to DISABLED.
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode evaluation_mode = 1;
+     * </code>
+     *
+     * @param value The evaluationMode to set.
+     * @return This builder for chaining.
+     */
+    public Builder setEvaluationMode(
+        com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      bitField0_ |= 0x00000001;
+      evaluationMode_ = value.getNumber();
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Mode of operation for binauthz policy evaluation. If unspecified, defaults
+     * to DISABLED.
+     * </pre>
+     *
+     * <code>.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode evaluation_mode = 1;
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearEvaluationMode() {
+      bitField0_ = (bitField0_ & ~0x00000001);
+      evaluationMode_ = 0;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.BinaryAuthorization)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.BinaryAuthorization)
+  private static final com.google.cloud.gkemulticloud.v1.BinaryAuthorization DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.BinaryAuthorization();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.BinaryAuthorization getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<BinaryAuthorization> PARSER =
+      new com.google.protobuf.AbstractParser<BinaryAuthorization>() {
+        @java.lang.Override
+        public BinaryAuthorization parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<BinaryAuthorization> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<BinaryAuthorization> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.BinaryAuthorization getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/BinaryAuthorizationOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/BinaryAuthorizationOrBuilder.java
new file mode 100644
index 000000000000..b373a21d2d32
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/BinaryAuthorizationOrBuilder.java
@@ -0,0 +1,54 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/common_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface BinaryAuthorizationOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.BinaryAuthorization)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Mode of operation for binauthz policy evaluation. If unspecified, defaults
+   * to DISABLED.
+   * </pre>
+   *
+   * <code>.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode evaluation_mode = 1;
+   * </code>
+   *
+   * @return The enum numeric value on the wire for evaluationMode.
+   */
+  int getEvaluationModeValue();
+  /**
+   *
+   *
+   * <pre>
+   * Mode of operation for binauthz policy evaluation. If unspecified, defaults
+   * to DISABLED.
+   * </pre>
+   *
+   * <code>.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode evaluation_mode = 1;
+   * </code>
+   *
+   * @return The evaluationMode.
+   */
+  com.google.cloud.gkemulticloud.v1.BinaryAuthorization.EvaluationMode getEvaluationMode();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CommonResourcesProto.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CommonResourcesProto.java
index 4c8605ebdd20..1992f0efd929 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CommonResourcesProto.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CommonResourcesProto.java
@@ -27,6 +27,10 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
     registerAllExtensions((com.google.protobuf.ExtensionRegistryLite) registry);
   }
 
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_Jwk_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_Jwk_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_gkemulticloud_v1_WorkloadIdentityConfig_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -63,6 +67,10 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_gkemulticloud_v1_ManagedPrometheusConfig_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_gkemulticloud_v1_ManagedPrometheusConfig_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_gkemulticloud_v1_BinaryAuthorization_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_gkemulticloud_v1_BinaryAuthorization_fieldAccessorTable;
 
   public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
     return descriptor;
@@ -75,42 +83,50 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
       "\n4google/cloud/gkemulticloud/v1/common_r"
           + "esources.proto\022\035google.cloud.gkemulticlo"
           + "ud.v1\032\037google/api/field_behavior.proto\032\037"
-          + "google/protobuf/timestamp.proto\"^\n\026Workl"
-          + "oadIdentityConfig\022\022\n\nissuer_uri\030\001 \001(\t\022\025\n"
-          + "\rworkload_pool\030\002 \001(\t\022\031\n\021identity_provide"
-          + "r\030\003 \001(\t\"4\n\021MaxPodsConstraint\022\037\n\021max_pods"
-          + "_per_node\030\001 \001(\003B\004\342A\001\002\"\207\002\n\021OperationMetad"
-          + "ata\0225\n\013create_time\030\001 \001(\0132\032.google.protob"
-          + "uf.TimestampB\004\342A\001\003\0222\n\010end_time\030\002 \001(\0132\032.g"
-          + "oogle.protobuf.TimestampB\004\342A\001\003\022\024\n\006target"
-          + "\030\003 \001(\tB\004\342A\001\003\022\033\n\rstatus_detail\030\004 \001(\tB\004\342A\001"
-          + "\003\022\032\n\014error_detail\030\005 \001(\tB\004\342A\001\003\022\022\n\004verb\030\007 "
-          + "\001(\tB\004\342A\001\003\022$\n\026requested_cancellation\030\006 \001("
-          + "\010B\004\342A\001\003\"\325\001\n\tNodeTaint\022\021\n\003key\030\001 \001(\tB\004\342A\001\002"
-          + "\022\023\n\005value\030\002 \001(\tB\004\342A\001\002\022E\n\006effect\030\003 \001(\0162/."
-          + "google.cloud.gkemulticloud.v1.NodeTaint."
-          + "EffectB\004\342A\001\002\"Y\n\006Effect\022\026\n\022EFFECT_UNSPECI"
-          + "FIED\020\000\022\017\n\013NO_SCHEDULE\020\001\022\026\n\022PREFER_NO_SCH"
-          + "EDULE\020\002\022\016\n\nNO_EXECUTE\020\003\"8\n\005Fleet\022\025\n\007proj"
-          + "ect\030\001 \001(\tB\004\342A\001\002\022\030\n\nmembership\030\002 \001(\tB\004\342A\001"
-          + "\003\"`\n\rLoggingConfig\022O\n\020component_config\030\001"
-          + " \001(\01325.google.cloud.gkemulticloud.v1.Log"
-          + "gingComponentConfig\"\302\001\n\026LoggingComponent"
-          + "Config\022Z\n\021enable_components\030\001 \003(\0162?.goog"
-          + "le.cloud.gkemulticloud.v1.LoggingCompone"
-          + "ntConfig.Component\"L\n\tComponent\022\031\n\025COMPO"
-          + "NENT_UNSPECIFIED\020\000\022\025\n\021SYSTEM_COMPONENTS\020"
-          + "\001\022\r\n\tWORKLOADS\020\002\"m\n\020MonitoringConfig\022Y\n\031"
-          + "managed_prometheus_config\030\002 \001(\01326.google"
-          + ".cloud.gkemulticloud.v1.ManagedPrometheu"
-          + "sConfig\"*\n\027ManagedPrometheusConfig\022\017\n\007en"
-          + "abled\030\001 \001(\010B\347\001\n!com.google.cloud.gkemult"
-          + "icloud.v1B\024CommonResourcesProtoP\001ZGcloud"
-          + ".google.com/go/gkemulticloud/apiv1/gkemu"
-          + "lticloudpb;gkemulticloudpb\252\002\035Google.Clou"
-          + "d.GkeMultiCloud.V1\312\002\035Google\\Cloud\\GkeMul"
-          + "tiCloud\\V1\352\002 Google::Cloud::GkeMultiClou"
-          + "d::V1b\006proto3"
+          + "google/protobuf/timestamp.proto\"r\n\003Jwk\022\013"
+          + "\n\003kty\030\001 \001(\t\022\013\n\003alg\030\002 \001(\t\022\013\n\003use\030\003 \001(\t\022\013\n"
+          + "\003kid\030\004 \001(\t\022\t\n\001n\030\005 \001(\t\022\t\n\001e\030\006 \001(\t\022\t\n\001x\030\007 "
+          + "\001(\t\022\t\n\001y\030\010 \001(\t\022\013\n\003crv\030\t \001(\t\"^\n\026WorkloadI"
+          + "dentityConfig\022\022\n\nissuer_uri\030\001 \001(\t\022\025\n\rwor"
+          + "kload_pool\030\002 \001(\t\022\031\n\021identity_provider\030\003 "
+          + "\001(\t\"4\n\021MaxPodsConstraint\022\037\n\021max_pods_per"
+          + "_node\030\001 \001(\003B\004\342A\001\002\"\207\002\n\021OperationMetadata\022"
+          + "5\n\013create_time\030\001 \001(\0132\032.google.protobuf.T"
+          + "imestampB\004\342A\001\003\0222\n\010end_time\030\002 \001(\0132\032.googl"
+          + "e.protobuf.TimestampB\004\342A\001\003\022\024\n\006target\030\003 \001"
+          + "(\tB\004\342A\001\003\022\033\n\rstatus_detail\030\004 \001(\tB\004\342A\001\003\022\032\n"
+          + "\014error_detail\030\005 \001(\tB\004\342A\001\003\022\022\n\004verb\030\007 \001(\tB"
+          + "\004\342A\001\003\022$\n\026requested_cancellation\030\006 \001(\010B\004\342"
+          + "A\001\003\"\325\001\n\tNodeTaint\022\021\n\003key\030\001 \001(\tB\004\342A\001\002\022\023\n\005"
+          + "value\030\002 \001(\tB\004\342A\001\002\022E\n\006effect\030\003 \001(\0162/.goog"
+          + "le.cloud.gkemulticloud.v1.NodeTaint.Effe"
+          + "ctB\004\342A\001\002\"Y\n\006Effect\022\026\n\022EFFECT_UNSPECIFIED"
+          + "\020\000\022\017\n\013NO_SCHEDULE\020\001\022\026\n\022PREFER_NO_SCHEDUL"
+          + "E\020\002\022\016\n\nNO_EXECUTE\020\003\"8\n\005Fleet\022\025\n\007project\030"
+          + "\001 \001(\tB\004\342A\001\002\022\030\n\nmembership\030\002 \001(\tB\004\342A\001\003\"`\n"
+          + "\rLoggingConfig\022O\n\020component_config\030\001 \001(\013"
+          + "25.google.cloud.gkemulticloud.v1.Logging"
+          + "ComponentConfig\"\302\001\n\026LoggingComponentConf"
+          + "ig\022Z\n\021enable_components\030\001 \003(\0162?.google.c"
+          + "loud.gkemulticloud.v1.LoggingComponentCo"
+          + "nfig.Component\"L\n\tComponent\022\031\n\025COMPONENT"
+          + "_UNSPECIFIED\020\000\022\025\n\021SYSTEM_COMPONENTS\020\001\022\r\n"
+          + "\tWORKLOADS\020\002\"m\n\020MonitoringConfig\022Y\n\031mana"
+          + "ged_prometheus_config\030\002 \001(\01326.google.clo"
+          + "ud.gkemulticloud.v1.ManagedPrometheusCon"
+          + "fig\"*\n\027ManagedPrometheusConfig\022\017\n\007enable"
+          + "d\030\001 \001(\010\"\330\001\n\023BinaryAuthorization\022Z\n\017evalu"
+          + "ation_mode\030\001 \001(\0162A.google.cloud.gkemulti"
+          + "cloud.v1.BinaryAuthorization.EvaluationM"
+          + "ode\"e\n\016EvaluationMode\022\037\n\033EVALUATION_MODE"
+          + "_UNSPECIFIED\020\000\022\014\n\010DISABLED\020\001\022$\n PROJECT_"
+          + "SINGLETON_POLICY_ENFORCE\020\002B\347\001\n!com.googl"
+          + "e.cloud.gkemulticloud.v1B\024CommonResource"
+          + "sProtoP\001ZGcloud.google.com/go/gkemulticl"
+          + "oud/apiv1/gkemulticloudpb;gkemulticloudp"
+          + "b\252\002\035Google.Cloud.GkeMultiCloud.V1\312\002\035Goog"
+          + "le\\Cloud\\GkeMultiCloud\\V1\352\002 Google::Clou"
+          + "d::GkeMultiCloud::V1b\006proto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -119,8 +135,16 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               com.google.api.FieldBehaviorProto.getDescriptor(),
               com.google.protobuf.TimestampProto.getDescriptor(),
             });
-    internal_static_google_cloud_gkemulticloud_v1_WorkloadIdentityConfig_descriptor =
+    internal_static_google_cloud_gkemulticloud_v1_Jwk_descriptor =
         getDescriptor().getMessageTypes().get(0);
+    internal_static_google_cloud_gkemulticloud_v1_Jwk_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_Jwk_descriptor,
+            new java.lang.String[] {
+              "Kty", "Alg", "Use", "Kid", "N", "E", "X", "Y", "Crv",
+            });
+    internal_static_google_cloud_gkemulticloud_v1_WorkloadIdentityConfig_descriptor =
+        getDescriptor().getMessageTypes().get(1);
     internal_static_google_cloud_gkemulticloud_v1_WorkloadIdentityConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_WorkloadIdentityConfig_descriptor,
@@ -128,7 +152,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "IssuerUri", "WorkloadPool", "IdentityProvider",
             });
     internal_static_google_cloud_gkemulticloud_v1_MaxPodsConstraint_descriptor =
-        getDescriptor().getMessageTypes().get(1);
+        getDescriptor().getMessageTypes().get(2);
     internal_static_google_cloud_gkemulticloud_v1_MaxPodsConstraint_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_MaxPodsConstraint_descriptor,
@@ -136,7 +160,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "MaxPodsPerNode",
             });
     internal_static_google_cloud_gkemulticloud_v1_OperationMetadata_descriptor =
-        getDescriptor().getMessageTypes().get(2);
+        getDescriptor().getMessageTypes().get(3);
     internal_static_google_cloud_gkemulticloud_v1_OperationMetadata_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_OperationMetadata_descriptor,
@@ -150,7 +174,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "RequestedCancellation",
             });
     internal_static_google_cloud_gkemulticloud_v1_NodeTaint_descriptor =
-        getDescriptor().getMessageTypes().get(3);
+        getDescriptor().getMessageTypes().get(4);
     internal_static_google_cloud_gkemulticloud_v1_NodeTaint_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_NodeTaint_descriptor,
@@ -158,7 +182,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Key", "Value", "Effect",
             });
     internal_static_google_cloud_gkemulticloud_v1_Fleet_descriptor =
-        getDescriptor().getMessageTypes().get(4);
+        getDescriptor().getMessageTypes().get(5);
     internal_static_google_cloud_gkemulticloud_v1_Fleet_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_Fleet_descriptor,
@@ -166,7 +190,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Project", "Membership",
             });
     internal_static_google_cloud_gkemulticloud_v1_LoggingConfig_descriptor =
-        getDescriptor().getMessageTypes().get(5);
+        getDescriptor().getMessageTypes().get(6);
     internal_static_google_cloud_gkemulticloud_v1_LoggingConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_LoggingConfig_descriptor,
@@ -174,7 +198,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "ComponentConfig",
             });
     internal_static_google_cloud_gkemulticloud_v1_LoggingComponentConfig_descriptor =
-        getDescriptor().getMessageTypes().get(6);
+        getDescriptor().getMessageTypes().get(7);
     internal_static_google_cloud_gkemulticloud_v1_LoggingComponentConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_LoggingComponentConfig_descriptor,
@@ -182,7 +206,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "EnableComponents",
             });
     internal_static_google_cloud_gkemulticloud_v1_MonitoringConfig_descriptor =
-        getDescriptor().getMessageTypes().get(7);
+        getDescriptor().getMessageTypes().get(8);
     internal_static_google_cloud_gkemulticloud_v1_MonitoringConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_MonitoringConfig_descriptor,
@@ -190,13 +214,21 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "ManagedPrometheusConfig",
             });
     internal_static_google_cloud_gkemulticloud_v1_ManagedPrometheusConfig_descriptor =
-        getDescriptor().getMessageTypes().get(8);
+        getDescriptor().getMessageTypes().get(9);
     internal_static_google_cloud_gkemulticloud_v1_ManagedPrometheusConfig_fieldAccessorTable =
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_gkemulticloud_v1_ManagedPrometheusConfig_descriptor,
             new java.lang.String[] {
               "Enabled",
             });
+    internal_static_google_cloud_gkemulticloud_v1_BinaryAuthorization_descriptor =
+        getDescriptor().getMessageTypes().get(10);
+    internal_static_google_cloud_gkemulticloud_v1_BinaryAuthorization_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_gkemulticloud_v1_BinaryAuthorization_descriptor,
+            new java.lang.String[] {
+              "EvaluationMode",
+            });
     com.google.protobuf.ExtensionRegistry registry =
         com.google.protobuf.ExtensionRegistry.newInstance();
     registry.add(com.google.api.FieldBehaviorProto.fieldBehavior);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CreateAzureNodePoolRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CreateAzureNodePoolRequest.java
index b4c58b1d7c80..1163f65d8e60 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CreateAzureNodePoolRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CreateAzureNodePoolRequest.java
@@ -74,7 +74,8 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    * Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]
    * resource where this node pool will be created.
    *
-   * Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+   * `AzureCluster` names are formatted as
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
    *
    * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
    * for more details on Google Cloud resource names.
@@ -105,7 +106,8 @@ public java.lang.String getParent() {
    * Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]
    * resource where this node pool will be created.
    *
-   * Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+   * `AzureCluster` names are formatted as
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
    *
    * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
    * for more details on Google Cloud resource names.
@@ -707,7 +709,8 @@ public Builder mergeFrom(
      * Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]
      * resource where this node pool will be created.
      *
-     * Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+     * `AzureCluster` names are formatted as
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
      *
      * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
      * for more details on Google Cloud resource names.
@@ -737,7 +740,8 @@ public java.lang.String getParent() {
      * Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]
      * resource where this node pool will be created.
      *
-     * Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+     * `AzureCluster` names are formatted as
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
      *
      * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
      * for more details on Google Cloud resource names.
@@ -767,7 +771,8 @@ public com.google.protobuf.ByteString getParentBytes() {
      * Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]
      * resource where this node pool will be created.
      *
-     * Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+     * `AzureCluster` names are formatted as
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
      *
      * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
      * for more details on Google Cloud resource names.
@@ -796,7 +801,8 @@ public Builder setParent(java.lang.String value) {
      * Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]
      * resource where this node pool will be created.
      *
-     * Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+     * `AzureCluster` names are formatted as
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
      *
      * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
      * for more details on Google Cloud resource names.
@@ -821,7 +827,8 @@ public Builder clearParent() {
      * Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]
      * resource where this node pool will be created.
      *
-     * Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+     * `AzureCluster` names are formatted as
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
      *
      * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
      * for more details on Google Cloud resource names.
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CreateAzureNodePoolRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CreateAzureNodePoolRequestOrBuilder.java
index 66bd007eb0a9..7b06ea2b5204 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CreateAzureNodePoolRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/CreateAzureNodePoolRequestOrBuilder.java
@@ -30,7 +30,8 @@ public interface CreateAzureNodePoolRequestOrBuilder
    * Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]
    * resource where this node pool will be created.
    *
-   * Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+   * `AzureCluster` names are formatted as
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
    *
    * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
    * for more details on Google Cloud resource names.
@@ -50,7 +51,8 @@ public interface CreateAzureNodePoolRequestOrBuilder
    * Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]
    * resource where this node pool will be created.
    *
-   * Location names are formatted as `projects/&lt;project-id&gt;/locations/&lt;region&gt;`.
+   * `AzureCluster` names are formatted as
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
    *
    * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
    * for more details on Google Cloud resource names.
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsClusterRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsClusterRequest.java
index f5e3fcdb894b..893510283848 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsClusterRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsClusterRequest.java
@@ -173,6 +173,27 @@ public boolean getAllowMissing() {
     return allowMissing_;
   }
 
+  public static final int IGNORE_ERRORS_FIELD_NUMBER = 5;
+  private boolean ignoreErrors_ = false;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. If set to true, the deletion of
+   * [AwsCluster][google.cloud.gkemulticloud.v1.AwsCluster] resource will
+   * succeed even if errors occur during deleting in cluster resources. Using
+   * this parameter may result in orphaned resources in the cluster.
+   * </pre>
+   *
+   * <code>bool ignore_errors = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The ignoreErrors.
+   */
+  @java.lang.Override
+  public boolean getIgnoreErrors() {
+    return ignoreErrors_;
+  }
+
   public static final int ETAG_FIELD_NUMBER = 4;
 
   @SuppressWarnings("serial")
@@ -262,6 +283,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(etag_)) {
       com.google.protobuf.GeneratedMessageV3.writeString(output, 4, etag_);
     }
+    if (ignoreErrors_ != false) {
+      output.writeBool(5, ignoreErrors_);
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -283,6 +307,9 @@ public int getSerializedSize() {
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(etag_)) {
       size += com.google.protobuf.GeneratedMessageV3.computeStringSize(4, etag_);
     }
+    if (ignoreErrors_ != false) {
+      size += com.google.protobuf.CodedOutputStream.computeBoolSize(5, ignoreErrors_);
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -302,6 +329,7 @@ public boolean equals(final java.lang.Object obj) {
     if (!getName().equals(other.getName())) return false;
     if (getValidateOnly() != other.getValidateOnly()) return false;
     if (getAllowMissing() != other.getAllowMissing()) return false;
+    if (getIgnoreErrors() != other.getIgnoreErrors()) return false;
     if (!getEtag().equals(other.getEtag())) return false;
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
@@ -320,6 +348,8 @@ public int hashCode() {
     hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getValidateOnly());
     hash = (37 * hash) + ALLOW_MISSING_FIELD_NUMBER;
     hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getAllowMissing());
+    hash = (37 * hash) + IGNORE_ERRORS_FIELD_NUMBER;
+    hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getIgnoreErrors());
     hash = (37 * hash) + ETAG_FIELD_NUMBER;
     hash = (53 * hash) + getEtag().hashCode();
     hash = (29 * hash) + getUnknownFields().hashCode();
@@ -465,6 +495,7 @@ public Builder clear() {
       name_ = "";
       validateOnly_ = false;
       allowMissing_ = false;
+      ignoreErrors_ = false;
       etag_ = "";
       return this;
     }
@@ -512,6 +543,9 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.DeleteAwsClusterReq
         result.allowMissing_ = allowMissing_;
       }
       if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.ignoreErrors_ = ignoreErrors_;
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
         result.etag_ = etag_;
       }
     }
@@ -573,9 +607,12 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.DeleteAwsClusterReque
       if (other.getAllowMissing() != false) {
         setAllowMissing(other.getAllowMissing());
       }
+      if (other.getIgnoreErrors() != false) {
+        setIgnoreErrors(other.getIgnoreErrors());
+      }
       if (!other.getEtag().isEmpty()) {
         etag_ = other.etag_;
-        bitField0_ |= 0x00000008;
+        bitField0_ |= 0x00000010;
         onChanged();
       }
       this.mergeUnknownFields(other.getUnknownFields());
@@ -625,9 +662,15 @@ public Builder mergeFrom(
             case 34:
               {
                 etag_ = input.readStringRequireUtf8();
-                bitField0_ |= 0x00000008;
+                bitField0_ |= 0x00000010;
                 break;
               } // case 34
+            case 40:
+              {
+                ignoreErrors_ = input.readBool();
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 40
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -919,6 +962,68 @@ public Builder clearAllowMissing() {
       return this;
     }
 
+    private boolean ignoreErrors_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. If set to true, the deletion of
+     * [AwsCluster][google.cloud.gkemulticloud.v1.AwsCluster] resource will
+     * succeed even if errors occur during deleting in cluster resources. Using
+     * this parameter may result in orphaned resources in the cluster.
+     * </pre>
+     *
+     * <code>bool ignore_errors = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The ignoreErrors.
+     */
+    @java.lang.Override
+    public boolean getIgnoreErrors() {
+      return ignoreErrors_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. If set to true, the deletion of
+     * [AwsCluster][google.cloud.gkemulticloud.v1.AwsCluster] resource will
+     * succeed even if errors occur during deleting in cluster resources. Using
+     * this parameter may result in orphaned resources in the cluster.
+     * </pre>
+     *
+     * <code>bool ignore_errors = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The ignoreErrors to set.
+     * @return This builder for chaining.
+     */
+    public Builder setIgnoreErrors(boolean value) {
+
+      ignoreErrors_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. If set to true, the deletion of
+     * [AwsCluster][google.cloud.gkemulticloud.v1.AwsCluster] resource will
+     * succeed even if errors occur during deleting in cluster resources. Using
+     * this parameter may result in orphaned resources in the cluster.
+     * </pre>
+     *
+     * <code>bool ignore_errors = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearIgnoreErrors() {
+      bitField0_ = (bitField0_ & ~0x00000008);
+      ignoreErrors_ = false;
+      onChanged();
+      return this;
+    }
+
     private java.lang.Object etag_ = "";
     /**
      *
@@ -999,7 +1104,7 @@ public Builder setEtag(java.lang.String value) {
         throw new NullPointerException();
       }
       etag_ = value;
-      bitField0_ |= 0x00000008;
+      bitField0_ |= 0x00000010;
       onChanged();
       return this;
     }
@@ -1022,7 +1127,7 @@ public Builder setEtag(java.lang.String value) {
      */
     public Builder clearEtag() {
       etag_ = getDefaultInstance().getEtag();
-      bitField0_ = (bitField0_ & ~0x00000008);
+      bitField0_ = (bitField0_ & ~0x00000010);
       onChanged();
       return this;
     }
@@ -1050,7 +1155,7 @@ public Builder setEtagBytes(com.google.protobuf.ByteString value) {
       }
       checkByteStringIsUtf8(value);
       etag_ = value;
-      bitField0_ |= 0x00000008;
+      bitField0_ |= 0x00000010;
       onChanged();
       return this;
     }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsClusterRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsClusterRequestOrBuilder.java
index d569ef7fa284..1a60c917a4c4 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsClusterRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsClusterRequestOrBuilder.java
@@ -97,6 +97,22 @@ public interface DeleteAwsClusterRequestOrBuilder
    */
   boolean getAllowMissing();
 
+  /**
+   *
+   *
+   * <pre>
+   * Optional. If set to true, the deletion of
+   * [AwsCluster][google.cloud.gkemulticloud.v1.AwsCluster] resource will
+   * succeed even if errors occur during deleting in cluster resources. Using
+   * this parameter may result in orphaned resources in the cluster.
+   * </pre>
+   *
+   * <code>bool ignore_errors = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The ignoreErrors.
+   */
+  boolean getIgnoreErrors();
+
   /**
    *
    *
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsNodePoolRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsNodePoolRequest.java
index 9154850ade05..88014f55c176 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsNodePoolRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsNodePoolRequest.java
@@ -174,6 +174,27 @@ public boolean getAllowMissing() {
     return allowMissing_;
   }
 
+  public static final int IGNORE_ERRORS_FIELD_NUMBER = 5;
+  private boolean ignoreErrors_ = false;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. If set to true, the deletion of
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource will
+   * succeed even if errors occur during deleting in node pool resources. Using
+   * this parameter may result in orphaned resources in the node pool.
+   * </pre>
+   *
+   * <code>bool ignore_errors = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The ignoreErrors.
+   */
+  @java.lang.Override
+  public boolean getIgnoreErrors() {
+    return ignoreErrors_;
+  }
+
   public static final int ETAG_FIELD_NUMBER = 4;
 
   @SuppressWarnings("serial")
@@ -263,6 +284,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(etag_)) {
       com.google.protobuf.GeneratedMessageV3.writeString(output, 4, etag_);
     }
+    if (ignoreErrors_ != false) {
+      output.writeBool(5, ignoreErrors_);
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -284,6 +308,9 @@ public int getSerializedSize() {
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(etag_)) {
       size += com.google.protobuf.GeneratedMessageV3.computeStringSize(4, etag_);
     }
+    if (ignoreErrors_ != false) {
+      size += com.google.protobuf.CodedOutputStream.computeBoolSize(5, ignoreErrors_);
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -303,6 +330,7 @@ public boolean equals(final java.lang.Object obj) {
     if (!getName().equals(other.getName())) return false;
     if (getValidateOnly() != other.getValidateOnly()) return false;
     if (getAllowMissing() != other.getAllowMissing()) return false;
+    if (getIgnoreErrors() != other.getIgnoreErrors()) return false;
     if (!getEtag().equals(other.getEtag())) return false;
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
@@ -321,6 +349,8 @@ public int hashCode() {
     hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getValidateOnly());
     hash = (37 * hash) + ALLOW_MISSING_FIELD_NUMBER;
     hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getAllowMissing());
+    hash = (37 * hash) + IGNORE_ERRORS_FIELD_NUMBER;
+    hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getIgnoreErrors());
     hash = (37 * hash) + ETAG_FIELD_NUMBER;
     hash = (53 * hash) + getEtag().hashCode();
     hash = (29 * hash) + getUnknownFields().hashCode();
@@ -466,6 +496,7 @@ public Builder clear() {
       name_ = "";
       validateOnly_ = false;
       allowMissing_ = false;
+      ignoreErrors_ = false;
       etag_ = "";
       return this;
     }
@@ -513,6 +544,9 @@ private void buildPartial0(com.google.cloud.gkemulticloud.v1.DeleteAwsNodePoolRe
         result.allowMissing_ = allowMissing_;
       }
       if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.ignoreErrors_ = ignoreErrors_;
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
         result.etag_ = etag_;
       }
     }
@@ -574,9 +608,12 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.DeleteAwsNodePoolRequ
       if (other.getAllowMissing() != false) {
         setAllowMissing(other.getAllowMissing());
       }
+      if (other.getIgnoreErrors() != false) {
+        setIgnoreErrors(other.getIgnoreErrors());
+      }
       if (!other.getEtag().isEmpty()) {
         etag_ = other.etag_;
-        bitField0_ |= 0x00000008;
+        bitField0_ |= 0x00000010;
         onChanged();
       }
       this.mergeUnknownFields(other.getUnknownFields());
@@ -626,9 +663,15 @@ public Builder mergeFrom(
             case 34:
               {
                 etag_ = input.readStringRequireUtf8();
-                bitField0_ |= 0x00000008;
+                bitField0_ |= 0x00000010;
                 break;
               } // case 34
+            case 40:
+              {
+                ignoreErrors_ = input.readBool();
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 40
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -923,6 +966,68 @@ public Builder clearAllowMissing() {
       return this;
     }
 
+    private boolean ignoreErrors_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. If set to true, the deletion of
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource will
+     * succeed even if errors occur during deleting in node pool resources. Using
+     * this parameter may result in orphaned resources in the node pool.
+     * </pre>
+     *
+     * <code>bool ignore_errors = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The ignoreErrors.
+     */
+    @java.lang.Override
+    public boolean getIgnoreErrors() {
+      return ignoreErrors_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. If set to true, the deletion of
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource will
+     * succeed even if errors occur during deleting in node pool resources. Using
+     * this parameter may result in orphaned resources in the node pool.
+     * </pre>
+     *
+     * <code>bool ignore_errors = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The ignoreErrors to set.
+     * @return This builder for chaining.
+     */
+    public Builder setIgnoreErrors(boolean value) {
+
+      ignoreErrors_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. If set to true, the deletion of
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource will
+     * succeed even if errors occur during deleting in node pool resources. Using
+     * this parameter may result in orphaned resources in the node pool.
+     * </pre>
+     *
+     * <code>bool ignore_errors = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearIgnoreErrors() {
+      bitField0_ = (bitField0_ & ~0x00000008);
+      ignoreErrors_ = false;
+      onChanged();
+      return this;
+    }
+
     private java.lang.Object etag_ = "";
     /**
      *
@@ -1003,7 +1108,7 @@ public Builder setEtag(java.lang.String value) {
         throw new NullPointerException();
       }
       etag_ = value;
-      bitField0_ |= 0x00000008;
+      bitField0_ |= 0x00000010;
       onChanged();
       return this;
     }
@@ -1026,7 +1131,7 @@ public Builder setEtag(java.lang.String value) {
      */
     public Builder clearEtag() {
       etag_ = getDefaultInstance().getEtag();
-      bitField0_ = (bitField0_ & ~0x00000008);
+      bitField0_ = (bitField0_ & ~0x00000010);
       onChanged();
       return this;
     }
@@ -1054,7 +1159,7 @@ public Builder setEtagBytes(com.google.protobuf.ByteString value) {
       }
       checkByteStringIsUtf8(value);
       etag_ = value;
-      bitField0_ |= 0x00000008;
+      bitField0_ |= 0x00000010;
       onChanged();
       return this;
     }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsNodePoolRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsNodePoolRequestOrBuilder.java
index 574c7e3463ac..034f889d1269 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsNodePoolRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAwsNodePoolRequestOrBuilder.java
@@ -98,6 +98,22 @@ public interface DeleteAwsNodePoolRequestOrBuilder
    */
   boolean getAllowMissing();
 
+  /**
+   *
+   *
+   * <pre>
+   * Optional. If set to true, the deletion of
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource will
+   * succeed even if errors occur during deleting in node pool resources. Using
+   * this parameter may result in orphaned resources in the node pool.
+   * </pre>
+   *
+   * <code>bool ignore_errors = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The ignoreErrors.
+   */
+  boolean getIgnoreErrors();
+
   /**
    *
    *
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAzureClusterRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAzureClusterRequest.java
index 8bb68a212a8f..0e39f5623264 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAzureClusterRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAzureClusterRequest.java
@@ -22,7 +22,7 @@
  *
  *
  * <pre>
- * Request message for `Clusters.DeleteAzureCluster` method.
+ * Request message for `AzureClusters.DeleteAzureCluster` method.
  * </pre>
  *
  * Protobuf type {@code google.cloud.gkemulticloud.v1.DeleteAzureClusterRequest}
@@ -427,7 +427,7 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * Request message for `Clusters.DeleteAzureCluster` method.
+   * Request message for `AzureClusters.DeleteAzureCluster` method.
    * </pre>
    *
    * Protobuf type {@code google.cloud.gkemulticloud.v1.DeleteAzureClusterRequest}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAzureNodePoolRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAzureNodePoolRequest.java
index 6c5b17a9ce71..3912b1326281 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAzureNodePoolRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/DeleteAzureNodePoolRequest.java
@@ -22,7 +22,7 @@
  *
  *
  * <pre>
- * Delete message for `AzureClusters.DeleteAzureNodePool` method.
+ * Request message for `AzureClusters.DeleteAzureNodePool` method.
  * </pre>
  *
  * Protobuf type {@code google.cloud.gkemulticloud.v1.DeleteAzureNodePoolRequest}
@@ -429,7 +429,7 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * Delete message for `AzureClusters.DeleteAzureNodePool` method.
+   * Request message for `AzureClusters.DeleteAzureNodePool` method.
    * </pre>
    *
    * Protobuf type {@code google.cloud.gkemulticloud.v1.DeleteAzureNodePoolRequest}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenRequest.java
new file mode 100644
index 000000000000..4c2468ab009f
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenRequest.java
@@ -0,0 +1,2106 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/attached_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/** Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest} */
+public final class GenerateAttachedClusterAgentTokenRequest
+    extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest)
+    GenerateAttachedClusterAgentTokenRequestOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use GenerateAttachedClusterAgentTokenRequest.newBuilder() to construct.
+  private GenerateAttachedClusterAgentTokenRequest(
+      com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GenerateAttachedClusterAgentTokenRequest() {
+    attachedCluster_ = "";
+    subjectToken_ = "";
+    subjectTokenType_ = "";
+    version_ = "";
+    grantType_ = "";
+    audience_ = "";
+    scope_ = "";
+    requestedTokenType_ = "";
+    options_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new GenerateAttachedClusterAgentTokenRequest();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AttachedServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenRequest_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AttachedServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenRequest_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest.class,
+            com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest.Builder
+                .class);
+  }
+
+  public static final int ATTACHED_CLUSTER_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object attachedCluster_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string attached_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The attachedCluster.
+   */
+  @java.lang.Override
+  public java.lang.String getAttachedCluster() {
+    java.lang.Object ref = attachedCluster_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      attachedCluster_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string attached_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for attachedCluster.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAttachedClusterBytes() {
+    java.lang.Object ref = attachedCluster_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      attachedCluster_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int SUBJECT_TOKEN_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object subjectToken_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectToken.
+   */
+  @java.lang.Override
+  public java.lang.String getSubjectToken() {
+    java.lang.Object ref = subjectToken_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      subjectToken_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectToken.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getSubjectTokenBytes() {
+    java.lang.Object ref = subjectToken_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      subjectToken_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int SUBJECT_TOKEN_TYPE_FIELD_NUMBER = 3;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object subjectTokenType_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectTokenType.
+   */
+  @java.lang.Override
+  public java.lang.String getSubjectTokenType() {
+    java.lang.Object ref = subjectTokenType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      subjectTokenType_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectTokenType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getSubjectTokenTypeBytes() {
+    java.lang.Object ref = subjectTokenType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      subjectTokenType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int VERSION_FIELD_NUMBER = 4;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object version_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The version.
+   */
+  @java.lang.Override
+  public java.lang.String getVersion() {
+    java.lang.Object ref = version_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      version_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for version.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getVersionBytes() {
+    java.lang.Object ref = version_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      version_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int GRANT_TYPE_FIELD_NUMBER = 6;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object grantType_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The grantType.
+   */
+  @java.lang.Override
+  public java.lang.String getGrantType() {
+    java.lang.Object ref = grantType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      grantType_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for grantType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getGrantTypeBytes() {
+    java.lang.Object ref = grantType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      grantType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int AUDIENCE_FIELD_NUMBER = 7;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object audience_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The audience.
+   */
+  @java.lang.Override
+  public java.lang.String getAudience() {
+    java.lang.Object ref = audience_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      audience_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for audience.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAudienceBytes() {
+    java.lang.Object ref = audience_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      audience_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int SCOPE_FIELD_NUMBER = 8;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object scope_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The scope.
+   */
+  @java.lang.Override
+  public java.lang.String getScope() {
+    java.lang.Object ref = scope_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      scope_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for scope.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getScopeBytes() {
+    java.lang.Object ref = scope_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      scope_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int REQUESTED_TOKEN_TYPE_FIELD_NUMBER = 9;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object requestedTokenType_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The requestedTokenType.
+   */
+  @java.lang.Override
+  public java.lang.String getRequestedTokenType() {
+    java.lang.Object ref = requestedTokenType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      requestedTokenType_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for requestedTokenType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getRequestedTokenTypeBytes() {
+    java.lang.Object ref = requestedTokenType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      requestedTokenType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int OPTIONS_FIELD_NUMBER = 10;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object options_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The options.
+   */
+  @java.lang.Override
+  public java.lang.String getOptions() {
+    java.lang.Object ref = options_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      options_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for options.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getOptionsBytes() {
+    java.lang.Object ref = options_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      options_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(attachedCluster_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, attachedCluster_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectToken_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 2, subjectToken_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectTokenType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 3, subjectTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(version_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 4, version_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(grantType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 6, grantType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(audience_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 7, audience_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(scope_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 8, scope_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(requestedTokenType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 9, requestedTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(options_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 10, options_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(attachedCluster_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, attachedCluster_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectToken_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(2, subjectToken_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectTokenType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(3, subjectTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(version_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(4, version_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(grantType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(6, grantType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(audience_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(7, audience_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(scope_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(8, scope_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(requestedTokenType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(9, requestedTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(options_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(10, options_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj
+        instanceof com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest other =
+        (com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest) obj;
+
+    if (!getAttachedCluster().equals(other.getAttachedCluster())) return false;
+    if (!getSubjectToken().equals(other.getSubjectToken())) return false;
+    if (!getSubjectTokenType().equals(other.getSubjectTokenType())) return false;
+    if (!getVersion().equals(other.getVersion())) return false;
+    if (!getGrantType().equals(other.getGrantType())) return false;
+    if (!getAudience().equals(other.getAudience())) return false;
+    if (!getScope().equals(other.getScope())) return false;
+    if (!getRequestedTokenType().equals(other.getRequestedTokenType())) return false;
+    if (!getOptions().equals(other.getOptions())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + ATTACHED_CLUSTER_FIELD_NUMBER;
+    hash = (53 * hash) + getAttachedCluster().hashCode();
+    hash = (37 * hash) + SUBJECT_TOKEN_FIELD_NUMBER;
+    hash = (53 * hash) + getSubjectToken().hashCode();
+    hash = (37 * hash) + SUBJECT_TOKEN_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getSubjectTokenType().hashCode();
+    hash = (37 * hash) + VERSION_FIELD_NUMBER;
+    hash = (53 * hash) + getVersion().hashCode();
+    hash = (37 * hash) + GRANT_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getGrantType().hashCode();
+    hash = (37 * hash) + AUDIENCE_FIELD_NUMBER;
+    hash = (53 * hash) + getAudience().hashCode();
+    hash = (37 * hash) + SCOPE_FIELD_NUMBER;
+    hash = (53 * hash) + getScope().hashCode();
+    hash = (37 * hash) + REQUESTED_TOKEN_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getRequestedTokenType().hashCode();
+    hash = (37 * hash) + OPTIONS_FIELD_NUMBER;
+    hash = (53 * hash) + getOptions().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseFrom(java.nio.ByteBuffer data)
+          throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseFrom(
+          java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseFrom(com.google.protobuf.ByteString data)
+          throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseFrom(
+          com.google.protobuf.ByteString data,
+          com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseDelimitedFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseFrom(com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      parseFrom(
+          com.google.protobuf.CodedInputStream input,
+          com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest)
+      com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequestOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AttachedServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenRequest_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AttachedServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenRequest_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest.class,
+              com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest.Builder
+                  .class);
+    }
+
+    // Construct using
+    // com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      attachedCluster_ = "";
+      subjectToken_ = "";
+      subjectTokenType_ = "";
+      version_ = "";
+      grantType_ = "";
+      audience_ = "";
+      scope_ = "";
+      requestedTokenType_ = "";
+      options_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AttachedServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenRequest_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+        getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+          .getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest build() {
+      com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest result =
+          buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+        buildPartial() {
+      com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest result =
+          new com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.attachedCluster_ = attachedCluster_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.subjectToken_ = subjectToken_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        result.subjectTokenType_ = subjectTokenType_;
+      }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.version_ = version_;
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
+        result.grantType_ = grantType_;
+      }
+      if (((from_bitField0_ & 0x00000020) != 0)) {
+        result.audience_ = audience_;
+      }
+      if (((from_bitField0_ & 0x00000040) != 0)) {
+        result.scope_ = scope_;
+      }
+      if (((from_bitField0_ & 0x00000080) != 0)) {
+        result.requestedTokenType_ = requestedTokenType_;
+      }
+      if (((from_bitField0_ & 0x00000100) != 0)) {
+        result.options_ = options_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other
+          instanceof com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest) {
+        return mergeFrom(
+            (com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(
+        com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest other) {
+      if (other
+          == com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+              .getDefaultInstance()) return this;
+      if (!other.getAttachedCluster().isEmpty()) {
+        attachedCluster_ = other.attachedCluster_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (!other.getSubjectToken().isEmpty()) {
+        subjectToken_ = other.subjectToken_;
+        bitField0_ |= 0x00000002;
+        onChanged();
+      }
+      if (!other.getSubjectTokenType().isEmpty()) {
+        subjectTokenType_ = other.subjectTokenType_;
+        bitField0_ |= 0x00000004;
+        onChanged();
+      }
+      if (!other.getVersion().isEmpty()) {
+        version_ = other.version_;
+        bitField0_ |= 0x00000008;
+        onChanged();
+      }
+      if (!other.getGrantType().isEmpty()) {
+        grantType_ = other.grantType_;
+        bitField0_ |= 0x00000010;
+        onChanged();
+      }
+      if (!other.getAudience().isEmpty()) {
+        audience_ = other.audience_;
+        bitField0_ |= 0x00000020;
+        onChanged();
+      }
+      if (!other.getScope().isEmpty()) {
+        scope_ = other.scope_;
+        bitField0_ |= 0x00000040;
+        onChanged();
+      }
+      if (!other.getRequestedTokenType().isEmpty()) {
+        requestedTokenType_ = other.requestedTokenType_;
+        bitField0_ |= 0x00000080;
+        onChanged();
+      }
+      if (!other.getOptions().isEmpty()) {
+        options_ = other.options_;
+        bitField0_ |= 0x00000100;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                attachedCluster_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 18:
+              {
+                subjectToken_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 18
+            case 26:
+              {
+                subjectTokenType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000004;
+                break;
+              } // case 26
+            case 34:
+              {
+                version_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 34
+            case 50:
+              {
+                grantType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000010;
+                break;
+              } // case 50
+            case 58:
+              {
+                audience_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000020;
+                break;
+              } // case 58
+            case 66:
+              {
+                scope_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000040;
+                break;
+              } // case 66
+            case 74:
+              {
+                requestedTokenType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000080;
+                break;
+              } // case 74
+            case 82:
+              {
+                options_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000100;
+                break;
+              } // case 82
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object attachedCluster_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string attached_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The attachedCluster.
+     */
+    public java.lang.String getAttachedCluster() {
+      java.lang.Object ref = attachedCluster_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        attachedCluster_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string attached_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The bytes for attachedCluster.
+     */
+    public com.google.protobuf.ByteString getAttachedClusterBytes() {
+      java.lang.Object ref = attachedCluster_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        attachedCluster_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string attached_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The attachedCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAttachedCluster(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      attachedCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string attached_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAttachedCluster() {
+      attachedCluster_ = getDefaultInstance().getAttachedCluster();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string attached_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The bytes for attachedCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAttachedClusterBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      attachedCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object subjectToken_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The subjectToken.
+     */
+    public java.lang.String getSubjectToken() {
+      java.lang.Object ref = subjectToken_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        subjectToken_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for subjectToken.
+     */
+    public com.google.protobuf.ByteString getSubjectTokenBytes() {
+      java.lang.Object ref = subjectToken_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        subjectToken_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The subjectToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectToken(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      subjectToken_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearSubjectToken() {
+      subjectToken_ = getDefaultInstance().getSubjectToken();
+      bitField0_ = (bitField0_ & ~0x00000002);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for subjectToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTokenBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      subjectToken_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object subjectTokenType_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The subjectTokenType.
+     */
+    public java.lang.String getSubjectTokenType() {
+      java.lang.Object ref = subjectTokenType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        subjectTokenType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for subjectTokenType.
+     */
+    public com.google.protobuf.ByteString getSubjectTokenTypeBytes() {
+      java.lang.Object ref = subjectTokenType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        subjectTokenType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The subjectTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTokenType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      subjectTokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearSubjectTokenType() {
+      subjectTokenType_ = getDefaultInstance().getSubjectTokenType();
+      bitField0_ = (bitField0_ & ~0x00000004);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for subjectTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTokenTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      subjectTokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object version_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The version.
+     */
+    public java.lang.String getVersion() {
+      java.lang.Object ref = version_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        version_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for version.
+     */
+    public com.google.protobuf.ByteString getVersionBytes() {
+      java.lang.Object ref = version_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        version_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The version to set.
+     * @return This builder for chaining.
+     */
+    public Builder setVersion(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      version_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearVersion() {
+      version_ = getDefaultInstance().getVersion();
+      bitField0_ = (bitField0_ & ~0x00000008);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for version to set.
+     * @return This builder for chaining.
+     */
+    public Builder setVersionBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      version_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object grantType_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The grantType.
+     */
+    public java.lang.String getGrantType() {
+      java.lang.Object ref = grantType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        grantType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for grantType.
+     */
+    public com.google.protobuf.ByteString getGrantTypeBytes() {
+      java.lang.Object ref = grantType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        grantType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The grantType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGrantType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      grantType_ = value;
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearGrantType() {
+      grantType_ = getDefaultInstance().getGrantType();
+      bitField0_ = (bitField0_ & ~0x00000010);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for grantType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGrantTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      grantType_ = value;
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object audience_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The audience.
+     */
+    public java.lang.String getAudience() {
+      java.lang.Object ref = audience_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        audience_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for audience.
+     */
+    public com.google.protobuf.ByteString getAudienceBytes() {
+      java.lang.Object ref = audience_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        audience_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The audience to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAudience(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      audience_ = value;
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAudience() {
+      audience_ = getDefaultInstance().getAudience();
+      bitField0_ = (bitField0_ & ~0x00000020);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for audience to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAudienceBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      audience_ = value;
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object scope_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The scope.
+     */
+    public java.lang.String getScope() {
+      java.lang.Object ref = scope_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        scope_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for scope.
+     */
+    public com.google.protobuf.ByteString getScopeBytes() {
+      java.lang.Object ref = scope_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        scope_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The scope to set.
+     * @return This builder for chaining.
+     */
+    public Builder setScope(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      scope_ = value;
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearScope() {
+      scope_ = getDefaultInstance().getScope();
+      bitField0_ = (bitField0_ & ~0x00000040);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for scope to set.
+     * @return This builder for chaining.
+     */
+    public Builder setScopeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      scope_ = value;
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object requestedTokenType_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The requestedTokenType.
+     */
+    public java.lang.String getRequestedTokenType() {
+      java.lang.Object ref = requestedTokenType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        requestedTokenType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for requestedTokenType.
+     */
+    public com.google.protobuf.ByteString getRequestedTokenTypeBytes() {
+      java.lang.Object ref = requestedTokenType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        requestedTokenType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The requestedTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setRequestedTokenType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      requestedTokenType_ = value;
+      bitField0_ |= 0x00000080;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearRequestedTokenType() {
+      requestedTokenType_ = getDefaultInstance().getRequestedTokenType();
+      bitField0_ = (bitField0_ & ~0x00000080);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for requestedTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setRequestedTokenTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      requestedTokenType_ = value;
+      bitField0_ |= 0x00000080;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object options_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The options.
+     */
+    public java.lang.String getOptions() {
+      java.lang.Object ref = options_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        options_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for options.
+     */
+    public com.google.protobuf.ByteString getOptionsBytes() {
+      java.lang.Object ref = options_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        options_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The options to set.
+     * @return This builder for chaining.
+     */
+    public Builder setOptions(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      options_ = value;
+      bitField0_ |= 0x00000100;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearOptions() {
+      options_ = getDefaultInstance().getOptions();
+      bitField0_ = (bitField0_ & ~0x00000100);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for options to set.
+     * @return This builder for chaining.
+     */
+    public Builder setOptionsBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      options_ = value;
+      bitField0_ |= 0x00000100;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest)
+  private static final com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE =
+        new com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GenerateAttachedClusterAgentTokenRequest> PARSER =
+      new com.google.protobuf.AbstractParser<GenerateAttachedClusterAgentTokenRequest>() {
+        @java.lang.Override
+        public GenerateAttachedClusterAgentTokenRequest parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GenerateAttachedClusterAgentTokenRequest> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GenerateAttachedClusterAgentTokenRequest> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest
+      getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenRequestOrBuilder.java
new file mode 100644
index 000000000000..b7507b240a10
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenRequestOrBuilder.java
@@ -0,0 +1,254 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/attached_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface GenerateAttachedClusterAgentTokenRequestOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string attached_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The attachedCluster.
+   */
+  java.lang.String getAttachedCluster();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string attached_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for attachedCluster.
+   */
+  com.google.protobuf.ByteString getAttachedClusterBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectToken.
+   */
+  java.lang.String getSubjectToken();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectToken.
+   */
+  com.google.protobuf.ByteString getSubjectTokenBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectTokenType.
+   */
+  java.lang.String getSubjectTokenType();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectTokenType.
+   */
+  com.google.protobuf.ByteString getSubjectTokenTypeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The version.
+   */
+  java.lang.String getVersion();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for version.
+   */
+  com.google.protobuf.ByteString getVersionBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The grantType.
+   */
+  java.lang.String getGrantType();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for grantType.
+   */
+  com.google.protobuf.ByteString getGrantTypeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The audience.
+   */
+  java.lang.String getAudience();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for audience.
+   */
+  com.google.protobuf.ByteString getAudienceBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The scope.
+   */
+  java.lang.String getScope();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for scope.
+   */
+  com.google.protobuf.ByteString getScopeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The requestedTokenType.
+   */
+  java.lang.String getRequestedTokenType();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for requestedTokenType.
+   */
+  com.google.protobuf.ByteString getRequestedTokenTypeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The options.
+   */
+  java.lang.String getOptions();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for options.
+   */
+  com.google.protobuf.ByteString getOptionsBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenResponse.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenResponse.java
new file mode 100644
index 000000000000..a2c21830a75b
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenResponse.java
@@ -0,0 +1,805 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/attached_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/** Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse} */
+public final class GenerateAttachedClusterAgentTokenResponse
+    extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse)
+    GenerateAttachedClusterAgentTokenResponseOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use GenerateAttachedClusterAgentTokenResponse.newBuilder() to construct.
+  private GenerateAttachedClusterAgentTokenResponse(
+      com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GenerateAttachedClusterAgentTokenResponse() {
+    accessToken_ = "";
+    tokenType_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new GenerateAttachedClusterAgentTokenResponse();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AttachedServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenResponse_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AttachedServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenResponse_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse.class,
+            com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse.Builder
+                .class);
+  }
+
+  public static final int ACCESS_TOKEN_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object accessToken_ = "";
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The accessToken.
+   */
+  @java.lang.Override
+  public java.lang.String getAccessToken() {
+    java.lang.Object ref = accessToken_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      accessToken_ = s;
+      return s;
+    }
+  }
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The bytes for accessToken.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAccessTokenBytes() {
+    java.lang.Object ref = accessToken_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      accessToken_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int EXPIRES_IN_FIELD_NUMBER = 2;
+  private int expiresIn_ = 0;
+  /**
+   * <code>int32 expires_in = 2;</code>
+   *
+   * @return The expiresIn.
+   */
+  @java.lang.Override
+  public int getExpiresIn() {
+    return expiresIn_;
+  }
+
+  public static final int TOKEN_TYPE_FIELD_NUMBER = 3;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object tokenType_ = "";
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The tokenType.
+   */
+  @java.lang.Override
+  public java.lang.String getTokenType() {
+    java.lang.Object ref = tokenType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      tokenType_ = s;
+      return s;
+    }
+  }
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The bytes for tokenType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getTokenTypeBytes() {
+    java.lang.Object ref = tokenType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      tokenType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(accessToken_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, accessToken_);
+    }
+    if (expiresIn_ != 0) {
+      output.writeInt32(2, expiresIn_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(tokenType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 3, tokenType_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(accessToken_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, accessToken_);
+    }
+    if (expiresIn_ != 0) {
+      size += com.google.protobuf.CodedOutputStream.computeInt32Size(2, expiresIn_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(tokenType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(3, tokenType_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj
+        instanceof com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse other =
+        (com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse) obj;
+
+    if (!getAccessToken().equals(other.getAccessToken())) return false;
+    if (getExpiresIn() != other.getExpiresIn()) return false;
+    if (!getTokenType().equals(other.getTokenType())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + ACCESS_TOKEN_FIELD_NUMBER;
+    hash = (53 * hash) + getAccessToken().hashCode();
+    hash = (37 * hash) + EXPIRES_IN_FIELD_NUMBER;
+    hash = (53 * hash) + getExpiresIn();
+    hash = (37 * hash) + TOKEN_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getTokenType().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseFrom(java.nio.ByteBuffer data)
+          throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseFrom(
+          java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseFrom(com.google.protobuf.ByteString data)
+          throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseFrom(
+          com.google.protobuf.ByteString data,
+          com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseDelimitedFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseFrom(com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      parseFrom(
+          com.google.protobuf.CodedInputStream input,
+          com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse)
+      com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponseOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AttachedServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenResponse_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AttachedServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenResponse_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse.class,
+              com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse.Builder
+                  .class);
+    }
+
+    // Construct using
+    // com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      accessToken_ = "";
+      expiresIn_ = 0;
+      tokenType_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AttachedServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAttachedClusterAgentTokenResponse_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+        getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+          .getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse build() {
+      com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse result =
+          buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+        buildPartial() {
+      com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse result =
+          new com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.accessToken_ = accessToken_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.expiresIn_ = expiresIn_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        result.tokenType_ = tokenType_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other
+          instanceof com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse) {
+        return mergeFrom(
+            (com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(
+        com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse other) {
+      if (other
+          == com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+              .getDefaultInstance()) return this;
+      if (!other.getAccessToken().isEmpty()) {
+        accessToken_ = other.accessToken_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (other.getExpiresIn() != 0) {
+        setExpiresIn(other.getExpiresIn());
+      }
+      if (!other.getTokenType().isEmpty()) {
+        tokenType_ = other.tokenType_;
+        bitField0_ |= 0x00000004;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                accessToken_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 16:
+              {
+                expiresIn_ = input.readInt32();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 16
+            case 26:
+              {
+                tokenType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000004;
+                break;
+              } // case 26
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object accessToken_ = "";
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @return The accessToken.
+     */
+    public java.lang.String getAccessToken() {
+      java.lang.Object ref = accessToken_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        accessToken_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @return The bytes for accessToken.
+     */
+    public com.google.protobuf.ByteString getAccessTokenBytes() {
+      java.lang.Object ref = accessToken_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        accessToken_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @param value The accessToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAccessToken(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      accessToken_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAccessToken() {
+      accessToken_ = getDefaultInstance().getAccessToken();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @param value The bytes for accessToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAccessTokenBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      accessToken_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private int expiresIn_;
+    /**
+     * <code>int32 expires_in = 2;</code>
+     *
+     * @return The expiresIn.
+     */
+    @java.lang.Override
+    public int getExpiresIn() {
+      return expiresIn_;
+    }
+    /**
+     * <code>int32 expires_in = 2;</code>
+     *
+     * @param value The expiresIn to set.
+     * @return This builder for chaining.
+     */
+    public Builder setExpiresIn(int value) {
+
+      expiresIn_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>int32 expires_in = 2;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearExpiresIn() {
+      bitField0_ = (bitField0_ & ~0x00000002);
+      expiresIn_ = 0;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object tokenType_ = "";
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @return The tokenType.
+     */
+    public java.lang.String getTokenType() {
+      java.lang.Object ref = tokenType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        tokenType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @return The bytes for tokenType.
+     */
+    public com.google.protobuf.ByteString getTokenTypeBytes() {
+      java.lang.Object ref = tokenType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        tokenType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @param value The tokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setTokenType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      tokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearTokenType() {
+      tokenType_ = getDefaultInstance().getTokenType();
+      bitField0_ = (bitField0_ & ~0x00000004);
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @param value The bytes for tokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setTokenTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      tokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse)
+  private static final com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE =
+        new com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GenerateAttachedClusterAgentTokenResponse>
+      PARSER =
+          new com.google.protobuf.AbstractParser<GenerateAttachedClusterAgentTokenResponse>() {
+            @java.lang.Override
+            public GenerateAttachedClusterAgentTokenResponse parsePartialFrom(
+                com.google.protobuf.CodedInputStream input,
+                com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+                throws com.google.protobuf.InvalidProtocolBufferException {
+              Builder builder = newBuilder();
+              try {
+                builder.mergeFrom(input, extensionRegistry);
+              } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+                throw e.setUnfinishedMessage(builder.buildPartial());
+              } catch (com.google.protobuf.UninitializedMessageException e) {
+                throw e.asInvalidProtocolBufferException()
+                    .setUnfinishedMessage(builder.buildPartial());
+              } catch (java.io.IOException e) {
+                throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                    .setUnfinishedMessage(builder.buildPartial());
+              }
+              return builder.buildPartial();
+            }
+          };
+
+  public static com.google.protobuf.Parser<GenerateAttachedClusterAgentTokenResponse> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GenerateAttachedClusterAgentTokenResponse> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse
+      getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenResponseOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenResponseOrBuilder.java
new file mode 100644
index 000000000000..be790eb87c17
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterAgentTokenResponseOrBuilder.java
@@ -0,0 +1,58 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/attached_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface GenerateAttachedClusterAgentTokenResponseOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The accessToken.
+   */
+  java.lang.String getAccessToken();
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The bytes for accessToken.
+   */
+  com.google.protobuf.ByteString getAccessTokenBytes();
+
+  /**
+   * <code>int32 expires_in = 2;</code>
+   *
+   * @return The expiresIn.
+   */
+  int getExpiresIn();
+
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The tokenType.
+   */
+  java.lang.String getTokenType();
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The bytes for tokenType.
+   */
+  com.google.protobuf.ByteString getTokenTypeBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterInstallManifestRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterInstallManifestRequest.java
index bba8c4971756..df7f54ecf8aa 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterInstallManifestRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterInstallManifestRequest.java
@@ -275,6 +275,62 @@ public com.google.protobuf.ByteString getPlatformVersionBytes() {
     }
   }
 
+  public static final int PROXY_CONFIG_FIELD_NUMBER = 4;
+  private com.google.cloud.gkemulticloud.v1.AttachedProxyConfig proxyConfig_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the proxyConfig field is set.
+   */
+  @java.lang.Override
+  public boolean hasProxyConfig() {
+    return proxyConfig_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The proxyConfig.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getProxyConfig() {
+    return proxyConfig_ == null
+        ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+        : proxyConfig_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder getProxyConfigOrBuilder() {
+    return proxyConfig_ == null
+        ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+        : proxyConfig_;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -298,6 +354,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(platformVersion_)) {
       com.google.protobuf.GeneratedMessageV3.writeString(output, 3, platformVersion_);
     }
+    if (proxyConfig_ != null) {
+      output.writeMessage(4, getProxyConfig());
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -316,6 +375,9 @@ public int getSerializedSize() {
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(platformVersion_)) {
       size += com.google.protobuf.GeneratedMessageV3.computeStringSize(3, platformVersion_);
     }
+    if (proxyConfig_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(4, getProxyConfig());
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -337,6 +399,10 @@ public boolean equals(final java.lang.Object obj) {
     if (!getParent().equals(other.getParent())) return false;
     if (!getAttachedClusterId().equals(other.getAttachedClusterId())) return false;
     if (!getPlatformVersion().equals(other.getPlatformVersion())) return false;
+    if (hasProxyConfig() != other.hasProxyConfig()) return false;
+    if (hasProxyConfig()) {
+      if (!getProxyConfig().equals(other.getProxyConfig())) return false;
+    }
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -354,6 +420,10 @@ public int hashCode() {
     hash = (53 * hash) + getAttachedClusterId().hashCode();
     hash = (37 * hash) + PLATFORM_VERSION_FIELD_NUMBER;
     hash = (53 * hash) + getPlatformVersion().hashCode();
+    if (hasProxyConfig()) {
+      hash = (37 * hash) + PROXY_CONFIG_FIELD_NUMBER;
+      hash = (53 * hash) + getProxyConfig().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -507,6 +577,11 @@ public Builder clear() {
       parent_ = "";
       attachedClusterId_ = "";
       platformVersion_ = "";
+      proxyConfig_ = null;
+      if (proxyConfigBuilder_ != null) {
+        proxyConfigBuilder_.dispose();
+        proxyConfigBuilder_ = null;
+      }
       return this;
     }
 
@@ -557,6 +632,10 @@ private void buildPartial0(
       if (((from_bitField0_ & 0x00000004) != 0)) {
         result.platformVersion_ = platformVersion_;
       }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.proxyConfig_ =
+            proxyConfigBuilder_ == null ? proxyConfig_ : proxyConfigBuilder_.build();
+      }
     }
 
     @java.lang.Override
@@ -626,6 +705,9 @@ public Builder mergeFrom(
         bitField0_ |= 0x00000004;
         onChanged();
       }
+      if (other.hasProxyConfig()) {
+        mergeProxyConfig(other.getProxyConfig());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -670,6 +752,12 @@ public Builder mergeFrom(
                 bitField0_ |= 0x00000004;
                 break;
               } // case 26
+            case 34:
+              {
+                input.readMessage(getProxyConfigFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 34
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -1142,6 +1230,210 @@ public Builder setPlatformVersionBytes(com.google.protobuf.ByteString value) {
       return this;
     }
 
+    private com.google.cloud.gkemulticloud.v1.AttachedProxyConfig proxyConfig_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder>
+        proxyConfigBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the proxyConfig field is set.
+     */
+    public boolean hasProxyConfig() {
+      return ((bitField0_ & 0x00000008) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The proxyConfig.
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getProxyConfig() {
+      if (proxyConfigBuilder_ == null) {
+        return proxyConfig_ == null
+            ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+            : proxyConfig_;
+      } else {
+        return proxyConfigBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setProxyConfig(com.google.cloud.gkemulticloud.v1.AttachedProxyConfig value) {
+      if (proxyConfigBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        proxyConfig_ = value;
+      } else {
+        proxyConfigBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setProxyConfig(
+        com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder builderForValue) {
+      if (proxyConfigBuilder_ == null) {
+        proxyConfig_ = builderForValue.build();
+      } else {
+        proxyConfigBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeProxyConfig(com.google.cloud.gkemulticloud.v1.AttachedProxyConfig value) {
+      if (proxyConfigBuilder_ == null) {
+        if (((bitField0_ & 0x00000008) != 0)
+            && proxyConfig_ != null
+            && proxyConfig_
+                != com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()) {
+          getProxyConfigBuilder().mergeFrom(value);
+        } else {
+          proxyConfig_ = value;
+        }
+      } else {
+        proxyConfigBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearProxyConfig() {
+      bitField0_ = (bitField0_ & ~0x00000008);
+      proxyConfig_ = null;
+      if (proxyConfigBuilder_ != null) {
+        proxyConfigBuilder_.dispose();
+        proxyConfigBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder getProxyConfigBuilder() {
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return getProxyConfigFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder
+        getProxyConfigOrBuilder() {
+      if (proxyConfigBuilder_ != null) {
+        return proxyConfigBuilder_.getMessageOrBuilder();
+      } else {
+        return proxyConfig_ == null
+            ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+            : proxyConfig_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder>
+        getProxyConfigFieldBuilder() {
+      if (proxyConfigBuilder_ == null) {
+        proxyConfigBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.AttachedProxyConfig,
+                com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder,
+                com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder>(
+                getProxyConfig(), getParentForChildren(), isClean());
+        proxyConfig_ = null;
+      }
+      return proxyConfigBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterInstallManifestRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterInstallManifestRequestOrBuilder.java
index 9c56bacf30a0..c83b1a432322 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterInstallManifestRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAttachedClusterInstallManifestRequestOrBuilder.java
@@ -151,4 +151,45 @@ public interface GenerateAttachedClusterInstallManifestRequestOrBuilder
    * @return The bytes for platformVersion.
    */
   com.google.protobuf.ByteString getPlatformVersionBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the proxyConfig field is set.
+   */
+  boolean hasProxyConfig();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The proxyConfig.
+   */
+  com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getProxyConfig();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 4 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder getProxyConfigOrBuilder();
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenRequest.java
new file mode 100644
index 000000000000..114612f4af7c
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenRequest.java
@@ -0,0 +1,2274 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/** Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest} */
+public final class GenerateAwsClusterAgentTokenRequest
+    extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest)
+    GenerateAwsClusterAgentTokenRequestOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use GenerateAwsClusterAgentTokenRequest.newBuilder() to construct.
+  private GenerateAwsClusterAgentTokenRequest(
+      com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GenerateAwsClusterAgentTokenRequest() {
+    awsCluster_ = "";
+    subjectToken_ = "";
+    subjectTokenType_ = "";
+    version_ = "";
+    nodePoolId_ = "";
+    grantType_ = "";
+    audience_ = "";
+    scope_ = "";
+    requestedTokenType_ = "";
+    options_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new GenerateAwsClusterAgentTokenRequest();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenRequest_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenRequest_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest.class,
+            com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest.Builder.class);
+  }
+
+  public static final int AWS_CLUSTER_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object awsCluster_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The awsCluster.
+   */
+  @java.lang.Override
+  public java.lang.String getAwsCluster() {
+    java.lang.Object ref = awsCluster_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      awsCluster_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for awsCluster.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAwsClusterBytes() {
+    java.lang.Object ref = awsCluster_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      awsCluster_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int SUBJECT_TOKEN_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object subjectToken_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectToken.
+   */
+  @java.lang.Override
+  public java.lang.String getSubjectToken() {
+    java.lang.Object ref = subjectToken_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      subjectToken_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectToken.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getSubjectTokenBytes() {
+    java.lang.Object ref = subjectToken_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      subjectToken_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int SUBJECT_TOKEN_TYPE_FIELD_NUMBER = 3;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object subjectTokenType_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectTokenType.
+   */
+  @java.lang.Override
+  public java.lang.String getSubjectTokenType() {
+    java.lang.Object ref = subjectTokenType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      subjectTokenType_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectTokenType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getSubjectTokenTypeBytes() {
+    java.lang.Object ref = subjectTokenType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      subjectTokenType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int VERSION_FIELD_NUMBER = 4;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object version_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The version.
+   */
+  @java.lang.Override
+  public java.lang.String getVersion() {
+    java.lang.Object ref = version_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      version_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for version.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getVersionBytes() {
+    java.lang.Object ref = version_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      version_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int NODE_POOL_ID_FIELD_NUMBER = 5;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object nodePoolId_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The nodePoolId.
+   */
+  @java.lang.Override
+  public java.lang.String getNodePoolId() {
+    java.lang.Object ref = nodePoolId_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      nodePoolId_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for nodePoolId.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getNodePoolIdBytes() {
+    java.lang.Object ref = nodePoolId_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      nodePoolId_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int GRANT_TYPE_FIELD_NUMBER = 6;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object grantType_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The grantType.
+   */
+  @java.lang.Override
+  public java.lang.String getGrantType() {
+    java.lang.Object ref = grantType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      grantType_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for grantType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getGrantTypeBytes() {
+    java.lang.Object ref = grantType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      grantType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int AUDIENCE_FIELD_NUMBER = 7;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object audience_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The audience.
+   */
+  @java.lang.Override
+  public java.lang.String getAudience() {
+    java.lang.Object ref = audience_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      audience_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for audience.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAudienceBytes() {
+    java.lang.Object ref = audience_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      audience_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int SCOPE_FIELD_NUMBER = 8;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object scope_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The scope.
+   */
+  @java.lang.Override
+  public java.lang.String getScope() {
+    java.lang.Object ref = scope_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      scope_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for scope.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getScopeBytes() {
+    java.lang.Object ref = scope_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      scope_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int REQUESTED_TOKEN_TYPE_FIELD_NUMBER = 9;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object requestedTokenType_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The requestedTokenType.
+   */
+  @java.lang.Override
+  public java.lang.String getRequestedTokenType() {
+    java.lang.Object ref = requestedTokenType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      requestedTokenType_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for requestedTokenType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getRequestedTokenTypeBytes() {
+    java.lang.Object ref = requestedTokenType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      requestedTokenType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int OPTIONS_FIELD_NUMBER = 10;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object options_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The options.
+   */
+  @java.lang.Override
+  public java.lang.String getOptions() {
+    java.lang.Object ref = options_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      options_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for options.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getOptionsBytes() {
+    java.lang.Object ref = options_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      options_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(awsCluster_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, awsCluster_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectToken_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 2, subjectToken_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectTokenType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 3, subjectTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(version_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 4, version_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(nodePoolId_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 5, nodePoolId_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(grantType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 6, grantType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(audience_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 7, audience_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(scope_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 8, scope_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(requestedTokenType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 9, requestedTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(options_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 10, options_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(awsCluster_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, awsCluster_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectToken_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(2, subjectToken_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectTokenType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(3, subjectTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(version_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(4, version_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(nodePoolId_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(5, nodePoolId_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(grantType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(6, grantType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(audience_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(7, audience_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(scope_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(8, scope_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(requestedTokenType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(9, requestedTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(options_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(10, options_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest other =
+        (com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest) obj;
+
+    if (!getAwsCluster().equals(other.getAwsCluster())) return false;
+    if (!getSubjectToken().equals(other.getSubjectToken())) return false;
+    if (!getSubjectTokenType().equals(other.getSubjectTokenType())) return false;
+    if (!getVersion().equals(other.getVersion())) return false;
+    if (!getNodePoolId().equals(other.getNodePoolId())) return false;
+    if (!getGrantType().equals(other.getGrantType())) return false;
+    if (!getAudience().equals(other.getAudience())) return false;
+    if (!getScope().equals(other.getScope())) return false;
+    if (!getRequestedTokenType().equals(other.getRequestedTokenType())) return false;
+    if (!getOptions().equals(other.getOptions())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + AWS_CLUSTER_FIELD_NUMBER;
+    hash = (53 * hash) + getAwsCluster().hashCode();
+    hash = (37 * hash) + SUBJECT_TOKEN_FIELD_NUMBER;
+    hash = (53 * hash) + getSubjectToken().hashCode();
+    hash = (37 * hash) + SUBJECT_TOKEN_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getSubjectTokenType().hashCode();
+    hash = (37 * hash) + VERSION_FIELD_NUMBER;
+    hash = (53 * hash) + getVersion().hashCode();
+    hash = (37 * hash) + NODE_POOL_ID_FIELD_NUMBER;
+    hash = (53 * hash) + getNodePoolId().hashCode();
+    hash = (37 * hash) + GRANT_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getGrantType().hashCode();
+    hash = (37 * hash) + AUDIENCE_FIELD_NUMBER;
+    hash = (53 * hash) + getAudience().hashCode();
+    hash = (37 * hash) + SCOPE_FIELD_NUMBER;
+    hash = (53 * hash) + getScope().hashCode();
+    hash = (37 * hash) + REQUESTED_TOKEN_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getRequestedTokenType().hashCode();
+    hash = (37 * hash) + OPTIONS_FIELD_NUMBER;
+    hash = (53 * hash) + getOptions().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest parseFrom(
+      byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest
+      parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest
+      parseDelimitedFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /** Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest} */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest)
+      com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequestOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenRequest_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenRequest_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest.class,
+              com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest.Builder.class);
+    }
+
+    // Construct using
+    // com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      awsCluster_ = "";
+      subjectToken_ = "";
+      subjectTokenType_ = "";
+      version_ = "";
+      nodePoolId_ = "";
+      grantType_ = "";
+      audience_ = "";
+      scope_ = "";
+      requestedTokenType_ = "";
+      options_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenRequest_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest
+        getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest
+          .getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest build() {
+      com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest buildPartial() {
+      com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest result =
+          new com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.awsCluster_ = awsCluster_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.subjectToken_ = subjectToken_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        result.subjectTokenType_ = subjectTokenType_;
+      }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.version_ = version_;
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
+        result.nodePoolId_ = nodePoolId_;
+      }
+      if (((from_bitField0_ & 0x00000020) != 0)) {
+        result.grantType_ = grantType_;
+      }
+      if (((from_bitField0_ & 0x00000040) != 0)) {
+        result.audience_ = audience_;
+      }
+      if (((from_bitField0_ & 0x00000080) != 0)) {
+        result.scope_ = scope_;
+      }
+      if (((from_bitField0_ & 0x00000100) != 0)) {
+        result.requestedTokenType_ = requestedTokenType_;
+      }
+      if (((from_bitField0_ & 0x00000200) != 0)) {
+        result.options_ = options_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest) {
+        return mergeFrom(
+            (com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(
+        com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest other) {
+      if (other
+          == com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest
+              .getDefaultInstance()) return this;
+      if (!other.getAwsCluster().isEmpty()) {
+        awsCluster_ = other.awsCluster_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (!other.getSubjectToken().isEmpty()) {
+        subjectToken_ = other.subjectToken_;
+        bitField0_ |= 0x00000002;
+        onChanged();
+      }
+      if (!other.getSubjectTokenType().isEmpty()) {
+        subjectTokenType_ = other.subjectTokenType_;
+        bitField0_ |= 0x00000004;
+        onChanged();
+      }
+      if (!other.getVersion().isEmpty()) {
+        version_ = other.version_;
+        bitField0_ |= 0x00000008;
+        onChanged();
+      }
+      if (!other.getNodePoolId().isEmpty()) {
+        nodePoolId_ = other.nodePoolId_;
+        bitField0_ |= 0x00000010;
+        onChanged();
+      }
+      if (!other.getGrantType().isEmpty()) {
+        grantType_ = other.grantType_;
+        bitField0_ |= 0x00000020;
+        onChanged();
+      }
+      if (!other.getAudience().isEmpty()) {
+        audience_ = other.audience_;
+        bitField0_ |= 0x00000040;
+        onChanged();
+      }
+      if (!other.getScope().isEmpty()) {
+        scope_ = other.scope_;
+        bitField0_ |= 0x00000080;
+        onChanged();
+      }
+      if (!other.getRequestedTokenType().isEmpty()) {
+        requestedTokenType_ = other.requestedTokenType_;
+        bitField0_ |= 0x00000100;
+        onChanged();
+      }
+      if (!other.getOptions().isEmpty()) {
+        options_ = other.options_;
+        bitField0_ |= 0x00000200;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                awsCluster_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 18:
+              {
+                subjectToken_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 18
+            case 26:
+              {
+                subjectTokenType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000004;
+                break;
+              } // case 26
+            case 34:
+              {
+                version_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 34
+            case 42:
+              {
+                nodePoolId_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000010;
+                break;
+              } // case 42
+            case 50:
+              {
+                grantType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000020;
+                break;
+              } // case 50
+            case 58:
+              {
+                audience_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000040;
+                break;
+              } // case 58
+            case 66:
+              {
+                scope_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000080;
+                break;
+              } // case 66
+            case 74:
+              {
+                requestedTokenType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000100;
+                break;
+              } // case 74
+            case 82:
+              {
+                options_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000200;
+                break;
+              } // case 82
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object awsCluster_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The awsCluster.
+     */
+    public java.lang.String getAwsCluster() {
+      java.lang.Object ref = awsCluster_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        awsCluster_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The bytes for awsCluster.
+     */
+    public com.google.protobuf.ByteString getAwsClusterBytes() {
+      java.lang.Object ref = awsCluster_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        awsCluster_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The awsCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAwsCluster(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      awsCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAwsCluster() {
+      awsCluster_ = getDefaultInstance().getAwsCluster();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The bytes for awsCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAwsClusterBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      awsCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object subjectToken_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The subjectToken.
+     */
+    public java.lang.String getSubjectToken() {
+      java.lang.Object ref = subjectToken_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        subjectToken_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for subjectToken.
+     */
+    public com.google.protobuf.ByteString getSubjectTokenBytes() {
+      java.lang.Object ref = subjectToken_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        subjectToken_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The subjectToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectToken(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      subjectToken_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearSubjectToken() {
+      subjectToken_ = getDefaultInstance().getSubjectToken();
+      bitField0_ = (bitField0_ & ~0x00000002);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for subjectToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTokenBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      subjectToken_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object subjectTokenType_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The subjectTokenType.
+     */
+    public java.lang.String getSubjectTokenType() {
+      java.lang.Object ref = subjectTokenType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        subjectTokenType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for subjectTokenType.
+     */
+    public com.google.protobuf.ByteString getSubjectTokenTypeBytes() {
+      java.lang.Object ref = subjectTokenType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        subjectTokenType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The subjectTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTokenType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      subjectTokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearSubjectTokenType() {
+      subjectTokenType_ = getDefaultInstance().getSubjectTokenType();
+      bitField0_ = (bitField0_ & ~0x00000004);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for subjectTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTokenTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      subjectTokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object version_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The version.
+     */
+    public java.lang.String getVersion() {
+      java.lang.Object ref = version_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        version_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for version.
+     */
+    public com.google.protobuf.ByteString getVersionBytes() {
+      java.lang.Object ref = version_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        version_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The version to set.
+     * @return This builder for chaining.
+     */
+    public Builder setVersion(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      version_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearVersion() {
+      version_ = getDefaultInstance().getVersion();
+      bitField0_ = (bitField0_ & ~0x00000008);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for version to set.
+     * @return This builder for chaining.
+     */
+    public Builder setVersionBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      version_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object nodePoolId_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The nodePoolId.
+     */
+    public java.lang.String getNodePoolId() {
+      java.lang.Object ref = nodePoolId_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        nodePoolId_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for nodePoolId.
+     */
+    public com.google.protobuf.ByteString getNodePoolIdBytes() {
+      java.lang.Object ref = nodePoolId_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        nodePoolId_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The nodePoolId to set.
+     * @return This builder for chaining.
+     */
+    public Builder setNodePoolId(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      nodePoolId_ = value;
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearNodePoolId() {
+      nodePoolId_ = getDefaultInstance().getNodePoolId();
+      bitField0_ = (bitField0_ & ~0x00000010);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for nodePoolId to set.
+     * @return This builder for chaining.
+     */
+    public Builder setNodePoolIdBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      nodePoolId_ = value;
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object grantType_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The grantType.
+     */
+    public java.lang.String getGrantType() {
+      java.lang.Object ref = grantType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        grantType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for grantType.
+     */
+    public com.google.protobuf.ByteString getGrantTypeBytes() {
+      java.lang.Object ref = grantType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        grantType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The grantType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGrantType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      grantType_ = value;
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearGrantType() {
+      grantType_ = getDefaultInstance().getGrantType();
+      bitField0_ = (bitField0_ & ~0x00000020);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for grantType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGrantTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      grantType_ = value;
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object audience_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The audience.
+     */
+    public java.lang.String getAudience() {
+      java.lang.Object ref = audience_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        audience_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for audience.
+     */
+    public com.google.protobuf.ByteString getAudienceBytes() {
+      java.lang.Object ref = audience_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        audience_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The audience to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAudience(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      audience_ = value;
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAudience() {
+      audience_ = getDefaultInstance().getAudience();
+      bitField0_ = (bitField0_ & ~0x00000040);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for audience to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAudienceBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      audience_ = value;
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object scope_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The scope.
+     */
+    public java.lang.String getScope() {
+      java.lang.Object ref = scope_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        scope_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for scope.
+     */
+    public com.google.protobuf.ByteString getScopeBytes() {
+      java.lang.Object ref = scope_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        scope_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The scope to set.
+     * @return This builder for chaining.
+     */
+    public Builder setScope(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      scope_ = value;
+      bitField0_ |= 0x00000080;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearScope() {
+      scope_ = getDefaultInstance().getScope();
+      bitField0_ = (bitField0_ & ~0x00000080);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for scope to set.
+     * @return This builder for chaining.
+     */
+    public Builder setScopeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      scope_ = value;
+      bitField0_ |= 0x00000080;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object requestedTokenType_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The requestedTokenType.
+     */
+    public java.lang.String getRequestedTokenType() {
+      java.lang.Object ref = requestedTokenType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        requestedTokenType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for requestedTokenType.
+     */
+    public com.google.protobuf.ByteString getRequestedTokenTypeBytes() {
+      java.lang.Object ref = requestedTokenType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        requestedTokenType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The requestedTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setRequestedTokenType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      requestedTokenType_ = value;
+      bitField0_ |= 0x00000100;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearRequestedTokenType() {
+      requestedTokenType_ = getDefaultInstance().getRequestedTokenType();
+      bitField0_ = (bitField0_ & ~0x00000100);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for requestedTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setRequestedTokenTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      requestedTokenType_ = value;
+      bitField0_ |= 0x00000100;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object options_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The options.
+     */
+    public java.lang.String getOptions() {
+      java.lang.Object ref = options_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        options_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for options.
+     */
+    public com.google.protobuf.ByteString getOptionsBytes() {
+      java.lang.Object ref = options_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        options_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The options to set.
+     * @return This builder for chaining.
+     */
+    public Builder setOptions(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      options_ = value;
+      bitField0_ |= 0x00000200;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearOptions() {
+      options_ = getDefaultInstance().getOptions();
+      bitField0_ = (bitField0_ & ~0x00000200);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for options to set.
+     * @return This builder for chaining.
+     */
+    public Builder setOptionsBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      options_ = value;
+      bitField0_ |= 0x00000200;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest)
+  private static final com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest
+      getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GenerateAwsClusterAgentTokenRequest> PARSER =
+      new com.google.protobuf.AbstractParser<GenerateAwsClusterAgentTokenRequest>() {
+        @java.lang.Override
+        public GenerateAwsClusterAgentTokenRequest parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GenerateAwsClusterAgentTokenRequest> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GenerateAwsClusterAgentTokenRequest> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest
+      getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenRequestOrBuilder.java
new file mode 100644
index 000000000000..fecf6c8f60dd
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenRequestOrBuilder.java
@@ -0,0 +1,279 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface GenerateAwsClusterAgentTokenRequestOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The awsCluster.
+   */
+  java.lang.String getAwsCluster();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for awsCluster.
+   */
+  com.google.protobuf.ByteString getAwsClusterBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectToken.
+   */
+  java.lang.String getSubjectToken();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectToken.
+   */
+  com.google.protobuf.ByteString getSubjectTokenBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectTokenType.
+   */
+  java.lang.String getSubjectTokenType();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectTokenType.
+   */
+  com.google.protobuf.ByteString getSubjectTokenTypeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The version.
+   */
+  java.lang.String getVersion();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for version.
+   */
+  com.google.protobuf.ByteString getVersionBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The nodePoolId.
+   */
+  java.lang.String getNodePoolId();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for nodePoolId.
+   */
+  com.google.protobuf.ByteString getNodePoolIdBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The grantType.
+   */
+  java.lang.String getGrantType();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for grantType.
+   */
+  com.google.protobuf.ByteString getGrantTypeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The audience.
+   */
+  java.lang.String getAudience();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for audience.
+   */
+  com.google.protobuf.ByteString getAudienceBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The scope.
+   */
+  java.lang.String getScope();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for scope.
+   */
+  com.google.protobuf.ByteString getScopeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The requestedTokenType.
+   */
+  java.lang.String getRequestedTokenType();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for requestedTokenType.
+   */
+  com.google.protobuf.ByteString getRequestedTokenTypeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The options.
+   */
+  java.lang.String getOptions();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for options.
+   */
+  com.google.protobuf.ByteString getOptionsBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenResponse.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenResponse.java
new file mode 100644
index 000000000000..b779b8455888
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenResponse.java
@@ -0,0 +1,790 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/** Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse} */
+public final class GenerateAwsClusterAgentTokenResponse
+    extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse)
+    GenerateAwsClusterAgentTokenResponseOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use GenerateAwsClusterAgentTokenResponse.newBuilder() to construct.
+  private GenerateAwsClusterAgentTokenResponse(
+      com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GenerateAwsClusterAgentTokenResponse() {
+    accessToken_ = "";
+    tokenType_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new GenerateAwsClusterAgentTokenResponse();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenResponse_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenResponse_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse.class,
+            com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse.Builder.class);
+  }
+
+  public static final int ACCESS_TOKEN_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object accessToken_ = "";
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The accessToken.
+   */
+  @java.lang.Override
+  public java.lang.String getAccessToken() {
+    java.lang.Object ref = accessToken_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      accessToken_ = s;
+      return s;
+    }
+  }
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The bytes for accessToken.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAccessTokenBytes() {
+    java.lang.Object ref = accessToken_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      accessToken_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int EXPIRES_IN_FIELD_NUMBER = 2;
+  private int expiresIn_ = 0;
+  /**
+   * <code>int32 expires_in = 2;</code>
+   *
+   * @return The expiresIn.
+   */
+  @java.lang.Override
+  public int getExpiresIn() {
+    return expiresIn_;
+  }
+
+  public static final int TOKEN_TYPE_FIELD_NUMBER = 3;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object tokenType_ = "";
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The tokenType.
+   */
+  @java.lang.Override
+  public java.lang.String getTokenType() {
+    java.lang.Object ref = tokenType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      tokenType_ = s;
+      return s;
+    }
+  }
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The bytes for tokenType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getTokenTypeBytes() {
+    java.lang.Object ref = tokenType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      tokenType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(accessToken_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, accessToken_);
+    }
+    if (expiresIn_ != 0) {
+      output.writeInt32(2, expiresIn_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(tokenType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 3, tokenType_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(accessToken_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, accessToken_);
+    }
+    if (expiresIn_ != 0) {
+      size += com.google.protobuf.CodedOutputStream.computeInt32Size(2, expiresIn_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(tokenType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(3, tokenType_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse other =
+        (com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse) obj;
+
+    if (!getAccessToken().equals(other.getAccessToken())) return false;
+    if (getExpiresIn() != other.getExpiresIn()) return false;
+    if (!getTokenType().equals(other.getTokenType())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + ACCESS_TOKEN_FIELD_NUMBER;
+    hash = (53 * hash) + getAccessToken().hashCode();
+    hash = (37 * hash) + EXPIRES_IN_FIELD_NUMBER;
+    hash = (53 * hash) + getExpiresIn();
+    hash = (37 * hash) + TOKEN_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getTokenType().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse parseFrom(
+      byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse
+      parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse
+      parseDelimitedFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /** Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse} */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse)
+      com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponseOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenResponse_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenResponse_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse.class,
+              com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse.Builder.class);
+    }
+
+    // Construct using
+    // com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      accessToken_ = "";
+      expiresIn_ = 0;
+      tokenType_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAwsClusterAgentTokenResponse_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse
+        getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse
+          .getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse build() {
+      com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse result =
+          buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse buildPartial() {
+      com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse result =
+          new com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.accessToken_ = accessToken_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.expiresIn_ = expiresIn_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        result.tokenType_ = tokenType_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse) {
+        return mergeFrom(
+            (com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(
+        com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse other) {
+      if (other
+          == com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse
+              .getDefaultInstance()) return this;
+      if (!other.getAccessToken().isEmpty()) {
+        accessToken_ = other.accessToken_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (other.getExpiresIn() != 0) {
+        setExpiresIn(other.getExpiresIn());
+      }
+      if (!other.getTokenType().isEmpty()) {
+        tokenType_ = other.tokenType_;
+        bitField0_ |= 0x00000004;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                accessToken_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 16:
+              {
+                expiresIn_ = input.readInt32();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 16
+            case 26:
+              {
+                tokenType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000004;
+                break;
+              } // case 26
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object accessToken_ = "";
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @return The accessToken.
+     */
+    public java.lang.String getAccessToken() {
+      java.lang.Object ref = accessToken_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        accessToken_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @return The bytes for accessToken.
+     */
+    public com.google.protobuf.ByteString getAccessTokenBytes() {
+      java.lang.Object ref = accessToken_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        accessToken_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @param value The accessToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAccessToken(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      accessToken_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAccessToken() {
+      accessToken_ = getDefaultInstance().getAccessToken();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @param value The bytes for accessToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAccessTokenBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      accessToken_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private int expiresIn_;
+    /**
+     * <code>int32 expires_in = 2;</code>
+     *
+     * @return The expiresIn.
+     */
+    @java.lang.Override
+    public int getExpiresIn() {
+      return expiresIn_;
+    }
+    /**
+     * <code>int32 expires_in = 2;</code>
+     *
+     * @param value The expiresIn to set.
+     * @return This builder for chaining.
+     */
+    public Builder setExpiresIn(int value) {
+
+      expiresIn_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>int32 expires_in = 2;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearExpiresIn() {
+      bitField0_ = (bitField0_ & ~0x00000002);
+      expiresIn_ = 0;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object tokenType_ = "";
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @return The tokenType.
+     */
+    public java.lang.String getTokenType() {
+      java.lang.Object ref = tokenType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        tokenType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @return The bytes for tokenType.
+     */
+    public com.google.protobuf.ByteString getTokenTypeBytes() {
+      java.lang.Object ref = tokenType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        tokenType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @param value The tokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setTokenType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      tokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearTokenType() {
+      tokenType_ = getDefaultInstance().getTokenType();
+      bitField0_ = (bitField0_ & ~0x00000004);
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @param value The bytes for tokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setTokenTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      tokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse)
+  private static final com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse
+      getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GenerateAwsClusterAgentTokenResponse> PARSER =
+      new com.google.protobuf.AbstractParser<GenerateAwsClusterAgentTokenResponse>() {
+        @java.lang.Override
+        public GenerateAwsClusterAgentTokenResponse parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GenerateAwsClusterAgentTokenResponse> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GenerateAwsClusterAgentTokenResponse> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse
+      getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenResponseOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenResponseOrBuilder.java
new file mode 100644
index 000000000000..402746db0b50
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAwsClusterAgentTokenResponseOrBuilder.java
@@ -0,0 +1,58 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface GenerateAwsClusterAgentTokenResponseOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The accessToken.
+   */
+  java.lang.String getAccessToken();
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The bytes for accessToken.
+   */
+  com.google.protobuf.ByteString getAccessTokenBytes();
+
+  /**
+   * <code>int32 expires_in = 2;</code>
+   *
+   * @return The expiresIn.
+   */
+  int getExpiresIn();
+
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The tokenType.
+   */
+  java.lang.String getTokenType();
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The bytes for tokenType.
+   */
+  com.google.protobuf.ByteString getTokenTypeBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureAccessTokenRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureAccessTokenRequest.java
index fcc37b7f98e3..ef4ca15b2d22 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureAccessTokenRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureAccessTokenRequest.java
@@ -76,7 +76,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    * authenticate to.
    *
    * `AzureCluster` names are formatted as
-   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/AzureClusters/&lt;cluster-id&gt;`.
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
    *
    * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
    * for more details on Google Cloud resource names.
@@ -109,7 +109,7 @@ public java.lang.String getAzureCluster() {
    * authenticate to.
    *
    * `AzureCluster` names are formatted as
-   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/AzureClusters/&lt;cluster-id&gt;`.
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
    *
    * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
    * for more details on Google Cloud resource names.
@@ -493,7 +493,7 @@ public Builder mergeFrom(
      * authenticate to.
      *
      * `AzureCluster` names are formatted as
-     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/AzureClusters/&lt;cluster-id&gt;`.
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
      *
      * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
      * for more details on Google Cloud resource names.
@@ -525,7 +525,7 @@ public java.lang.String getAzureCluster() {
      * authenticate to.
      *
      * `AzureCluster` names are formatted as
-     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/AzureClusters/&lt;cluster-id&gt;`.
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
      *
      * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
      * for more details on Google Cloud resource names.
@@ -557,7 +557,7 @@ public com.google.protobuf.ByteString getAzureClusterBytes() {
      * authenticate to.
      *
      * `AzureCluster` names are formatted as
-     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/AzureClusters/&lt;cluster-id&gt;`.
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
      *
      * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
      * for more details on Google Cloud resource names.
@@ -588,7 +588,7 @@ public Builder setAzureCluster(java.lang.String value) {
      * authenticate to.
      *
      * `AzureCluster` names are formatted as
-     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/AzureClusters/&lt;cluster-id&gt;`.
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
      *
      * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
      * for more details on Google Cloud resource names.
@@ -615,7 +615,7 @@ public Builder clearAzureCluster() {
      * authenticate to.
      *
      * `AzureCluster` names are formatted as
-     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/AzureClusters/&lt;cluster-id&gt;`.
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
      *
      * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
      * for more details on Google Cloud resource names.
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureAccessTokenRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureAccessTokenRequestOrBuilder.java
index 096e870f534f..27a4c30e623f 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureAccessTokenRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureAccessTokenRequestOrBuilder.java
@@ -32,7 +32,7 @@ public interface GenerateAzureAccessTokenRequestOrBuilder
    * authenticate to.
    *
    * `AzureCluster` names are formatted as
-   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/AzureClusters/&lt;cluster-id&gt;`.
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
    *
    * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
    * for more details on Google Cloud resource names.
@@ -54,7 +54,7 @@ public interface GenerateAzureAccessTokenRequestOrBuilder
    * authenticate to.
    *
    * `AzureCluster` names are formatted as
-   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/AzureClusters/&lt;cluster-id&gt;`.
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;`.
    *
    * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
    * for more details on Google Cloud resource names.
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenRequest.java
new file mode 100644
index 000000000000..12e32b2d8a6f
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenRequest.java
@@ -0,0 +1,2278 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/** Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest} */
+public final class GenerateAzureClusterAgentTokenRequest
+    extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest)
+    GenerateAzureClusterAgentTokenRequestOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use GenerateAzureClusterAgentTokenRequest.newBuilder() to construct.
+  private GenerateAzureClusterAgentTokenRequest(
+      com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GenerateAzureClusterAgentTokenRequest() {
+    azureCluster_ = "";
+    subjectToken_ = "";
+    subjectTokenType_ = "";
+    version_ = "";
+    nodePoolId_ = "";
+    grantType_ = "";
+    audience_ = "";
+    scope_ = "";
+    requestedTokenType_ = "";
+    options_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new GenerateAzureClusterAgentTokenRequest();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenRequest_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenRequest_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest.class,
+            com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest.Builder.class);
+  }
+
+  public static final int AZURE_CLUSTER_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object azureCluster_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The azureCluster.
+   */
+  @java.lang.Override
+  public java.lang.String getAzureCluster() {
+    java.lang.Object ref = azureCluster_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      azureCluster_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for azureCluster.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAzureClusterBytes() {
+    java.lang.Object ref = azureCluster_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      azureCluster_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int SUBJECT_TOKEN_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object subjectToken_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectToken.
+   */
+  @java.lang.Override
+  public java.lang.String getSubjectToken() {
+    java.lang.Object ref = subjectToken_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      subjectToken_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectToken.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getSubjectTokenBytes() {
+    java.lang.Object ref = subjectToken_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      subjectToken_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int SUBJECT_TOKEN_TYPE_FIELD_NUMBER = 3;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object subjectTokenType_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectTokenType.
+   */
+  @java.lang.Override
+  public java.lang.String getSubjectTokenType() {
+    java.lang.Object ref = subjectTokenType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      subjectTokenType_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectTokenType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getSubjectTokenTypeBytes() {
+    java.lang.Object ref = subjectTokenType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      subjectTokenType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int VERSION_FIELD_NUMBER = 4;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object version_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The version.
+   */
+  @java.lang.Override
+  public java.lang.String getVersion() {
+    java.lang.Object ref = version_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      version_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for version.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getVersionBytes() {
+    java.lang.Object ref = version_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      version_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int NODE_POOL_ID_FIELD_NUMBER = 5;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object nodePoolId_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The nodePoolId.
+   */
+  @java.lang.Override
+  public java.lang.String getNodePoolId() {
+    java.lang.Object ref = nodePoolId_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      nodePoolId_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for nodePoolId.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getNodePoolIdBytes() {
+    java.lang.Object ref = nodePoolId_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      nodePoolId_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int GRANT_TYPE_FIELD_NUMBER = 6;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object grantType_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The grantType.
+   */
+  @java.lang.Override
+  public java.lang.String getGrantType() {
+    java.lang.Object ref = grantType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      grantType_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for grantType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getGrantTypeBytes() {
+    java.lang.Object ref = grantType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      grantType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int AUDIENCE_FIELD_NUMBER = 7;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object audience_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The audience.
+   */
+  @java.lang.Override
+  public java.lang.String getAudience() {
+    java.lang.Object ref = audience_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      audience_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for audience.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAudienceBytes() {
+    java.lang.Object ref = audience_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      audience_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int SCOPE_FIELD_NUMBER = 8;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object scope_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The scope.
+   */
+  @java.lang.Override
+  public java.lang.String getScope() {
+    java.lang.Object ref = scope_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      scope_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for scope.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getScopeBytes() {
+    java.lang.Object ref = scope_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      scope_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int REQUESTED_TOKEN_TYPE_FIELD_NUMBER = 9;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object requestedTokenType_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The requestedTokenType.
+   */
+  @java.lang.Override
+  public java.lang.String getRequestedTokenType() {
+    java.lang.Object ref = requestedTokenType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      requestedTokenType_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for requestedTokenType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getRequestedTokenTypeBytes() {
+    java.lang.Object ref = requestedTokenType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      requestedTokenType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int OPTIONS_FIELD_NUMBER = 10;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object options_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The options.
+   */
+  @java.lang.Override
+  public java.lang.String getOptions() {
+    java.lang.Object ref = options_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      options_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for options.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getOptionsBytes() {
+    java.lang.Object ref = options_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      options_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(azureCluster_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, azureCluster_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectToken_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 2, subjectToken_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectTokenType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 3, subjectTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(version_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 4, version_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(nodePoolId_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 5, nodePoolId_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(grantType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 6, grantType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(audience_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 7, audience_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(scope_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 8, scope_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(requestedTokenType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 9, requestedTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(options_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 10, options_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(azureCluster_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, azureCluster_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectToken_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(2, subjectToken_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(subjectTokenType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(3, subjectTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(version_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(4, version_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(nodePoolId_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(5, nodePoolId_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(grantType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(6, grantType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(audience_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(7, audience_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(scope_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(8, scope_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(requestedTokenType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(9, requestedTokenType_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(options_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(10, options_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest other =
+        (com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest) obj;
+
+    if (!getAzureCluster().equals(other.getAzureCluster())) return false;
+    if (!getSubjectToken().equals(other.getSubjectToken())) return false;
+    if (!getSubjectTokenType().equals(other.getSubjectTokenType())) return false;
+    if (!getVersion().equals(other.getVersion())) return false;
+    if (!getNodePoolId().equals(other.getNodePoolId())) return false;
+    if (!getGrantType().equals(other.getGrantType())) return false;
+    if (!getAudience().equals(other.getAudience())) return false;
+    if (!getScope().equals(other.getScope())) return false;
+    if (!getRequestedTokenType().equals(other.getRequestedTokenType())) return false;
+    if (!getOptions().equals(other.getOptions())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + AZURE_CLUSTER_FIELD_NUMBER;
+    hash = (53 * hash) + getAzureCluster().hashCode();
+    hash = (37 * hash) + SUBJECT_TOKEN_FIELD_NUMBER;
+    hash = (53 * hash) + getSubjectToken().hashCode();
+    hash = (37 * hash) + SUBJECT_TOKEN_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getSubjectTokenType().hashCode();
+    hash = (37 * hash) + VERSION_FIELD_NUMBER;
+    hash = (53 * hash) + getVersion().hashCode();
+    hash = (37 * hash) + NODE_POOL_ID_FIELD_NUMBER;
+    hash = (53 * hash) + getNodePoolId().hashCode();
+    hash = (37 * hash) + GRANT_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getGrantType().hashCode();
+    hash = (37 * hash) + AUDIENCE_FIELD_NUMBER;
+    hash = (53 * hash) + getAudience().hashCode();
+    hash = (37 * hash) + SCOPE_FIELD_NUMBER;
+    hash = (53 * hash) + getScope().hashCode();
+    hash = (37 * hash) + REQUESTED_TOKEN_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getRequestedTokenType().hashCode();
+    hash = (37 * hash) + OPTIONS_FIELD_NUMBER;
+    hash = (53 * hash) + getOptions().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest parseFrom(
+      byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest
+      parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest
+      parseDelimitedFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /** Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest} */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest)
+      com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequestOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenRequest_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenRequest_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest.class,
+              com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest.Builder
+                  .class);
+    }
+
+    // Construct using
+    // com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      azureCluster_ = "";
+      subjectToken_ = "";
+      subjectTokenType_ = "";
+      version_ = "";
+      nodePoolId_ = "";
+      grantType_ = "";
+      audience_ = "";
+      scope_ = "";
+      requestedTokenType_ = "";
+      options_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenRequest_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest
+        getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest
+          .getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest build() {
+      com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest result =
+          buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest buildPartial() {
+      com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest result =
+          new com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.azureCluster_ = azureCluster_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.subjectToken_ = subjectToken_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        result.subjectTokenType_ = subjectTokenType_;
+      }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.version_ = version_;
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
+        result.nodePoolId_ = nodePoolId_;
+      }
+      if (((from_bitField0_ & 0x00000020) != 0)) {
+        result.grantType_ = grantType_;
+      }
+      if (((from_bitField0_ & 0x00000040) != 0)) {
+        result.audience_ = audience_;
+      }
+      if (((from_bitField0_ & 0x00000080) != 0)) {
+        result.scope_ = scope_;
+      }
+      if (((from_bitField0_ & 0x00000100) != 0)) {
+        result.requestedTokenType_ = requestedTokenType_;
+      }
+      if (((from_bitField0_ & 0x00000200) != 0)) {
+        result.options_ = options_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other
+          instanceof com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest) {
+        return mergeFrom(
+            (com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(
+        com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest other) {
+      if (other
+          == com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest
+              .getDefaultInstance()) return this;
+      if (!other.getAzureCluster().isEmpty()) {
+        azureCluster_ = other.azureCluster_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (!other.getSubjectToken().isEmpty()) {
+        subjectToken_ = other.subjectToken_;
+        bitField0_ |= 0x00000002;
+        onChanged();
+      }
+      if (!other.getSubjectTokenType().isEmpty()) {
+        subjectTokenType_ = other.subjectTokenType_;
+        bitField0_ |= 0x00000004;
+        onChanged();
+      }
+      if (!other.getVersion().isEmpty()) {
+        version_ = other.version_;
+        bitField0_ |= 0x00000008;
+        onChanged();
+      }
+      if (!other.getNodePoolId().isEmpty()) {
+        nodePoolId_ = other.nodePoolId_;
+        bitField0_ |= 0x00000010;
+        onChanged();
+      }
+      if (!other.getGrantType().isEmpty()) {
+        grantType_ = other.grantType_;
+        bitField0_ |= 0x00000020;
+        onChanged();
+      }
+      if (!other.getAudience().isEmpty()) {
+        audience_ = other.audience_;
+        bitField0_ |= 0x00000040;
+        onChanged();
+      }
+      if (!other.getScope().isEmpty()) {
+        scope_ = other.scope_;
+        bitField0_ |= 0x00000080;
+        onChanged();
+      }
+      if (!other.getRequestedTokenType().isEmpty()) {
+        requestedTokenType_ = other.requestedTokenType_;
+        bitField0_ |= 0x00000100;
+        onChanged();
+      }
+      if (!other.getOptions().isEmpty()) {
+        options_ = other.options_;
+        bitField0_ |= 0x00000200;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                azureCluster_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 18:
+              {
+                subjectToken_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 18
+            case 26:
+              {
+                subjectTokenType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000004;
+                break;
+              } // case 26
+            case 34:
+              {
+                version_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 34
+            case 42:
+              {
+                nodePoolId_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000010;
+                break;
+              } // case 42
+            case 50:
+              {
+                grantType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000020;
+                break;
+              } // case 50
+            case 58:
+              {
+                audience_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000040;
+                break;
+              } // case 58
+            case 66:
+              {
+                scope_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000080;
+                break;
+              } // case 66
+            case 74:
+              {
+                requestedTokenType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000100;
+                break;
+              } // case 74
+            case 82:
+              {
+                options_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000200;
+                break;
+              } // case 82
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object azureCluster_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The azureCluster.
+     */
+    public java.lang.String getAzureCluster() {
+      java.lang.Object ref = azureCluster_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        azureCluster_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The bytes for azureCluster.
+     */
+    public com.google.protobuf.ByteString getAzureClusterBytes() {
+      java.lang.Object ref = azureCluster_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        azureCluster_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The azureCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAzureCluster(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      azureCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAzureCluster() {
+      azureCluster_ = getDefaultInstance().getAzureCluster();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The bytes for azureCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAzureClusterBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      azureCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object subjectToken_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The subjectToken.
+     */
+    public java.lang.String getSubjectToken() {
+      java.lang.Object ref = subjectToken_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        subjectToken_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for subjectToken.
+     */
+    public com.google.protobuf.ByteString getSubjectTokenBytes() {
+      java.lang.Object ref = subjectToken_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        subjectToken_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The subjectToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectToken(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      subjectToken_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearSubjectToken() {
+      subjectToken_ = getDefaultInstance().getSubjectToken();
+      bitField0_ = (bitField0_ & ~0x00000002);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for subjectToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTokenBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      subjectToken_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object subjectTokenType_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The subjectTokenType.
+     */
+    public java.lang.String getSubjectTokenType() {
+      java.lang.Object ref = subjectTokenType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        subjectTokenType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for subjectTokenType.
+     */
+    public com.google.protobuf.ByteString getSubjectTokenTypeBytes() {
+      java.lang.Object ref = subjectTokenType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        subjectTokenType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The subjectTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTokenType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      subjectTokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearSubjectTokenType() {
+      subjectTokenType_ = getDefaultInstance().getSubjectTokenType();
+      bitField0_ = (bitField0_ & ~0x00000004);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for subjectTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setSubjectTokenTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      subjectTokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object version_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The version.
+     */
+    public java.lang.String getVersion() {
+      java.lang.Object ref = version_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        version_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The bytes for version.
+     */
+    public com.google.protobuf.ByteString getVersionBytes() {
+      java.lang.Object ref = version_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        version_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The version to set.
+     * @return This builder for chaining.
+     */
+    public Builder setVersion(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      version_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearVersion() {
+      version_ = getDefaultInstance().getVersion();
+      bitField0_ = (bitField0_ & ~0x00000008);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required.
+     * </pre>
+     *
+     * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes for version to set.
+     * @return This builder for chaining.
+     */
+    public Builder setVersionBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      version_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object nodePoolId_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The nodePoolId.
+     */
+    public java.lang.String getNodePoolId() {
+      java.lang.Object ref = nodePoolId_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        nodePoolId_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for nodePoolId.
+     */
+    public com.google.protobuf.ByteString getNodePoolIdBytes() {
+      java.lang.Object ref = nodePoolId_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        nodePoolId_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The nodePoolId to set.
+     * @return This builder for chaining.
+     */
+    public Builder setNodePoolId(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      nodePoolId_ = value;
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearNodePoolId() {
+      nodePoolId_ = getDefaultInstance().getNodePoolId();
+      bitField0_ = (bitField0_ & ~0x00000010);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for nodePoolId to set.
+     * @return This builder for chaining.
+     */
+    public Builder setNodePoolIdBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      nodePoolId_ = value;
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object grantType_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The grantType.
+     */
+    public java.lang.String getGrantType() {
+      java.lang.Object ref = grantType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        grantType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for grantType.
+     */
+    public com.google.protobuf.ByteString getGrantTypeBytes() {
+      java.lang.Object ref = grantType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        grantType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The grantType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGrantType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      grantType_ = value;
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearGrantType() {
+      grantType_ = getDefaultInstance().getGrantType();
+      bitField0_ = (bitField0_ & ~0x00000020);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for grantType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setGrantTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      grantType_ = value;
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object audience_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The audience.
+     */
+    public java.lang.String getAudience() {
+      java.lang.Object ref = audience_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        audience_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for audience.
+     */
+    public com.google.protobuf.ByteString getAudienceBytes() {
+      java.lang.Object ref = audience_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        audience_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The audience to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAudience(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      audience_ = value;
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAudience() {
+      audience_ = getDefaultInstance().getAudience();
+      bitField0_ = (bitField0_ & ~0x00000040);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for audience to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAudienceBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      audience_ = value;
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object scope_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The scope.
+     */
+    public java.lang.String getScope() {
+      java.lang.Object ref = scope_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        scope_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for scope.
+     */
+    public com.google.protobuf.ByteString getScopeBytes() {
+      java.lang.Object ref = scope_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        scope_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The scope to set.
+     * @return This builder for chaining.
+     */
+    public Builder setScope(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      scope_ = value;
+      bitField0_ |= 0x00000080;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearScope() {
+      scope_ = getDefaultInstance().getScope();
+      bitField0_ = (bitField0_ & ~0x00000080);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for scope to set.
+     * @return This builder for chaining.
+     */
+    public Builder setScopeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      scope_ = value;
+      bitField0_ |= 0x00000080;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object requestedTokenType_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The requestedTokenType.
+     */
+    public java.lang.String getRequestedTokenType() {
+      java.lang.Object ref = requestedTokenType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        requestedTokenType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for requestedTokenType.
+     */
+    public com.google.protobuf.ByteString getRequestedTokenTypeBytes() {
+      java.lang.Object ref = requestedTokenType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        requestedTokenType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The requestedTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setRequestedTokenType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      requestedTokenType_ = value;
+      bitField0_ |= 0x00000100;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearRequestedTokenType() {
+      requestedTokenType_ = getDefaultInstance().getRequestedTokenType();
+      bitField0_ = (bitField0_ & ~0x00000100);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for requestedTokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setRequestedTokenTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      requestedTokenType_ = value;
+      bitField0_ |= 0x00000100;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object options_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The options.
+     */
+    public java.lang.String getOptions() {
+      java.lang.Object ref = options_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        options_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The bytes for options.
+     */
+    public com.google.protobuf.ByteString getOptionsBytes() {
+      java.lang.Object ref = options_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        options_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The options to set.
+     * @return This builder for chaining.
+     */
+    public Builder setOptions(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      options_ = value;
+      bitField0_ |= 0x00000200;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearOptions() {
+      options_ = getDefaultInstance().getOptions();
+      bitField0_ = (bitField0_ & ~0x00000200);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional.
+     * </pre>
+     *
+     * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The bytes for options to set.
+     * @return This builder for chaining.
+     */
+    public Builder setOptionsBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      options_ = value;
+      bitField0_ |= 0x00000200;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest)
+  private static final com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE =
+        new com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest
+      getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GenerateAzureClusterAgentTokenRequest> PARSER =
+      new com.google.protobuf.AbstractParser<GenerateAzureClusterAgentTokenRequest>() {
+        @java.lang.Override
+        public GenerateAzureClusterAgentTokenRequest parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GenerateAzureClusterAgentTokenRequest> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GenerateAzureClusterAgentTokenRequest> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest
+      getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenRequestOrBuilder.java
new file mode 100644
index 000000000000..ae8d7e43efe1
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenRequestOrBuilder.java
@@ -0,0 +1,279 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface GenerateAzureClusterAgentTokenRequestOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The azureCluster.
+   */
+  java.lang.String getAzureCluster();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for azureCluster.
+   */
+  com.google.protobuf.ByteString getAzureClusterBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectToken.
+   */
+  java.lang.String getSubjectToken();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token = 2 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectToken.
+   */
+  com.google.protobuf.ByteString getSubjectTokenBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The subjectTokenType.
+   */
+  java.lang.String getSubjectTokenType();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string subject_token_type = 3 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for subjectTokenType.
+   */
+  com.google.protobuf.ByteString getSubjectTokenTypeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The version.
+   */
+  java.lang.String getVersion();
+  /**
+   *
+   *
+   * <pre>
+   * Required.
+   * </pre>
+   *
+   * <code>string version = 4 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The bytes for version.
+   */
+  com.google.protobuf.ByteString getVersionBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The nodePoolId.
+   */
+  java.lang.String getNodePoolId();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string node_pool_id = 5 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for nodePoolId.
+   */
+  com.google.protobuf.ByteString getNodePoolIdBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The grantType.
+   */
+  java.lang.String getGrantType();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string grant_type = 6 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for grantType.
+   */
+  com.google.protobuf.ByteString getGrantTypeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The audience.
+   */
+  java.lang.String getAudience();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string audience = 7 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for audience.
+   */
+  com.google.protobuf.ByteString getAudienceBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The scope.
+   */
+  java.lang.String getScope();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string scope = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for scope.
+   */
+  com.google.protobuf.ByteString getScopeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The requestedTokenType.
+   */
+  java.lang.String getRequestedTokenType();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string requested_token_type = 9 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for requestedTokenType.
+   */
+  com.google.protobuf.ByteString getRequestedTokenTypeBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The options.
+   */
+  java.lang.String getOptions();
+  /**
+   *
+   *
+   * <pre>
+   * Optional.
+   * </pre>
+   *
+   * <code>string options = 10 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The bytes for options.
+   */
+  com.google.protobuf.ByteString getOptionsBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenResponse.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenResponse.java
new file mode 100644
index 000000000000..a0188ebeb319
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenResponse.java
@@ -0,0 +1,794 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/** Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse} */
+public final class GenerateAzureClusterAgentTokenResponse
+    extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse)
+    GenerateAzureClusterAgentTokenResponseOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use GenerateAzureClusterAgentTokenResponse.newBuilder() to construct.
+  private GenerateAzureClusterAgentTokenResponse(
+      com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GenerateAzureClusterAgentTokenResponse() {
+    accessToken_ = "";
+    tokenType_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new GenerateAzureClusterAgentTokenResponse();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenResponse_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenResponse_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse.class,
+            com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse.Builder.class);
+  }
+
+  public static final int ACCESS_TOKEN_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object accessToken_ = "";
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The accessToken.
+   */
+  @java.lang.Override
+  public java.lang.String getAccessToken() {
+    java.lang.Object ref = accessToken_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      accessToken_ = s;
+      return s;
+    }
+  }
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The bytes for accessToken.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAccessTokenBytes() {
+    java.lang.Object ref = accessToken_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      accessToken_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int EXPIRES_IN_FIELD_NUMBER = 2;
+  private int expiresIn_ = 0;
+  /**
+   * <code>int32 expires_in = 2;</code>
+   *
+   * @return The expiresIn.
+   */
+  @java.lang.Override
+  public int getExpiresIn() {
+    return expiresIn_;
+  }
+
+  public static final int TOKEN_TYPE_FIELD_NUMBER = 3;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object tokenType_ = "";
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The tokenType.
+   */
+  @java.lang.Override
+  public java.lang.String getTokenType() {
+    java.lang.Object ref = tokenType_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      tokenType_ = s;
+      return s;
+    }
+  }
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The bytes for tokenType.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getTokenTypeBytes() {
+    java.lang.Object ref = tokenType_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      tokenType_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(accessToken_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, accessToken_);
+    }
+    if (expiresIn_ != 0) {
+      output.writeInt32(2, expiresIn_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(tokenType_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 3, tokenType_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(accessToken_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, accessToken_);
+    }
+    if (expiresIn_ != 0) {
+      size += com.google.protobuf.CodedOutputStream.computeInt32Size(2, expiresIn_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(tokenType_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(3, tokenType_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj
+        instanceof com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse other =
+        (com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse) obj;
+
+    if (!getAccessToken().equals(other.getAccessToken())) return false;
+    if (getExpiresIn() != other.getExpiresIn()) return false;
+    if (!getTokenType().equals(other.getTokenType())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + ACCESS_TOKEN_FIELD_NUMBER;
+    hash = (53 * hash) + getAccessToken().hashCode();
+    hash = (37 * hash) + EXPIRES_IN_FIELD_NUMBER;
+    hash = (53 * hash) + getExpiresIn();
+    hash = (37 * hash) + TOKEN_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + getTokenType().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse parseFrom(
+      byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse
+      parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse
+      parseDelimitedFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /** Protobuf type {@code google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse} */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse)
+      com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponseOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenResponse_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenResponse_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse.class,
+              com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse.Builder
+                  .class);
+    }
+
+    // Construct using
+    // com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      accessToken_ = "";
+      expiresIn_ = 0;
+      tokenType_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GenerateAzureClusterAgentTokenResponse_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse
+        getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse
+          .getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse build() {
+      com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse result =
+          buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse buildPartial() {
+      com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse result =
+          new com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.accessToken_ = accessToken_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.expiresIn_ = expiresIn_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        result.tokenType_ = tokenType_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other
+          instanceof com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse) {
+        return mergeFrom(
+            (com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(
+        com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse other) {
+      if (other
+          == com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse
+              .getDefaultInstance()) return this;
+      if (!other.getAccessToken().isEmpty()) {
+        accessToken_ = other.accessToken_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (other.getExpiresIn() != 0) {
+        setExpiresIn(other.getExpiresIn());
+      }
+      if (!other.getTokenType().isEmpty()) {
+        tokenType_ = other.tokenType_;
+        bitField0_ |= 0x00000004;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                accessToken_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 16:
+              {
+                expiresIn_ = input.readInt32();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 16
+            case 26:
+              {
+                tokenType_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000004;
+                break;
+              } // case 26
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object accessToken_ = "";
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @return The accessToken.
+     */
+    public java.lang.String getAccessToken() {
+      java.lang.Object ref = accessToken_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        accessToken_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @return The bytes for accessToken.
+     */
+    public com.google.protobuf.ByteString getAccessTokenBytes() {
+      java.lang.Object ref = accessToken_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        accessToken_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @param value The accessToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAccessToken(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      accessToken_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAccessToken() {
+      accessToken_ = getDefaultInstance().getAccessToken();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string access_token = 1;</code>
+     *
+     * @param value The bytes for accessToken to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAccessTokenBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      accessToken_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private int expiresIn_;
+    /**
+     * <code>int32 expires_in = 2;</code>
+     *
+     * @return The expiresIn.
+     */
+    @java.lang.Override
+    public int getExpiresIn() {
+      return expiresIn_;
+    }
+    /**
+     * <code>int32 expires_in = 2;</code>
+     *
+     * @param value The expiresIn to set.
+     * @return This builder for chaining.
+     */
+    public Builder setExpiresIn(int value) {
+
+      expiresIn_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>int32 expires_in = 2;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearExpiresIn() {
+      bitField0_ = (bitField0_ & ~0x00000002);
+      expiresIn_ = 0;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object tokenType_ = "";
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @return The tokenType.
+     */
+    public java.lang.String getTokenType() {
+      java.lang.Object ref = tokenType_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        tokenType_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @return The bytes for tokenType.
+     */
+    public com.google.protobuf.ByteString getTokenTypeBytes() {
+      java.lang.Object ref = tokenType_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        tokenType_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @param value The tokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setTokenType(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      tokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearTokenType() {
+      tokenType_ = getDefaultInstance().getTokenType();
+      bitField0_ = (bitField0_ & ~0x00000004);
+      onChanged();
+      return this;
+    }
+    /**
+     * <code>string token_type = 3;</code>
+     *
+     * @param value The bytes for tokenType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setTokenTypeBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      tokenType_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse)
+  private static final com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE =
+        new com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse
+      getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GenerateAzureClusterAgentTokenResponse> PARSER =
+      new com.google.protobuf.AbstractParser<GenerateAzureClusterAgentTokenResponse>() {
+        @java.lang.Override
+        public GenerateAzureClusterAgentTokenResponse parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GenerateAzureClusterAgentTokenResponse> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GenerateAzureClusterAgentTokenResponse> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse
+      getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenResponseOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenResponseOrBuilder.java
new file mode 100644
index 000000000000..874942ec57d4
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GenerateAzureClusterAgentTokenResponseOrBuilder.java
@@ -0,0 +1,58 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface GenerateAzureClusterAgentTokenResponseOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The accessToken.
+   */
+  java.lang.String getAccessToken();
+  /**
+   * <code>string access_token = 1;</code>
+   *
+   * @return The bytes for accessToken.
+   */
+  com.google.protobuf.ByteString getAccessTokenBytes();
+
+  /**
+   * <code>int32 expires_in = 2;</code>
+   *
+   * @return The expiresIn.
+   */
+  int getExpiresIn();
+
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The tokenType.
+   */
+  java.lang.String getTokenType();
+  /**
+   * <code>string token_type = 3;</code>
+   *
+   * @return The bytes for tokenType.
+   */
+  com.google.protobuf.ByteString getTokenTypeBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsJsonWebKeysRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsJsonWebKeysRequest.java
new file mode 100644
index 000000000000..02144aa81ecf
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsJsonWebKeysRequest.java
@@ -0,0 +1,659 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * GetAwsJsonWebKeysRequest gets the public component of the keys used by the
+ * cluster to sign token requests. This will be the jwks_uri for the discover
+ * document returned by getOpenIDConfig. See the OpenID Connect
+ * Discovery 1.0 specification for details.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest}
+ */
+public final class GetAwsJsonWebKeysRequest extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest)
+    GetAwsJsonWebKeysRequestOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use GetAwsJsonWebKeysRequest.newBuilder() to construct.
+  private GetAwsJsonWebKeysRequest(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GetAwsJsonWebKeysRequest() {
+    awsCluster_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new GetAwsJsonWebKeysRequest();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GetAwsJsonWebKeysRequest_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GetAwsJsonWebKeysRequest_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest.class,
+            com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest.Builder.class);
+  }
+
+  public static final int AWS_CLUSTER_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object awsCluster_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AwsCluster, which owns the JsonWebKeys.
+   * Format:
+   * projects/{project}/locations/{location}/awsClusters/{cluster}
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The awsCluster.
+   */
+  @java.lang.Override
+  public java.lang.String getAwsCluster() {
+    java.lang.Object ref = awsCluster_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      awsCluster_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AwsCluster, which owns the JsonWebKeys.
+   * Format:
+   * projects/{project}/locations/{location}/awsClusters/{cluster}
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for awsCluster.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAwsClusterBytes() {
+    java.lang.Object ref = awsCluster_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      awsCluster_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(awsCluster_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, awsCluster_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(awsCluster_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, awsCluster_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest other =
+        (com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest) obj;
+
+    if (!getAwsCluster().equals(other.getAwsCluster())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + AWS_CLUSTER_FIELD_NUMBER;
+    hash = (53 * hash) + getAwsCluster().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * GetAwsJsonWebKeysRequest gets the public component of the keys used by the
+   * cluster to sign token requests. This will be the jwks_uri for the discover
+   * document returned by getOpenIDConfig. See the OpenID Connect
+   * Discovery 1.0 specification for details.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest)
+      com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequestOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAwsJsonWebKeysRequest_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAwsJsonWebKeysRequest_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest.class,
+              com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      awsCluster_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAwsJsonWebKeysRequest_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest build() {
+      com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest buildPartial() {
+      com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest result =
+          new com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.awsCluster_ = awsCluster_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest other) {
+      if (other == com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest.getDefaultInstance())
+        return this;
+      if (!other.getAwsCluster().isEmpty()) {
+        awsCluster_ = other.awsCluster_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                awsCluster_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object awsCluster_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AwsCluster, which owns the JsonWebKeys.
+     * Format:
+     * projects/{project}/locations/{location}/awsClusters/{cluster}
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The awsCluster.
+     */
+    public java.lang.String getAwsCluster() {
+      java.lang.Object ref = awsCluster_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        awsCluster_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AwsCluster, which owns the JsonWebKeys.
+     * Format:
+     * projects/{project}/locations/{location}/awsClusters/{cluster}
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The bytes for awsCluster.
+     */
+    public com.google.protobuf.ByteString getAwsClusterBytes() {
+      java.lang.Object ref = awsCluster_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        awsCluster_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AwsCluster, which owns the JsonWebKeys.
+     * Format:
+     * projects/{project}/locations/{location}/awsClusters/{cluster}
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The awsCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAwsCluster(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      awsCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AwsCluster, which owns the JsonWebKeys.
+     * Format:
+     * projects/{project}/locations/{location}/awsClusters/{cluster}
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAwsCluster() {
+      awsCluster_ = getDefaultInstance().getAwsCluster();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AwsCluster, which owns the JsonWebKeys.
+     * Format:
+     * projects/{project}/locations/{location}/awsClusters/{cluster}
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The bytes for awsCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAwsClusterBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      awsCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest)
+  private static final com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GetAwsJsonWebKeysRequest> PARSER =
+      new com.google.protobuf.AbstractParser<GetAwsJsonWebKeysRequest>() {
+        @java.lang.Override
+        public GetAwsJsonWebKeysRequest parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GetAwsJsonWebKeysRequest> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GetAwsJsonWebKeysRequest> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsJsonWebKeysRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsJsonWebKeysRequestOrBuilder.java
new file mode 100644
index 000000000000..727a2ab7650c
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsJsonWebKeysRequestOrBuilder.java
@@ -0,0 +1,58 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface GetAwsJsonWebKeysRequestOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AwsCluster, which owns the JsonWebKeys.
+   * Format:
+   * projects/{project}/locations/{location}/awsClusters/{cluster}
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The awsCluster.
+   */
+  java.lang.String getAwsCluster();
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AwsCluster, which owns the JsonWebKeys.
+   * Format:
+   * projects/{project}/locations/{location}/awsClusters/{cluster}
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for awsCluster.
+   */
+  com.google.protobuf.ByteString getAwsClusterBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsOpenIdConfigRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsOpenIdConfigRequest.java
new file mode 100644
index 000000000000..1567c5b2f61a
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsOpenIdConfigRequest.java
@@ -0,0 +1,655 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * GetAwsOpenIdConfigRequest gets the OIDC discovery document for the
+ * cluster. See the OpenID Connect Discovery 1.0 specification for details.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest}
+ */
+public final class GetAwsOpenIdConfigRequest extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest)
+    GetAwsOpenIdConfigRequestOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use GetAwsOpenIdConfigRequest.newBuilder() to construct.
+  private GetAwsOpenIdConfigRequest(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GetAwsOpenIdConfigRequest() {
+    awsCluster_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new GetAwsOpenIdConfigRequest();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GetAwsOpenIdConfigRequest_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GetAwsOpenIdConfigRequest_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest.class,
+            com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest.Builder.class);
+  }
+
+  public static final int AWS_CLUSTER_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object awsCluster_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AwsCluster, which owns the OIDC discovery document.
+   * Format:
+   * projects/{project}/locations/{location}/awsClusters/{cluster}
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The awsCluster.
+   */
+  @java.lang.Override
+  public java.lang.String getAwsCluster() {
+    java.lang.Object ref = awsCluster_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      awsCluster_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AwsCluster, which owns the OIDC discovery document.
+   * Format:
+   * projects/{project}/locations/{location}/awsClusters/{cluster}
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for awsCluster.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAwsClusterBytes() {
+    java.lang.Object ref = awsCluster_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      awsCluster_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(awsCluster_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, awsCluster_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(awsCluster_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, awsCluster_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest other =
+        (com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest) obj;
+
+    if (!getAwsCluster().equals(other.getAwsCluster())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + AWS_CLUSTER_FIELD_NUMBER;
+    hash = (53 * hash) + getAwsCluster().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * GetAwsOpenIdConfigRequest gets the OIDC discovery document for the
+   * cluster. See the OpenID Connect Discovery 1.0 specification for details.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest)
+      com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequestOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAwsOpenIdConfigRequest_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAwsOpenIdConfigRequest_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest.class,
+              com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      awsCluster_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAwsOpenIdConfigRequest_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest build() {
+      com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest buildPartial() {
+      com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest result =
+          new com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.awsCluster_ = awsCluster_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest other) {
+      if (other == com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest.getDefaultInstance())
+        return this;
+      if (!other.getAwsCluster().isEmpty()) {
+        awsCluster_ = other.awsCluster_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                awsCluster_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object awsCluster_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AwsCluster, which owns the OIDC discovery document.
+     * Format:
+     * projects/{project}/locations/{location}/awsClusters/{cluster}
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The awsCluster.
+     */
+    public java.lang.String getAwsCluster() {
+      java.lang.Object ref = awsCluster_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        awsCluster_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AwsCluster, which owns the OIDC discovery document.
+     * Format:
+     * projects/{project}/locations/{location}/awsClusters/{cluster}
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The bytes for awsCluster.
+     */
+    public com.google.protobuf.ByteString getAwsClusterBytes() {
+      java.lang.Object ref = awsCluster_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        awsCluster_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AwsCluster, which owns the OIDC discovery document.
+     * Format:
+     * projects/{project}/locations/{location}/awsClusters/{cluster}
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The awsCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAwsCluster(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      awsCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AwsCluster, which owns the OIDC discovery document.
+     * Format:
+     * projects/{project}/locations/{location}/awsClusters/{cluster}
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAwsCluster() {
+      awsCluster_ = getDefaultInstance().getAwsCluster();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AwsCluster, which owns the OIDC discovery document.
+     * Format:
+     * projects/{project}/locations/{location}/awsClusters/{cluster}
+     * </pre>
+     *
+     * <code>
+     * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The bytes for awsCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAwsClusterBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      awsCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest)
+  private static final com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GetAwsOpenIdConfigRequest> PARSER =
+      new com.google.protobuf.AbstractParser<GetAwsOpenIdConfigRequest>() {
+        @java.lang.Override
+        public GetAwsOpenIdConfigRequest parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GetAwsOpenIdConfigRequest> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GetAwsOpenIdConfigRequest> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsOpenIdConfigRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsOpenIdConfigRequestOrBuilder.java
new file mode 100644
index 000000000000..47cb42d7f9ec
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAwsOpenIdConfigRequestOrBuilder.java
@@ -0,0 +1,58 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface GetAwsOpenIdConfigRequestOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AwsCluster, which owns the OIDC discovery document.
+   * Format:
+   * projects/{project}/locations/{location}/awsClusters/{cluster}
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The awsCluster.
+   */
+  java.lang.String getAwsCluster();
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AwsCluster, which owns the OIDC discovery document.
+   * Format:
+   * projects/{project}/locations/{location}/awsClusters/{cluster}
+   * </pre>
+   *
+   * <code>
+   * string aws_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for awsCluster.
+   */
+  com.google.protobuf.ByteString getAwsClusterBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureJsonWebKeysRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureJsonWebKeysRequest.java
new file mode 100644
index 000000000000..41219ae03ec9
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureJsonWebKeysRequest.java
@@ -0,0 +1,663 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * GetAzureJsonWebKeysRequest gets the public component of the keys used by the
+ * cluster to sign token requests. This will be the jwks_uri for the discover
+ * document returned by getOpenIDConfig. See the OpenID Connect
+ * Discovery 1.0 specification for details.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest}
+ */
+public final class GetAzureJsonWebKeysRequest extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest)
+    GetAzureJsonWebKeysRequestOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use GetAzureJsonWebKeysRequest.newBuilder() to construct.
+  private GetAzureJsonWebKeysRequest(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GetAzureJsonWebKeysRequest() {
+    azureCluster_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new GetAzureJsonWebKeysRequest();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GetAzureJsonWebKeysRequest_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GetAzureJsonWebKeysRequest_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest.class,
+            com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest.Builder.class);
+  }
+
+  public static final int AZURE_CLUSTER_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object azureCluster_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AzureCluster, which owns the JsonWebKeys.
+   * Format:
+   * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The azureCluster.
+   */
+  @java.lang.Override
+  public java.lang.String getAzureCluster() {
+    java.lang.Object ref = azureCluster_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      azureCluster_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AzureCluster, which owns the JsonWebKeys.
+   * Format:
+   * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for azureCluster.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAzureClusterBytes() {
+    java.lang.Object ref = azureCluster_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      azureCluster_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(azureCluster_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, azureCluster_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(azureCluster_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, azureCluster_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest other =
+        (com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest) obj;
+
+    if (!getAzureCluster().equals(other.getAzureCluster())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + AZURE_CLUSTER_FIELD_NUMBER;
+    hash = (53 * hash) + getAzureCluster().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * GetAzureJsonWebKeysRequest gets the public component of the keys used by the
+   * cluster to sign token requests. This will be the jwks_uri for the discover
+   * document returned by getOpenIDConfig. See the OpenID Connect
+   * Discovery 1.0 specification for details.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest)
+      com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequestOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAzureJsonWebKeysRequest_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAzureJsonWebKeysRequest_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest.class,
+              com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      azureCluster_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAzureJsonWebKeysRequest_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest
+        getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest build() {
+      com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest buildPartial() {
+      com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest result =
+          new com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.azureCluster_ = azureCluster_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest other) {
+      if (other
+          == com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest.getDefaultInstance())
+        return this;
+      if (!other.getAzureCluster().isEmpty()) {
+        azureCluster_ = other.azureCluster_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                azureCluster_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object azureCluster_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AzureCluster, which owns the JsonWebKeys.
+     * Format:
+     * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The azureCluster.
+     */
+    public java.lang.String getAzureCluster() {
+      java.lang.Object ref = azureCluster_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        azureCluster_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AzureCluster, which owns the JsonWebKeys.
+     * Format:
+     * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The bytes for azureCluster.
+     */
+    public com.google.protobuf.ByteString getAzureClusterBytes() {
+      java.lang.Object ref = azureCluster_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        azureCluster_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AzureCluster, which owns the JsonWebKeys.
+     * Format:
+     * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The azureCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAzureCluster(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      azureCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AzureCluster, which owns the JsonWebKeys.
+     * Format:
+     * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAzureCluster() {
+      azureCluster_ = getDefaultInstance().getAzureCluster();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AzureCluster, which owns the JsonWebKeys.
+     * Format:
+     * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The bytes for azureCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAzureClusterBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      azureCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest)
+  private static final com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GetAzureJsonWebKeysRequest> PARSER =
+      new com.google.protobuf.AbstractParser<GetAzureJsonWebKeysRequest>() {
+        @java.lang.Override
+        public GetAzureJsonWebKeysRequest parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GetAzureJsonWebKeysRequest> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GetAzureJsonWebKeysRequest> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureJsonWebKeysRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureJsonWebKeysRequestOrBuilder.java
new file mode 100644
index 000000000000..5855ea9b8535
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureJsonWebKeysRequestOrBuilder.java
@@ -0,0 +1,58 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface GetAzureJsonWebKeysRequestOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AzureCluster, which owns the JsonWebKeys.
+   * Format:
+   * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The azureCluster.
+   */
+  java.lang.String getAzureCluster();
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AzureCluster, which owns the JsonWebKeys.
+   * Format:
+   * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for azureCluster.
+   */
+  com.google.protobuf.ByteString getAzureClusterBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureOpenIdConfigRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureOpenIdConfigRequest.java
new file mode 100644
index 000000000000..043eafb36bd1
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureOpenIdConfigRequest.java
@@ -0,0 +1,659 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * GetAzureOpenIdConfigRequest gets the OIDC discovery document for the
+ * cluster. See the OpenID Connect Discovery 1.0 specification for details.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest}
+ */
+public final class GetAzureOpenIdConfigRequest extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest)
+    GetAzureOpenIdConfigRequestOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use GetAzureOpenIdConfigRequest.newBuilder() to construct.
+  private GetAzureOpenIdConfigRequest(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private GetAzureOpenIdConfigRequest() {
+    azureCluster_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new GetAzureOpenIdConfigRequest();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GetAzureOpenIdConfigRequest_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_GetAzureOpenIdConfigRequest_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest.class,
+            com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest.Builder.class);
+  }
+
+  public static final int AZURE_CLUSTER_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object azureCluster_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AzureCluster, which owns the OIDC discovery document.
+   * Format:
+   * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The azureCluster.
+   */
+  @java.lang.Override
+  public java.lang.String getAzureCluster() {
+    java.lang.Object ref = azureCluster_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      azureCluster_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AzureCluster, which owns the OIDC discovery document.
+   * Format:
+   * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for azureCluster.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAzureClusterBytes() {
+    java.lang.Object ref = azureCluster_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      azureCluster_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(azureCluster_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, azureCluster_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(azureCluster_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, azureCluster_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest other =
+        (com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest) obj;
+
+    if (!getAzureCluster().equals(other.getAzureCluster())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + AZURE_CLUSTER_FIELD_NUMBER;
+    hash = (53 * hash) + getAzureCluster().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * GetAzureOpenIdConfigRequest gets the OIDC discovery document for the
+   * cluster. See the OpenID Connect Discovery 1.0 specification for details.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest)
+      com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequestOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAzureOpenIdConfigRequest_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAzureOpenIdConfigRequest_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest.class,
+              com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      azureCluster_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AzureServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_GetAzureOpenIdConfigRequest_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest
+        getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest build() {
+      com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest buildPartial() {
+      com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest result =
+          new com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.azureCluster_ = azureCluster_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest other) {
+      if (other
+          == com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest.getDefaultInstance())
+        return this;
+      if (!other.getAzureCluster().isEmpty()) {
+        azureCluster_ = other.azureCluster_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                azureCluster_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object azureCluster_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AzureCluster, which owns the OIDC discovery document.
+     * Format:
+     * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The azureCluster.
+     */
+    public java.lang.String getAzureCluster() {
+      java.lang.Object ref = azureCluster_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        azureCluster_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AzureCluster, which owns the OIDC discovery document.
+     * Format:
+     * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The bytes for azureCluster.
+     */
+    public com.google.protobuf.ByteString getAzureClusterBytes() {
+      java.lang.Object ref = azureCluster_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        azureCluster_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AzureCluster, which owns the OIDC discovery document.
+     * Format:
+     * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The azureCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAzureCluster(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      azureCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AzureCluster, which owns the OIDC discovery document.
+     * Format:
+     * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAzureCluster() {
+      azureCluster_ = getDefaultInstance().getAzureCluster();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The AzureCluster, which owns the OIDC discovery document.
+     * Format:
+     * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+     * </pre>
+     *
+     * <code>
+     * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The bytes for azureCluster to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAzureClusterBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      azureCluster_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest)
+  private static final com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<GetAzureOpenIdConfigRequest> PARSER =
+      new com.google.protobuf.AbstractParser<GetAzureOpenIdConfigRequest>() {
+        @java.lang.Override
+        public GetAzureOpenIdConfigRequest parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<GetAzureOpenIdConfigRequest> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<GetAzureOpenIdConfigRequest> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureOpenIdConfigRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureOpenIdConfigRequestOrBuilder.java
new file mode 100644
index 000000000000..204353653aa1
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/GetAzureOpenIdConfigRequestOrBuilder.java
@@ -0,0 +1,58 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/azure_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface GetAzureOpenIdConfigRequestOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AzureCluster, which owns the OIDC discovery document.
+   * Format:
+   * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The azureCluster.
+   */
+  java.lang.String getAzureCluster();
+  /**
+   *
+   *
+   * <pre>
+   * Required. The AzureCluster, which owns the OIDC discovery document.
+   * Format:
+   * projects/&lt;project-id&gt;/locations/&lt;region&gt;/azureClusters/&lt;cluster-id&gt;
+   * </pre>
+   *
+   * <code>
+   * string azure_cluster = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for azureCluster.
+   */
+  com.google.protobuf.ByteString getAzureClusterBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/ImportAttachedClusterRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/ImportAttachedClusterRequest.java
index 052ff4a19fd6..4cef1c53397b 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/ImportAttachedClusterRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/ImportAttachedClusterRequest.java
@@ -317,6 +317,62 @@ public com.google.protobuf.ByteString getDistributionBytes() {
     }
   }
 
+  public static final int PROXY_CONFIG_FIELD_NUMBER = 6;
+  private com.google.cloud.gkemulticloud.v1.AttachedProxyConfig proxyConfig_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the proxyConfig field is set.
+   */
+  @java.lang.Override
+  public boolean hasProxyConfig() {
+    return proxyConfig_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The proxyConfig.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getProxyConfig() {
+    return proxyConfig_ == null
+        ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+        : proxyConfig_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder getProxyConfigOrBuilder() {
+    return proxyConfig_ == null
+        ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+        : proxyConfig_;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -346,6 +402,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(distribution_)) {
       com.google.protobuf.GeneratedMessageV3.writeString(output, 5, distribution_);
     }
+    if (proxyConfig_ != null) {
+      output.writeMessage(6, getProxyConfig());
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -370,6 +429,9 @@ public int getSerializedSize() {
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(distribution_)) {
       size += com.google.protobuf.GeneratedMessageV3.computeStringSize(5, distribution_);
     }
+    if (proxyConfig_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(6, getProxyConfig());
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -391,6 +453,10 @@ public boolean equals(final java.lang.Object obj) {
     if (!getFleetMembership().equals(other.getFleetMembership())) return false;
     if (!getPlatformVersion().equals(other.getPlatformVersion())) return false;
     if (!getDistribution().equals(other.getDistribution())) return false;
+    if (hasProxyConfig() != other.hasProxyConfig()) return false;
+    if (hasProxyConfig()) {
+      if (!getProxyConfig().equals(other.getProxyConfig())) return false;
+    }
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -412,6 +478,10 @@ public int hashCode() {
     hash = (53 * hash) + getPlatformVersion().hashCode();
     hash = (37 * hash) + DISTRIBUTION_FIELD_NUMBER;
     hash = (53 * hash) + getDistribution().hashCode();
+    if (hasProxyConfig()) {
+      hash = (37 * hash) + PROXY_CONFIG_FIELD_NUMBER;
+      hash = (53 * hash) + getProxyConfig().hashCode();
+    }
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -557,6 +627,11 @@ public Builder clear() {
       fleetMembership_ = "";
       platformVersion_ = "";
       distribution_ = "";
+      proxyConfig_ = null;
+      if (proxyConfigBuilder_ != null) {
+        proxyConfigBuilder_.dispose();
+        proxyConfigBuilder_ = null;
+      }
       return this;
     }
 
@@ -610,6 +685,10 @@ private void buildPartial0(
       if (((from_bitField0_ & 0x00000010) != 0)) {
         result.distribution_ = distribution_;
       }
+      if (((from_bitField0_ & 0x00000020) != 0)) {
+        result.proxyConfig_ =
+            proxyConfigBuilder_ == null ? proxyConfig_ : proxyConfigBuilder_.build();
+      }
     }
 
     @java.lang.Override
@@ -682,6 +761,9 @@ public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.ImportAttachedCluster
         bitField0_ |= 0x00000010;
         onChanged();
       }
+      if (other.hasProxyConfig()) {
+        mergeProxyConfig(other.getProxyConfig());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -738,6 +820,12 @@ public Builder mergeFrom(
                 bitField0_ |= 0x00000010;
                 break;
               } // case 42
+            case 50:
+              {
+                input.readMessage(getProxyConfigFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00000020;
+                break;
+              } // case 50
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -1309,6 +1397,210 @@ public Builder setDistributionBytes(com.google.protobuf.ByteString value) {
       return this;
     }
 
+    private com.google.cloud.gkemulticloud.v1.AttachedProxyConfig proxyConfig_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder>
+        proxyConfigBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the proxyConfig field is set.
+     */
+    public boolean hasProxyConfig() {
+      return ((bitField0_ & 0x00000020) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The proxyConfig.
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getProxyConfig() {
+      if (proxyConfigBuilder_ == null) {
+        return proxyConfig_ == null
+            ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+            : proxyConfig_;
+      } else {
+        return proxyConfigBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setProxyConfig(com.google.cloud.gkemulticloud.v1.AttachedProxyConfig value) {
+      if (proxyConfigBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        proxyConfig_ = value;
+      } else {
+        proxyConfigBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setProxyConfig(
+        com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder builderForValue) {
+      if (proxyConfigBuilder_ == null) {
+        proxyConfig_ = builderForValue.build();
+      } else {
+        proxyConfigBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeProxyConfig(com.google.cloud.gkemulticloud.v1.AttachedProxyConfig value) {
+      if (proxyConfigBuilder_ == null) {
+        if (((bitField0_ & 0x00000020) != 0)
+            && proxyConfig_ != null
+            && proxyConfig_
+                != com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()) {
+          getProxyConfigBuilder().mergeFrom(value);
+        } else {
+          proxyConfig_ = value;
+        }
+      } else {
+        proxyConfigBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearProxyConfig() {
+      bitField0_ = (bitField0_ & ~0x00000020);
+      proxyConfig_ = null;
+      if (proxyConfigBuilder_ != null) {
+        proxyConfigBuilder_.dispose();
+        proxyConfigBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder getProxyConfigBuilder() {
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return getProxyConfigFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder
+        getProxyConfigOrBuilder() {
+      if (proxyConfigBuilder_ != null) {
+        return proxyConfigBuilder_.getMessageOrBuilder();
+      } else {
+        return proxyConfig_ == null
+            ? com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.getDefaultInstance()
+            : proxyConfig_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Proxy configuration for outbound HTTP(S) traffic.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder,
+            com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder>
+        getProxyConfigFieldBuilder() {
+      if (proxyConfigBuilder_ == null) {
+        proxyConfigBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.AttachedProxyConfig,
+                com.google.cloud.gkemulticloud.v1.AttachedProxyConfig.Builder,
+                com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder>(
+                getProxyConfig(), getParentForChildren(), isClean());
+        proxyConfig_ = null;
+      }
+      return proxyConfigBuilder_;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/ImportAttachedClusterRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/ImportAttachedClusterRequestOrBuilder.java
index 6982bdb9340c..7427054b5b6f 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/ImportAttachedClusterRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/ImportAttachedClusterRequestOrBuilder.java
@@ -165,4 +165,45 @@ public interface ImportAttachedClusterRequestOrBuilder
    * @return The bytes for distribution.
    */
   com.google.protobuf.ByteString getDistributionBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the proxyConfig field is set.
+   */
+  boolean hasProxyConfig();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The proxyConfig.
+   */
+  com.google.cloud.gkemulticloud.v1.AttachedProxyConfig getProxyConfig();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Proxy configuration for outbound HTTP(S) traffic.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.AttachedProxyConfig proxy_config = 6 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.AttachedProxyConfigOrBuilder getProxyConfigOrBuilder();
 }
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/Jwk.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/Jwk.java
new file mode 100644
index 000000000000..1fdbce3bae97
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/Jwk.java
@@ -0,0 +1,2077 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/common_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * Jwk is a JSON Web Key as specified in RFC 7517.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.Jwk}
+ */
+public final class Jwk extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.Jwk)
+    JwkOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use Jwk.newBuilder() to construct.
+  private Jwk(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private Jwk() {
+    kty_ = "";
+    alg_ = "";
+    use_ = "";
+    kid_ = "";
+    n_ = "";
+    e_ = "";
+    x_ = "";
+    y_ = "";
+    crv_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new Jwk();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.CommonResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_Jwk_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.CommonResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_Jwk_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.Jwk.class,
+            com.google.cloud.gkemulticloud.v1.Jwk.Builder.class);
+  }
+
+  public static final int KTY_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object kty_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Key Type.
+   * </pre>
+   *
+   * <code>string kty = 1;</code>
+   *
+   * @return The kty.
+   */
+  @java.lang.Override
+  public java.lang.String getKty() {
+    java.lang.Object ref = kty_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      kty_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Key Type.
+   * </pre>
+   *
+   * <code>string kty = 1;</code>
+   *
+   * @return The bytes for kty.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getKtyBytes() {
+    java.lang.Object ref = kty_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      kty_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int ALG_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object alg_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Algorithm.
+   * </pre>
+   *
+   * <code>string alg = 2;</code>
+   *
+   * @return The alg.
+   */
+  @java.lang.Override
+  public java.lang.String getAlg() {
+    java.lang.Object ref = alg_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      alg_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Algorithm.
+   * </pre>
+   *
+   * <code>string alg = 2;</code>
+   *
+   * @return The bytes for alg.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getAlgBytes() {
+    java.lang.Object ref = alg_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      alg_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int USE_FIELD_NUMBER = 3;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object use_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Permitted uses for the public keys.
+   * </pre>
+   *
+   * <code>string use = 3;</code>
+   *
+   * @return The use.
+   */
+  @java.lang.Override
+  public java.lang.String getUse() {
+    java.lang.Object ref = use_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      use_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Permitted uses for the public keys.
+   * </pre>
+   *
+   * <code>string use = 3;</code>
+   *
+   * @return The bytes for use.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getUseBytes() {
+    java.lang.Object ref = use_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      use_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int KID_FIELD_NUMBER = 4;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object kid_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Key ID.
+   * </pre>
+   *
+   * <code>string kid = 4;</code>
+   *
+   * @return The kid.
+   */
+  @java.lang.Override
+  public java.lang.String getKid() {
+    java.lang.Object ref = kid_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      kid_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Key ID.
+   * </pre>
+   *
+   * <code>string kid = 4;</code>
+   *
+   * @return The bytes for kid.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getKidBytes() {
+    java.lang.Object ref = kid_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      kid_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int N_FIELD_NUMBER = 5;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object n_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Used for RSA keys.
+   * </pre>
+   *
+   * <code>string n = 5;</code>
+   *
+   * @return The n.
+   */
+  @java.lang.Override
+  public java.lang.String getN() {
+    java.lang.Object ref = n_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      n_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Used for RSA keys.
+   * </pre>
+   *
+   * <code>string n = 5;</code>
+   *
+   * @return The bytes for n.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getNBytes() {
+    java.lang.Object ref = n_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      n_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int E_FIELD_NUMBER = 6;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object e_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Used for RSA keys.
+   * </pre>
+   *
+   * <code>string e = 6;</code>
+   *
+   * @return The e.
+   */
+  @java.lang.Override
+  public java.lang.String getE() {
+    java.lang.Object ref = e_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      e_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Used for RSA keys.
+   * </pre>
+   *
+   * <code>string e = 6;</code>
+   *
+   * @return The bytes for e.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getEBytes() {
+    java.lang.Object ref = e_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      e_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int X_FIELD_NUMBER = 7;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object x_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string x = 7;</code>
+   *
+   * @return The x.
+   */
+  @java.lang.Override
+  public java.lang.String getX() {
+    java.lang.Object ref = x_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      x_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string x = 7;</code>
+   *
+   * @return The bytes for x.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getXBytes() {
+    java.lang.Object ref = x_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      x_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int Y_FIELD_NUMBER = 8;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object y_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string y = 8;</code>
+   *
+   * @return The y.
+   */
+  @java.lang.Override
+  public java.lang.String getY() {
+    java.lang.Object ref = y_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      y_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string y = 8;</code>
+   *
+   * @return The bytes for y.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getYBytes() {
+    java.lang.Object ref = y_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      y_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int CRV_FIELD_NUMBER = 9;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object crv_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string crv = 9;</code>
+   *
+   * @return The crv.
+   */
+  @java.lang.Override
+  public java.lang.String getCrv() {
+    java.lang.Object ref = crv_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      crv_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string crv = 9;</code>
+   *
+   * @return The bytes for crv.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getCrvBytes() {
+    java.lang.Object ref = crv_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      crv_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(kty_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, kty_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(alg_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 2, alg_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(use_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 3, use_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(kid_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 4, kid_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(n_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 5, n_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(e_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 6, e_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(x_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 7, x_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(y_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 8, y_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(crv_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 9, crv_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(kty_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, kty_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(alg_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(2, alg_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(use_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(3, use_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(kid_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(4, kid_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(n_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(5, n_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(e_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(6, e_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(x_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(7, x_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(y_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(8, y_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(crv_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(9, crv_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.Jwk)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.Jwk other = (com.google.cloud.gkemulticloud.v1.Jwk) obj;
+
+    if (!getKty().equals(other.getKty())) return false;
+    if (!getAlg().equals(other.getAlg())) return false;
+    if (!getUse().equals(other.getUse())) return false;
+    if (!getKid().equals(other.getKid())) return false;
+    if (!getN().equals(other.getN())) return false;
+    if (!getE().equals(other.getE())) return false;
+    if (!getX().equals(other.getX())) return false;
+    if (!getY().equals(other.getY())) return false;
+    if (!getCrv().equals(other.getCrv())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + KTY_FIELD_NUMBER;
+    hash = (53 * hash) + getKty().hashCode();
+    hash = (37 * hash) + ALG_FIELD_NUMBER;
+    hash = (53 * hash) + getAlg().hashCode();
+    hash = (37 * hash) + USE_FIELD_NUMBER;
+    hash = (53 * hash) + getUse().hashCode();
+    hash = (37 * hash) + KID_FIELD_NUMBER;
+    hash = (53 * hash) + getKid().hashCode();
+    hash = (37 * hash) + N_FIELD_NUMBER;
+    hash = (53 * hash) + getN().hashCode();
+    hash = (37 * hash) + E_FIELD_NUMBER;
+    hash = (53 * hash) + getE().hashCode();
+    hash = (37 * hash) + X_FIELD_NUMBER;
+    hash = (53 * hash) + getX().hashCode();
+    hash = (37 * hash) + Y_FIELD_NUMBER;
+    hash = (53 * hash) + getY().hashCode();
+    hash = (37 * hash) + CRV_FIELD_NUMBER;
+    hash = (53 * hash) + getCrv().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseFrom(java.nio.ByteBuffer data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseFrom(com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseFrom(java.io.InputStream input)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseDelimitedFrom(java.io.InputStream input)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.Jwk prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Jwk is a JSON Web Key as specified in RFC 7517.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.Jwk}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.Jwk)
+      com.google.cloud.gkemulticloud.v1.JwkOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.CommonResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_Jwk_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.CommonResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_Jwk_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.Jwk.class,
+              com.google.cloud.gkemulticloud.v1.Jwk.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.Jwk.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      kty_ = "";
+      alg_ = "";
+      use_ = "";
+      kid_ = "";
+      n_ = "";
+      e_ = "";
+      x_ = "";
+      y_ = "";
+      crv_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.CommonResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_Jwk_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.Jwk getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.Jwk.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.Jwk build() {
+      com.google.cloud.gkemulticloud.v1.Jwk result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.Jwk buildPartial() {
+      com.google.cloud.gkemulticloud.v1.Jwk result =
+          new com.google.cloud.gkemulticloud.v1.Jwk(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.Jwk result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.kty_ = kty_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.alg_ = alg_;
+      }
+      if (((from_bitField0_ & 0x00000004) != 0)) {
+        result.use_ = use_;
+      }
+      if (((from_bitField0_ & 0x00000008) != 0)) {
+        result.kid_ = kid_;
+      }
+      if (((from_bitField0_ & 0x00000010) != 0)) {
+        result.n_ = n_;
+      }
+      if (((from_bitField0_ & 0x00000020) != 0)) {
+        result.e_ = e_;
+      }
+      if (((from_bitField0_ & 0x00000040) != 0)) {
+        result.x_ = x_;
+      }
+      if (((from_bitField0_ & 0x00000080) != 0)) {
+        result.y_ = y_;
+      }
+      if (((from_bitField0_ & 0x00000100) != 0)) {
+        result.crv_ = crv_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.Jwk) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.Jwk) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.Jwk other) {
+      if (other == com.google.cloud.gkemulticloud.v1.Jwk.getDefaultInstance()) return this;
+      if (!other.getKty().isEmpty()) {
+        kty_ = other.kty_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (!other.getAlg().isEmpty()) {
+        alg_ = other.alg_;
+        bitField0_ |= 0x00000002;
+        onChanged();
+      }
+      if (!other.getUse().isEmpty()) {
+        use_ = other.use_;
+        bitField0_ |= 0x00000004;
+        onChanged();
+      }
+      if (!other.getKid().isEmpty()) {
+        kid_ = other.kid_;
+        bitField0_ |= 0x00000008;
+        onChanged();
+      }
+      if (!other.getN().isEmpty()) {
+        n_ = other.n_;
+        bitField0_ |= 0x00000010;
+        onChanged();
+      }
+      if (!other.getE().isEmpty()) {
+        e_ = other.e_;
+        bitField0_ |= 0x00000020;
+        onChanged();
+      }
+      if (!other.getX().isEmpty()) {
+        x_ = other.x_;
+        bitField0_ |= 0x00000040;
+        onChanged();
+      }
+      if (!other.getY().isEmpty()) {
+        y_ = other.y_;
+        bitField0_ |= 0x00000080;
+        onChanged();
+      }
+      if (!other.getCrv().isEmpty()) {
+        crv_ = other.crv_;
+        bitField0_ |= 0x00000100;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                kty_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 18:
+              {
+                alg_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 18
+            case 26:
+              {
+                use_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000004;
+                break;
+              } // case 26
+            case 34:
+              {
+                kid_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000008;
+                break;
+              } // case 34
+            case 42:
+              {
+                n_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000010;
+                break;
+              } // case 42
+            case 50:
+              {
+                e_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000020;
+                break;
+              } // case 50
+            case 58:
+              {
+                x_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000040;
+                break;
+              } // case 58
+            case 66:
+              {
+                y_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000080;
+                break;
+              } // case 66
+            case 74:
+              {
+                crv_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000100;
+                break;
+              } // case 74
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object kty_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Key Type.
+     * </pre>
+     *
+     * <code>string kty = 1;</code>
+     *
+     * @return The kty.
+     */
+    public java.lang.String getKty() {
+      java.lang.Object ref = kty_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        kty_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Key Type.
+     * </pre>
+     *
+     * <code>string kty = 1;</code>
+     *
+     * @return The bytes for kty.
+     */
+    public com.google.protobuf.ByteString getKtyBytes() {
+      java.lang.Object ref = kty_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        kty_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Key Type.
+     * </pre>
+     *
+     * <code>string kty = 1;</code>
+     *
+     * @param value The kty to set.
+     * @return This builder for chaining.
+     */
+    public Builder setKty(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      kty_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Key Type.
+     * </pre>
+     *
+     * <code>string kty = 1;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearKty() {
+      kty_ = getDefaultInstance().getKty();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Key Type.
+     * </pre>
+     *
+     * <code>string kty = 1;</code>
+     *
+     * @param value The bytes for kty to set.
+     * @return This builder for chaining.
+     */
+    public Builder setKtyBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      kty_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object alg_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Algorithm.
+     * </pre>
+     *
+     * <code>string alg = 2;</code>
+     *
+     * @return The alg.
+     */
+    public java.lang.String getAlg() {
+      java.lang.Object ref = alg_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        alg_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Algorithm.
+     * </pre>
+     *
+     * <code>string alg = 2;</code>
+     *
+     * @return The bytes for alg.
+     */
+    public com.google.protobuf.ByteString getAlgBytes() {
+      java.lang.Object ref = alg_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        alg_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Algorithm.
+     * </pre>
+     *
+     * <code>string alg = 2;</code>
+     *
+     * @param value The alg to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAlg(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      alg_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Algorithm.
+     * </pre>
+     *
+     * <code>string alg = 2;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearAlg() {
+      alg_ = getDefaultInstance().getAlg();
+      bitField0_ = (bitField0_ & ~0x00000002);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Algorithm.
+     * </pre>
+     *
+     * <code>string alg = 2;</code>
+     *
+     * @param value The bytes for alg to set.
+     * @return This builder for chaining.
+     */
+    public Builder setAlgBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      alg_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object use_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Permitted uses for the public keys.
+     * </pre>
+     *
+     * <code>string use = 3;</code>
+     *
+     * @return The use.
+     */
+    public java.lang.String getUse() {
+      java.lang.Object ref = use_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        use_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Permitted uses for the public keys.
+     * </pre>
+     *
+     * <code>string use = 3;</code>
+     *
+     * @return The bytes for use.
+     */
+    public com.google.protobuf.ByteString getUseBytes() {
+      java.lang.Object ref = use_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        use_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Permitted uses for the public keys.
+     * </pre>
+     *
+     * <code>string use = 3;</code>
+     *
+     * @param value The use to set.
+     * @return This builder for chaining.
+     */
+    public Builder setUse(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      use_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Permitted uses for the public keys.
+     * </pre>
+     *
+     * <code>string use = 3;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearUse() {
+      use_ = getDefaultInstance().getUse();
+      bitField0_ = (bitField0_ & ~0x00000004);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Permitted uses for the public keys.
+     * </pre>
+     *
+     * <code>string use = 3;</code>
+     *
+     * @param value The bytes for use to set.
+     * @return This builder for chaining.
+     */
+    public Builder setUseBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      use_ = value;
+      bitField0_ |= 0x00000004;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object kid_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Key ID.
+     * </pre>
+     *
+     * <code>string kid = 4;</code>
+     *
+     * @return The kid.
+     */
+    public java.lang.String getKid() {
+      java.lang.Object ref = kid_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        kid_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Key ID.
+     * </pre>
+     *
+     * <code>string kid = 4;</code>
+     *
+     * @return The bytes for kid.
+     */
+    public com.google.protobuf.ByteString getKidBytes() {
+      java.lang.Object ref = kid_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        kid_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Key ID.
+     * </pre>
+     *
+     * <code>string kid = 4;</code>
+     *
+     * @param value The kid to set.
+     * @return This builder for chaining.
+     */
+    public Builder setKid(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      kid_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Key ID.
+     * </pre>
+     *
+     * <code>string kid = 4;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearKid() {
+      kid_ = getDefaultInstance().getKid();
+      bitField0_ = (bitField0_ & ~0x00000008);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Key ID.
+     * </pre>
+     *
+     * <code>string kid = 4;</code>
+     *
+     * @param value The bytes for kid to set.
+     * @return This builder for chaining.
+     */
+    public Builder setKidBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      kid_ = value;
+      bitField0_ |= 0x00000008;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object n_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Used for RSA keys.
+     * </pre>
+     *
+     * <code>string n = 5;</code>
+     *
+     * @return The n.
+     */
+    public java.lang.String getN() {
+      java.lang.Object ref = n_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        n_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for RSA keys.
+     * </pre>
+     *
+     * <code>string n = 5;</code>
+     *
+     * @return The bytes for n.
+     */
+    public com.google.protobuf.ByteString getNBytes() {
+      java.lang.Object ref = n_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        n_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for RSA keys.
+     * </pre>
+     *
+     * <code>string n = 5;</code>
+     *
+     * @param value The n to set.
+     * @return This builder for chaining.
+     */
+    public Builder setN(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      n_ = value;
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for RSA keys.
+     * </pre>
+     *
+     * <code>string n = 5;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearN() {
+      n_ = getDefaultInstance().getN();
+      bitField0_ = (bitField0_ & ~0x00000010);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for RSA keys.
+     * </pre>
+     *
+     * <code>string n = 5;</code>
+     *
+     * @param value The bytes for n to set.
+     * @return This builder for chaining.
+     */
+    public Builder setNBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      n_ = value;
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object e_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Used for RSA keys.
+     * </pre>
+     *
+     * <code>string e = 6;</code>
+     *
+     * @return The e.
+     */
+    public java.lang.String getE() {
+      java.lang.Object ref = e_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        e_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for RSA keys.
+     * </pre>
+     *
+     * <code>string e = 6;</code>
+     *
+     * @return The bytes for e.
+     */
+    public com.google.protobuf.ByteString getEBytes() {
+      java.lang.Object ref = e_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        e_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for RSA keys.
+     * </pre>
+     *
+     * <code>string e = 6;</code>
+     *
+     * @param value The e to set.
+     * @return This builder for chaining.
+     */
+    public Builder setE(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      e_ = value;
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for RSA keys.
+     * </pre>
+     *
+     * <code>string e = 6;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearE() {
+      e_ = getDefaultInstance().getE();
+      bitField0_ = (bitField0_ & ~0x00000020);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for RSA keys.
+     * </pre>
+     *
+     * <code>string e = 6;</code>
+     *
+     * @param value The bytes for e to set.
+     * @return This builder for chaining.
+     */
+    public Builder setEBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      e_ = value;
+      bitField0_ |= 0x00000020;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object x_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string x = 7;</code>
+     *
+     * @return The x.
+     */
+    public java.lang.String getX() {
+      java.lang.Object ref = x_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        x_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string x = 7;</code>
+     *
+     * @return The bytes for x.
+     */
+    public com.google.protobuf.ByteString getXBytes() {
+      java.lang.Object ref = x_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        x_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string x = 7;</code>
+     *
+     * @param value The x to set.
+     * @return This builder for chaining.
+     */
+    public Builder setX(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      x_ = value;
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string x = 7;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearX() {
+      x_ = getDefaultInstance().getX();
+      bitField0_ = (bitField0_ & ~0x00000040);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string x = 7;</code>
+     *
+     * @param value The bytes for x to set.
+     * @return This builder for chaining.
+     */
+    public Builder setXBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      x_ = value;
+      bitField0_ |= 0x00000040;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object y_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string y = 8;</code>
+     *
+     * @return The y.
+     */
+    public java.lang.String getY() {
+      java.lang.Object ref = y_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        y_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string y = 8;</code>
+     *
+     * @return The bytes for y.
+     */
+    public com.google.protobuf.ByteString getYBytes() {
+      java.lang.Object ref = y_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        y_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string y = 8;</code>
+     *
+     * @param value The y to set.
+     * @return This builder for chaining.
+     */
+    public Builder setY(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      y_ = value;
+      bitField0_ |= 0x00000080;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string y = 8;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearY() {
+      y_ = getDefaultInstance().getY();
+      bitField0_ = (bitField0_ & ~0x00000080);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string y = 8;</code>
+     *
+     * @param value The bytes for y to set.
+     * @return This builder for chaining.
+     */
+    public Builder setYBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      y_ = value;
+      bitField0_ |= 0x00000080;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object crv_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string crv = 9;</code>
+     *
+     * @return The crv.
+     */
+    public java.lang.String getCrv() {
+      java.lang.Object ref = crv_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        crv_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string crv = 9;</code>
+     *
+     * @return The bytes for crv.
+     */
+    public com.google.protobuf.ByteString getCrvBytes() {
+      java.lang.Object ref = crv_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        crv_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string crv = 9;</code>
+     *
+     * @param value The crv to set.
+     * @return This builder for chaining.
+     */
+    public Builder setCrv(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      crv_ = value;
+      bitField0_ |= 0x00000100;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string crv = 9;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearCrv() {
+      crv_ = getDefaultInstance().getCrv();
+      bitField0_ = (bitField0_ & ~0x00000100);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Used for ECDSA keys.
+     * </pre>
+     *
+     * <code>string crv = 9;</code>
+     *
+     * @param value The bytes for crv to set.
+     * @return This builder for chaining.
+     */
+    public Builder setCrvBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      crv_ = value;
+      bitField0_ |= 0x00000100;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.Jwk)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.Jwk)
+  private static final com.google.cloud.gkemulticloud.v1.Jwk DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.Jwk();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.Jwk getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<Jwk> PARSER =
+      new com.google.protobuf.AbstractParser<Jwk>() {
+        @java.lang.Override
+        public Jwk parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<Jwk> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<Jwk> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.Jwk getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/JwkOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/JwkOrBuilder.java
new file mode 100644
index 000000000000..32c19fab9649
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/JwkOrBuilder.java
@@ -0,0 +1,250 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/common_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface JwkOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.Jwk)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Key Type.
+   * </pre>
+   *
+   * <code>string kty = 1;</code>
+   *
+   * @return The kty.
+   */
+  java.lang.String getKty();
+  /**
+   *
+   *
+   * <pre>
+   * Key Type.
+   * </pre>
+   *
+   * <code>string kty = 1;</code>
+   *
+   * @return The bytes for kty.
+   */
+  com.google.protobuf.ByteString getKtyBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Algorithm.
+   * </pre>
+   *
+   * <code>string alg = 2;</code>
+   *
+   * @return The alg.
+   */
+  java.lang.String getAlg();
+  /**
+   *
+   *
+   * <pre>
+   * Algorithm.
+   * </pre>
+   *
+   * <code>string alg = 2;</code>
+   *
+   * @return The bytes for alg.
+   */
+  com.google.protobuf.ByteString getAlgBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Permitted uses for the public keys.
+   * </pre>
+   *
+   * <code>string use = 3;</code>
+   *
+   * @return The use.
+   */
+  java.lang.String getUse();
+  /**
+   *
+   *
+   * <pre>
+   * Permitted uses for the public keys.
+   * </pre>
+   *
+   * <code>string use = 3;</code>
+   *
+   * @return The bytes for use.
+   */
+  com.google.protobuf.ByteString getUseBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Key ID.
+   * </pre>
+   *
+   * <code>string kid = 4;</code>
+   *
+   * @return The kid.
+   */
+  java.lang.String getKid();
+  /**
+   *
+   *
+   * <pre>
+   * Key ID.
+   * </pre>
+   *
+   * <code>string kid = 4;</code>
+   *
+   * @return The bytes for kid.
+   */
+  com.google.protobuf.ByteString getKidBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Used for RSA keys.
+   * </pre>
+   *
+   * <code>string n = 5;</code>
+   *
+   * @return The n.
+   */
+  java.lang.String getN();
+  /**
+   *
+   *
+   * <pre>
+   * Used for RSA keys.
+   * </pre>
+   *
+   * <code>string n = 5;</code>
+   *
+   * @return The bytes for n.
+   */
+  com.google.protobuf.ByteString getNBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Used for RSA keys.
+   * </pre>
+   *
+   * <code>string e = 6;</code>
+   *
+   * @return The e.
+   */
+  java.lang.String getE();
+  /**
+   *
+   *
+   * <pre>
+   * Used for RSA keys.
+   * </pre>
+   *
+   * <code>string e = 6;</code>
+   *
+   * @return The bytes for e.
+   */
+  com.google.protobuf.ByteString getEBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string x = 7;</code>
+   *
+   * @return The x.
+   */
+  java.lang.String getX();
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string x = 7;</code>
+   *
+   * @return The bytes for x.
+   */
+  com.google.protobuf.ByteString getXBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string y = 8;</code>
+   *
+   * @return The y.
+   */
+  java.lang.String getY();
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string y = 8;</code>
+   *
+   * @return The bytes for y.
+   */
+  com.google.protobuf.ByteString getYBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string crv = 9;</code>
+   *
+   * @return The crv.
+   */
+  java.lang.String getCrv();
+  /**
+   *
+   *
+   * <pre>
+   * Used for ECDSA keys.
+   * </pre>
+   *
+   * <code>string crv = 9;</code>
+   *
+   * @return The bytes for crv.
+   */
+  com.google.protobuf.ByteString getCrvBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/KubernetesSecret.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/KubernetesSecret.java
new file mode 100644
index 000000000000..ed991bddd61a
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/KubernetesSecret.java
@@ -0,0 +1,806 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/attached_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * Information about a Kubernetes Secret
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.KubernetesSecret}
+ */
+public final class KubernetesSecret extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.KubernetesSecret)
+    KubernetesSecretOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use KubernetesSecret.newBuilder() to construct.
+  private KubernetesSecret(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private KubernetesSecret() {
+    name_ = "";
+    namespace_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new KubernetesSecret();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_KubernetesSecret_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_KubernetesSecret_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.KubernetesSecret.class,
+            com.google.cloud.gkemulticloud.v1.KubernetesSecret.Builder.class);
+  }
+
+  public static final int NAME_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object name_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Name of the kubernetes secret.
+   * </pre>
+   *
+   * <code>string name = 1;</code>
+   *
+   * @return The name.
+   */
+  @java.lang.Override
+  public java.lang.String getName() {
+    java.lang.Object ref = name_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      name_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Name of the kubernetes secret.
+   * </pre>
+   *
+   * <code>string name = 1;</code>
+   *
+   * @return The bytes for name.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getNameBytes() {
+    java.lang.Object ref = name_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      name_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int NAMESPACE_FIELD_NUMBER = 2;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object namespace_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Namespace in which the kubernetes secret is stored.
+   * </pre>
+   *
+   * <code>string namespace = 2;</code>
+   *
+   * @return The namespace.
+   */
+  @java.lang.Override
+  public java.lang.String getNamespace() {
+    java.lang.Object ref = namespace_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      namespace_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Namespace in which the kubernetes secret is stored.
+   * </pre>
+   *
+   * <code>string namespace = 2;</code>
+   *
+   * @return The bytes for namespace.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getNamespaceBytes() {
+    java.lang.Object ref = namespace_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      namespace_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(name_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, name_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(namespace_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 2, namespace_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(name_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, name_);
+    }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(namespace_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(2, namespace_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.KubernetesSecret)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.KubernetesSecret other =
+        (com.google.cloud.gkemulticloud.v1.KubernetesSecret) obj;
+
+    if (!getName().equals(other.getName())) return false;
+    if (!getNamespace().equals(other.getNamespace())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + NAME_FIELD_NUMBER;
+    hash = (53 * hash) + getName().hashCode();
+    hash = (37 * hash) + NAMESPACE_FIELD_NUMBER;
+    hash = (53 * hash) + getNamespace().hashCode();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.KubernetesSecret prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Information about a Kubernetes Secret
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.KubernetesSecret}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.KubernetesSecret)
+      com.google.cloud.gkemulticloud.v1.KubernetesSecretOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_KubernetesSecret_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_KubernetesSecret_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.KubernetesSecret.class,
+              com.google.cloud.gkemulticloud.v1.KubernetesSecret.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.KubernetesSecret.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      name_ = "";
+      namespace_ = "";
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AttachedResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_KubernetesSecret_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.KubernetesSecret getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.KubernetesSecret.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.KubernetesSecret build() {
+      com.google.cloud.gkemulticloud.v1.KubernetesSecret result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.KubernetesSecret buildPartial() {
+      com.google.cloud.gkemulticloud.v1.KubernetesSecret result =
+          new com.google.cloud.gkemulticloud.v1.KubernetesSecret(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.KubernetesSecret result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.name_ = name_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.namespace_ = namespace_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.KubernetesSecret) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.KubernetesSecret) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.KubernetesSecret other) {
+      if (other == com.google.cloud.gkemulticloud.v1.KubernetesSecret.getDefaultInstance())
+        return this;
+      if (!other.getName().isEmpty()) {
+        name_ = other.name_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (!other.getNamespace().isEmpty()) {
+        namespace_ = other.namespace_;
+        bitField0_ |= 0x00000002;
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                name_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 18:
+              {
+                namespace_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 18
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object name_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Name of the kubernetes secret.
+     * </pre>
+     *
+     * <code>string name = 1;</code>
+     *
+     * @return The name.
+     */
+    public java.lang.String getName() {
+      java.lang.Object ref = name_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        name_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Name of the kubernetes secret.
+     * </pre>
+     *
+     * <code>string name = 1;</code>
+     *
+     * @return The bytes for name.
+     */
+    public com.google.protobuf.ByteString getNameBytes() {
+      java.lang.Object ref = name_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        name_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Name of the kubernetes secret.
+     * </pre>
+     *
+     * <code>string name = 1;</code>
+     *
+     * @param value The name to set.
+     * @return This builder for chaining.
+     */
+    public Builder setName(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      name_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Name of the kubernetes secret.
+     * </pre>
+     *
+     * <code>string name = 1;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearName() {
+      name_ = getDefaultInstance().getName();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Name of the kubernetes secret.
+     * </pre>
+     *
+     * <code>string name = 1;</code>
+     *
+     * @param value The bytes for name to set.
+     * @return This builder for chaining.
+     */
+    public Builder setNameBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      name_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private java.lang.Object namespace_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Namespace in which the kubernetes secret is stored.
+     * </pre>
+     *
+     * <code>string namespace = 2;</code>
+     *
+     * @return The namespace.
+     */
+    public java.lang.String getNamespace() {
+      java.lang.Object ref = namespace_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        namespace_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Namespace in which the kubernetes secret is stored.
+     * </pre>
+     *
+     * <code>string namespace = 2;</code>
+     *
+     * @return The bytes for namespace.
+     */
+    public com.google.protobuf.ByteString getNamespaceBytes() {
+      java.lang.Object ref = namespace_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        namespace_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Namespace in which the kubernetes secret is stored.
+     * </pre>
+     *
+     * <code>string namespace = 2;</code>
+     *
+     * @param value The namespace to set.
+     * @return This builder for chaining.
+     */
+    public Builder setNamespace(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      namespace_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Namespace in which the kubernetes secret is stored.
+     * </pre>
+     *
+     * <code>string namespace = 2;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearNamespace() {
+      namespace_ = getDefaultInstance().getNamespace();
+      bitField0_ = (bitField0_ & ~0x00000002);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Namespace in which the kubernetes secret is stored.
+     * </pre>
+     *
+     * <code>string namespace = 2;</code>
+     *
+     * @param value The bytes for namespace to set.
+     * @return This builder for chaining.
+     */
+    public Builder setNamespaceBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      namespace_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.KubernetesSecret)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.KubernetesSecret)
+  private static final com.google.cloud.gkemulticloud.v1.KubernetesSecret DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.KubernetesSecret();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.KubernetesSecret getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<KubernetesSecret> PARSER =
+      new com.google.protobuf.AbstractParser<KubernetesSecret>() {
+        @java.lang.Override
+        public KubernetesSecret parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<KubernetesSecret> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<KubernetesSecret> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.KubernetesSecret getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/KubernetesSecretOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/KubernetesSecretOrBuilder.java
new file mode 100644
index 000000000000..6f97bec74953
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/KubernetesSecretOrBuilder.java
@@ -0,0 +1,75 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/attached_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface KubernetesSecretOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.KubernetesSecret)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Name of the kubernetes secret.
+   * </pre>
+   *
+   * <code>string name = 1;</code>
+   *
+   * @return The name.
+   */
+  java.lang.String getName();
+  /**
+   *
+   *
+   * <pre>
+   * Name of the kubernetes secret.
+   * </pre>
+   *
+   * <code>string name = 1;</code>
+   *
+   * @return The bytes for name.
+   */
+  com.google.protobuf.ByteString getNameBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Namespace in which the kubernetes secret is stored.
+   * </pre>
+   *
+   * <code>string namespace = 2;</code>
+   *
+   * @return The namespace.
+   */
+  java.lang.String getNamespace();
+  /**
+   *
+   *
+   * <pre>
+   * Namespace in which the kubernetes secret is stored.
+   * </pre>
+   *
+   * <code>string namespace = 2;</code>
+   *
+   * @return The bytes for namespace.
+   */
+  com.google.protobuf.ByteString getNamespaceBytes();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/RollbackAwsNodePoolUpdateRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/RollbackAwsNodePoolUpdateRequest.java
new file mode 100644
index 000000000000..56aac871f5b6
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/RollbackAwsNodePoolUpdateRequest.java
@@ -0,0 +1,804 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * Request message for `AwsClusters.RollbackAwsNodePoolUpdate` method.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest}
+ */
+public final class RollbackAwsNodePoolUpdateRequest extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest)
+    RollbackAwsNodePoolUpdateRequestOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use RollbackAwsNodePoolUpdateRequest.newBuilder() to construct.
+  private RollbackAwsNodePoolUpdateRequest(
+      com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private RollbackAwsNodePoolUpdateRequest() {
+    name_ = "";
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new RollbackAwsNodePoolUpdateRequest();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_RollbackAwsNodePoolUpdateRequest_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+        .internal_static_google_cloud_gkemulticloud_v1_RollbackAwsNodePoolUpdateRequest_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest.class,
+            com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest.Builder.class);
+  }
+
+  public static final int NAME_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object name_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource to
+   * rollback.
+   *
+   * `AwsNodePool` names are formatted as
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+   *
+   * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
+   * for more details on Google Cloud resource names.
+   * </pre>
+   *
+   * <code>
+   * string name = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The name.
+   */
+  @java.lang.Override
+  public java.lang.String getName() {
+    java.lang.Object ref = name_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      name_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource to
+   * rollback.
+   *
+   * `AwsNodePool` names are formatted as
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+   *
+   * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
+   * for more details on Google Cloud resource names.
+   * </pre>
+   *
+   * <code>
+   * string name = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for name.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getNameBytes() {
+    java.lang.Object ref = name_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      name_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
+  public static final int RESPECT_PDB_FIELD_NUMBER = 2;
+  private boolean respectPdb_ = false;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Option for rollback to ignore the PodDisruptionBudget when
+   * draining the node pool nodes. Default value is false.
+   * </pre>
+   *
+   * <code>bool respect_pdb = 2 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The respectPdb.
+   */
+  @java.lang.Override
+  public boolean getRespectPdb() {
+    return respectPdb_;
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(name_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, name_);
+    }
+    if (respectPdb_ != false) {
+      output.writeBool(2, respectPdb_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(name_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, name_);
+    }
+    if (respectPdb_ != false) {
+      size += com.google.protobuf.CodedOutputStream.computeBoolSize(2, respectPdb_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest other =
+        (com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest) obj;
+
+    if (!getName().equals(other.getName())) return false;
+    if (getRespectPdb() != other.getRespectPdb()) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + NAME_FIELD_NUMBER;
+    hash = (53 * hash) + getName().hashCode();
+    hash = (37 * hash) + RESPECT_PDB_FIELD_NUMBER;
+    hash = (53 * hash) + com.google.protobuf.Internal.hashBoolean(getRespectPdb());
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest parseFrom(
+      java.nio.ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest parseFrom(
+      byte[] data) throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest
+      parseDelimitedFrom(java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest
+      parseDelimitedFrom(
+          java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+          throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(
+      com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Request message for `AwsClusters.RollbackAwsNodePoolUpdate` method.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest)
+      com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequestOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_RollbackAwsNodePoolUpdateRequest_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_RollbackAwsNodePoolUpdateRequest_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest.class,
+              com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest.Builder.class);
+    }
+
+    // Construct using
+    // com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      name_ = "";
+      respectPdb_ = false;
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsServiceProto
+          .internal_static_google_cloud_gkemulticloud_v1_RollbackAwsNodePoolUpdateRequest_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest
+        getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest
+          .getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest build() {
+      com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest buildPartial() {
+      com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest result =
+          new com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(
+        com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.name_ = name_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.respectPdb_ = respectPdb_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest) {
+        return mergeFrom(
+            (com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(
+        com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest other) {
+      if (other
+          == com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest
+              .getDefaultInstance()) return this;
+      if (!other.getName().isEmpty()) {
+        name_ = other.name_;
+        bitField0_ |= 0x00000001;
+        onChanged();
+      }
+      if (other.getRespectPdb() != false) {
+        setRespectPdb(other.getRespectPdb());
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                name_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            case 16:
+              {
+                respectPdb_ = input.readBool();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 16
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private java.lang.Object name_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource to
+     * rollback.
+     *
+     * `AwsNodePool` names are formatted as
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+     *
+     * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
+     * for more details on Google Cloud resource names.
+     * </pre>
+     *
+     * <code>
+     * string name = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The name.
+     */
+    public java.lang.String getName() {
+      java.lang.Object ref = name_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        name_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource to
+     * rollback.
+     *
+     * `AwsNodePool` names are formatted as
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+     *
+     * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
+     * for more details on Google Cloud resource names.
+     * </pre>
+     *
+     * <code>
+     * string name = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return The bytes for name.
+     */
+    public com.google.protobuf.ByteString getNameBytes() {
+      java.lang.Object ref = name_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        name_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource to
+     * rollback.
+     *
+     * `AwsNodePool` names are formatted as
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+     *
+     * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
+     * for more details on Google Cloud resource names.
+     * </pre>
+     *
+     * <code>
+     * string name = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The name to set.
+     * @return This builder for chaining.
+     */
+    public Builder setName(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      name_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource to
+     * rollback.
+     *
+     * `AwsNodePool` names are formatted as
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+     *
+     * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
+     * for more details on Google Cloud resource names.
+     * </pre>
+     *
+     * <code>
+     * string name = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearName() {
+      name_ = getDefaultInstance().getName();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. The name of the
+     * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource to
+     * rollback.
+     *
+     * `AwsNodePool` names are formatted as
+     * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+     *
+     * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
+     * for more details on Google Cloud resource names.
+     * </pre>
+     *
+     * <code>
+     * string name = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+     * </code>
+     *
+     * @param value The bytes for name to set.
+     * @return This builder for chaining.
+     */
+    public Builder setNameBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      name_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    private boolean respectPdb_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Option for rollback to ignore the PodDisruptionBudget when
+     * draining the node pool nodes. Default value is false.
+     * </pre>
+     *
+     * <code>bool respect_pdb = 2 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The respectPdb.
+     */
+    @java.lang.Override
+    public boolean getRespectPdb() {
+      return respectPdb_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Option for rollback to ignore the PodDisruptionBudget when
+     * draining the node pool nodes. Default value is false.
+     * </pre>
+     *
+     * <code>bool respect_pdb = 2 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The respectPdb to set.
+     * @return This builder for chaining.
+     */
+    public Builder setRespectPdb(boolean value) {
+
+      respectPdb_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Option for rollback to ignore the PodDisruptionBudget when
+     * draining the node pool nodes. Default value is false.
+     * </pre>
+     *
+     * <code>bool respect_pdb = 2 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearRespectPdb() {
+      bitField0_ = (bitField0_ & ~0x00000002);
+      respectPdb_ = false;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest)
+  private static final com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest
+      DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest
+      getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<RollbackAwsNodePoolUpdateRequest> PARSER =
+      new com.google.protobuf.AbstractParser<RollbackAwsNodePoolUpdateRequest>() {
+        @java.lang.Override
+        public RollbackAwsNodePoolUpdateRequest parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<RollbackAwsNodePoolUpdateRequest> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<RollbackAwsNodePoolUpdateRequest> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest
+      getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/RollbackAwsNodePoolUpdateRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/RollbackAwsNodePoolUpdateRequestOrBuilder.java
new file mode 100644
index 000000000000..15a9ef144ea7
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/RollbackAwsNodePoolUpdateRequestOrBuilder.java
@@ -0,0 +1,84 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_service.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface RollbackAwsNodePoolUpdateRequestOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource to
+   * rollback.
+   *
+   * `AwsNodePool` names are formatted as
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+   *
+   * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
+   * for more details on Google Cloud resource names.
+   * </pre>
+   *
+   * <code>
+   * string name = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The name.
+   */
+  java.lang.String getName();
+  /**
+   *
+   *
+   * <pre>
+   * Required. The name of the
+   * [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource to
+   * rollback.
+   *
+   * `AwsNodePool` names are formatted as
+   * `projects/&lt;project-id&gt;/locations/&lt;region&gt;/awsClusters/&lt;cluster-id&gt;/awsNodePools/&lt;node-pool-id&gt;`.
+   *
+   * See [Resource Names](https://cloud.google.com/apis/design/resource_names)
+   * for more details on Google Cloud resource names.
+   * </pre>
+   *
+   * <code>
+   * string name = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
+   * </code>
+   *
+   * @return The bytes for name.
+   */
+  com.google.protobuf.ByteString getNameBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Option for rollback to ignore the PodDisruptionBudget when
+   * draining the node pool nodes. Default value is false.
+   * </pre>
+   *
+   * <code>bool respect_pdb = 2 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The respectPdb.
+   */
+  boolean getRespectPdb();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SpotConfig.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SpotConfig.java
new file mode 100644
index 000000000000..47f331206e8b
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SpotConfig.java
@@ -0,0 +1,718 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * SpotConfig has configuration info for Spot node.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.SpotConfig}
+ */
+public final class SpotConfig extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.SpotConfig)
+    SpotConfigOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use SpotConfig.newBuilder() to construct.
+  private SpotConfig(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private SpotConfig() {
+    instanceTypes_ = com.google.protobuf.LazyStringArrayList.emptyList();
+  }
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new SpotConfig();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_SpotConfig_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_SpotConfig_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.SpotConfig.class,
+            com.google.cloud.gkemulticloud.v1.SpotConfig.Builder.class);
+  }
+
+  public static final int INSTANCE_TYPES_FIELD_NUMBER = 1;
+
+  @SuppressWarnings("serial")
+  private com.google.protobuf.LazyStringArrayList instanceTypes_ =
+      com.google.protobuf.LazyStringArrayList.emptyList();
+  /**
+   *
+   *
+   * <pre>
+   * Required. A list of instance types for creating spot node pool.
+   * </pre>
+   *
+   * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return A list containing the instanceTypes.
+   */
+  public com.google.protobuf.ProtocolStringList getInstanceTypesList() {
+    return instanceTypes_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. A list of instance types for creating spot node pool.
+   * </pre>
+   *
+   * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The count of instanceTypes.
+   */
+  public int getInstanceTypesCount() {
+    return instanceTypes_.size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. A list of instance types for creating spot node pool.
+   * </pre>
+   *
+   * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @param index The index of the element to return.
+   * @return The instanceTypes at the given index.
+   */
+  public java.lang.String getInstanceTypes(int index) {
+    return instanceTypes_.get(index);
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Required. A list of instance types for creating spot node pool.
+   * </pre>
+   *
+   * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the instanceTypes at the given index.
+   */
+  public com.google.protobuf.ByteString getInstanceTypesBytes(int index) {
+    return instanceTypes_.getByteString(index);
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    for (int i = 0; i < instanceTypes_.size(); i++) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 1, instanceTypes_.getRaw(i));
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    {
+      int dataSize = 0;
+      for (int i = 0; i < instanceTypes_.size(); i++) {
+        dataSize += computeStringSizeNoTag(instanceTypes_.getRaw(i));
+      }
+      size += dataSize;
+      size += 1 * getInstanceTypesList().size();
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.SpotConfig)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.SpotConfig other =
+        (com.google.cloud.gkemulticloud.v1.SpotConfig) obj;
+
+    if (!getInstanceTypesList().equals(other.getInstanceTypesList())) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    if (getInstanceTypesCount() > 0) {
+      hash = (37 * hash) + INSTANCE_TYPES_FIELD_NUMBER;
+      hash = (53 * hash) + getInstanceTypesList().hashCode();
+    }
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseFrom(java.nio.ByteBuffer data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseFrom(java.io.InputStream input)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.SpotConfig prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * SpotConfig has configuration info for Spot node.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.SpotConfig}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.SpotConfig)
+      com.google.cloud.gkemulticloud.v1.SpotConfigOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_SpotConfig_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_SpotConfig_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.SpotConfig.class,
+              com.google.cloud.gkemulticloud.v1.SpotConfig.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.SpotConfig.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      instanceTypes_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_SpotConfig_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.SpotConfig getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.SpotConfig.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.SpotConfig build() {
+      com.google.cloud.gkemulticloud.v1.SpotConfig result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.SpotConfig buildPartial() {
+      com.google.cloud.gkemulticloud.v1.SpotConfig result =
+          new com.google.cloud.gkemulticloud.v1.SpotConfig(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.SpotConfig result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        instanceTypes_.makeImmutable();
+        result.instanceTypes_ = instanceTypes_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.SpotConfig) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.SpotConfig) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.SpotConfig other) {
+      if (other == com.google.cloud.gkemulticloud.v1.SpotConfig.getDefaultInstance()) return this;
+      if (!other.instanceTypes_.isEmpty()) {
+        if (instanceTypes_.isEmpty()) {
+          instanceTypes_ = other.instanceTypes_;
+          bitField0_ |= 0x00000001;
+        } else {
+          ensureInstanceTypesIsMutable();
+          instanceTypes_.addAll(other.instanceTypes_);
+        }
+        onChanged();
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+                ensureInstanceTypesIsMutable();
+                instanceTypes_.add(s);
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private com.google.protobuf.LazyStringArrayList instanceTypes_ =
+        com.google.protobuf.LazyStringArrayList.emptyList();
+
+    private void ensureInstanceTypesIsMutable() {
+      if (!instanceTypes_.isModifiable()) {
+        instanceTypes_ = new com.google.protobuf.LazyStringArrayList(instanceTypes_);
+      }
+      bitField0_ |= 0x00000001;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. A list of instance types for creating spot node pool.
+     * </pre>
+     *
+     * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return A list containing the instanceTypes.
+     */
+    public com.google.protobuf.ProtocolStringList getInstanceTypesList() {
+      instanceTypes_.makeImmutable();
+      return instanceTypes_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. A list of instance types for creating spot node pool.
+     * </pre>
+     *
+     * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return The count of instanceTypes.
+     */
+    public int getInstanceTypesCount() {
+      return instanceTypes_.size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. A list of instance types for creating spot node pool.
+     * </pre>
+     *
+     * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param index The index of the element to return.
+     * @return The instanceTypes at the given index.
+     */
+    public java.lang.String getInstanceTypes(int index) {
+      return instanceTypes_.get(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. A list of instance types for creating spot node pool.
+     * </pre>
+     *
+     * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param index The index of the value to return.
+     * @return The bytes of the instanceTypes at the given index.
+     */
+    public com.google.protobuf.ByteString getInstanceTypesBytes(int index) {
+      return instanceTypes_.getByteString(index);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. A list of instance types for creating spot node pool.
+     * </pre>
+     *
+     * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param index The index to set the value at.
+     * @param value The instanceTypes to set.
+     * @return This builder for chaining.
+     */
+    public Builder setInstanceTypes(int index, java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureInstanceTypesIsMutable();
+      instanceTypes_.set(index, value);
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. A list of instance types for creating spot node pool.
+     * </pre>
+     *
+     * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The instanceTypes to add.
+     * @return This builder for chaining.
+     */
+    public Builder addInstanceTypes(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      ensureInstanceTypesIsMutable();
+      instanceTypes_.add(value);
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. A list of instance types for creating spot node pool.
+     * </pre>
+     *
+     * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param values The instanceTypes to add.
+     * @return This builder for chaining.
+     */
+    public Builder addAllInstanceTypes(java.lang.Iterable<java.lang.String> values) {
+      ensureInstanceTypesIsMutable();
+      com.google.protobuf.AbstractMessageLite.Builder.addAll(values, instanceTypes_);
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. A list of instance types for creating spot node pool.
+     * </pre>
+     *
+     * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearInstanceTypes() {
+      instanceTypes_ = com.google.protobuf.LazyStringArrayList.emptyList();
+      bitField0_ = (bitField0_ & ~0x00000001);
+      ;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Required. A list of instance types for creating spot node pool.
+     * </pre>
+     *
+     * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+     *
+     * @param value The bytes of the instanceTypes to add.
+     * @return This builder for chaining.
+     */
+    public Builder addInstanceTypesBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      ensureInstanceTypesIsMutable();
+      instanceTypes_.add(value);
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.SpotConfig)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.SpotConfig)
+  private static final com.google.cloud.gkemulticloud.v1.SpotConfig DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.SpotConfig();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SpotConfig getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<SpotConfig> PARSER =
+      new com.google.protobuf.AbstractParser<SpotConfig>() {
+        @java.lang.Override
+        public SpotConfig parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<SpotConfig> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<SpotConfig> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.SpotConfig getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SpotConfigOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SpotConfigOrBuilder.java
new file mode 100644
index 000000000000..52ecddb750c2
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SpotConfigOrBuilder.java
@@ -0,0 +1,76 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface SpotConfigOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.SpotConfig)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Required. A list of instance types for creating spot node pool.
+   * </pre>
+   *
+   * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return A list containing the instanceTypes.
+   */
+  java.util.List<java.lang.String> getInstanceTypesList();
+  /**
+   *
+   *
+   * <pre>
+   * Required. A list of instance types for creating spot node pool.
+   * </pre>
+   *
+   * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @return The count of instanceTypes.
+   */
+  int getInstanceTypesCount();
+  /**
+   *
+   *
+   * <pre>
+   * Required. A list of instance types for creating spot node pool.
+   * </pre>
+   *
+   * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @param index The index of the element to return.
+   * @return The instanceTypes at the given index.
+   */
+  java.lang.String getInstanceTypes(int index);
+  /**
+   *
+   *
+   * <pre>
+   * Required. A list of instance types for creating spot node pool.
+   * </pre>
+   *
+   * <code>repeated string instance_types = 1 [(.google.api.field_behavior) = REQUIRED];</code>
+   *
+   * @param index The index of the value to return.
+   * @return The bytes of the instanceTypes at the given index.
+   */
+  com.google.protobuf.ByteString getInstanceTypesBytes(int index);
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SurgeSettings.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SurgeSettings.java
new file mode 100644
index 000000000000..ca4063fdec0c
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SurgeSettings.java
@@ -0,0 +1,639 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * SurgeSettings contains the parameters for Surge update.
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.SurgeSettings}
+ */
+public final class SurgeSettings extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.SurgeSettings)
+    SurgeSettingsOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use SurgeSettings.newBuilder() to construct.
+  private SurgeSettings(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private SurgeSettings() {}
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new SurgeSettings();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_SurgeSettings_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_SurgeSettings_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.SurgeSettings.class,
+            com.google.cloud.gkemulticloud.v1.SurgeSettings.Builder.class);
+  }
+
+  public static final int MAX_SURGE_FIELD_NUMBER = 1;
+  private int maxSurge_ = 0;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The maximum number of nodes that can be created beyond the
+   * current size of the node pool during the update process.
+   * </pre>
+   *
+   * <code>int32 max_surge = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The maxSurge.
+   */
+  @java.lang.Override
+  public int getMaxSurge() {
+    return maxSurge_;
+  }
+
+  public static final int MAX_UNAVAILABLE_FIELD_NUMBER = 2;
+  private int maxUnavailable_ = 0;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The maximum number of nodes that can be simultaneously
+   * unavailable during the update process. A node is considered unavailable if
+   * its status is not Ready.
+   * </pre>
+   *
+   * <code>int32 max_unavailable = 2 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The maxUnavailable.
+   */
+  @java.lang.Override
+  public int getMaxUnavailable() {
+    return maxUnavailable_;
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (maxSurge_ != 0) {
+      output.writeInt32(1, maxSurge_);
+    }
+    if (maxUnavailable_ != 0) {
+      output.writeInt32(2, maxUnavailable_);
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (maxSurge_ != 0) {
+      size += com.google.protobuf.CodedOutputStream.computeInt32Size(1, maxSurge_);
+    }
+    if (maxUnavailable_ != 0) {
+      size += com.google.protobuf.CodedOutputStream.computeInt32Size(2, maxUnavailable_);
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.SurgeSettings)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.SurgeSettings other =
+        (com.google.cloud.gkemulticloud.v1.SurgeSettings) obj;
+
+    if (getMaxSurge() != other.getMaxSurge()) return false;
+    if (getMaxUnavailable() != other.getMaxUnavailable()) return false;
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    hash = (37 * hash) + MAX_SURGE_FIELD_NUMBER;
+    hash = (53 * hash) + getMaxSurge();
+    hash = (37 * hash) + MAX_UNAVAILABLE_FIELD_NUMBER;
+    hash = (53 * hash) + getMaxUnavailable();
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseFrom(java.nio.ByteBuffer data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseFrom(java.io.InputStream input)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.SurgeSettings prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * SurgeSettings contains the parameters for Surge update.
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.SurgeSettings}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.SurgeSettings)
+      com.google.cloud.gkemulticloud.v1.SurgeSettingsOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_SurgeSettings_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_SurgeSettings_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.SurgeSettings.class,
+              com.google.cloud.gkemulticloud.v1.SurgeSettings.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.SurgeSettings.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      maxSurge_ = 0;
+      maxUnavailable_ = 0;
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_SurgeSettings_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.SurgeSettings getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.SurgeSettings.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.SurgeSettings build() {
+      com.google.cloud.gkemulticloud.v1.SurgeSettings result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.SurgeSettings buildPartial() {
+      com.google.cloud.gkemulticloud.v1.SurgeSettings result =
+          new com.google.cloud.gkemulticloud.v1.SurgeSettings(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.SurgeSettings result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.maxSurge_ = maxSurge_;
+      }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.maxUnavailable_ = maxUnavailable_;
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.SurgeSettings) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.SurgeSettings) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.SurgeSettings other) {
+      if (other == com.google.cloud.gkemulticloud.v1.SurgeSettings.getDefaultInstance())
+        return this;
+      if (other.getMaxSurge() != 0) {
+        setMaxSurge(other.getMaxSurge());
+      }
+      if (other.getMaxUnavailable() != 0) {
+        setMaxUnavailable(other.getMaxUnavailable());
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 8:
+              {
+                maxSurge_ = input.readInt32();
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 8
+            case 16:
+              {
+                maxUnavailable_ = input.readInt32();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 16
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private int maxSurge_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The maximum number of nodes that can be created beyond the
+     * current size of the node pool during the update process.
+     * </pre>
+     *
+     * <code>int32 max_surge = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The maxSurge.
+     */
+    @java.lang.Override
+    public int getMaxSurge() {
+      return maxSurge_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The maximum number of nodes that can be created beyond the
+     * current size of the node pool during the update process.
+     * </pre>
+     *
+     * <code>int32 max_surge = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The maxSurge to set.
+     * @return This builder for chaining.
+     */
+    public Builder setMaxSurge(int value) {
+
+      maxSurge_ = value;
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The maximum number of nodes that can be created beyond the
+     * current size of the node pool during the update process.
+     * </pre>
+     *
+     * <code>int32 max_surge = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearMaxSurge() {
+      bitField0_ = (bitField0_ & ~0x00000001);
+      maxSurge_ = 0;
+      onChanged();
+      return this;
+    }
+
+    private int maxUnavailable_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The maximum number of nodes that can be simultaneously
+     * unavailable during the update process. A node is considered unavailable if
+     * its status is not Ready.
+     * </pre>
+     *
+     * <code>int32 max_unavailable = 2 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return The maxUnavailable.
+     */
+    @java.lang.Override
+    public int getMaxUnavailable() {
+      return maxUnavailable_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The maximum number of nodes that can be simultaneously
+     * unavailable during the update process. A node is considered unavailable if
+     * its status is not Ready.
+     * </pre>
+     *
+     * <code>int32 max_unavailable = 2 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @param value The maxUnavailable to set.
+     * @return This builder for chaining.
+     */
+    public Builder setMaxUnavailable(int value) {
+
+      maxUnavailable_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. The maximum number of nodes that can be simultaneously
+     * unavailable during the update process. A node is considered unavailable if
+     * its status is not Ready.
+     * </pre>
+     *
+     * <code>int32 max_unavailable = 2 [(.google.api.field_behavior) = OPTIONAL];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearMaxUnavailable() {
+      bitField0_ = (bitField0_ & ~0x00000002);
+      maxUnavailable_ = 0;
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.SurgeSettings)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.SurgeSettings)
+  private static final com.google.cloud.gkemulticloud.v1.SurgeSettings DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.SurgeSettings();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.SurgeSettings getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<SurgeSettings> PARSER =
+      new com.google.protobuf.AbstractParser<SurgeSettings>() {
+        @java.lang.Override
+        public SurgeSettings parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<SurgeSettings> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<SurgeSettings> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.SurgeSettings getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SurgeSettingsOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SurgeSettingsOrBuilder.java
new file mode 100644
index 000000000000..6de2e4b45429
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/SurgeSettingsOrBuilder.java
@@ -0,0 +1,54 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface SurgeSettingsOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.SurgeSettings)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The maximum number of nodes that can be created beyond the
+   * current size of the node pool during the update process.
+   * </pre>
+   *
+   * <code>int32 max_surge = 1 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The maxSurge.
+   */
+  int getMaxSurge();
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. The maximum number of nodes that can be simultaneously
+   * unavailable during the update process. A node is considered unavailable if
+   * its status is not Ready.
+   * </pre>
+   *
+   * <code>int32 max_unavailable = 2 [(.google.api.field_behavior) = OPTIONAL];</code>
+   *
+   * @return The maxUnavailable.
+   */
+  int getMaxUnavailable();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAttachedClusterRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAttachedClusterRequest.java
index 64139361f094..b067a3a93207 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAttachedClusterRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAttachedClusterRequest.java
@@ -151,12 +151,16 @@ public boolean getValidateOnly() {
    * fields from
    * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
    *
-   *  *   `description`.
    *  *   `annotations`.
-   *  *   `platform_version`.
+   *  *   `authorization.admin_groups`.
    *  *   `authorization.admin_users`.
+   *  *   `binary_authorization.evaluation_mode`.
+   *  *   `description`.
    *  *   `logging_config.component_config.enable_components`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `platform_version`.
+   *  *   `proxy_config.kubernetes_secret.name`.
+   *  *   `proxy_config.kubernetes_secret.namespace`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -177,12 +181,16 @@ public boolean hasUpdateMask() {
    * fields from
    * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
    *
-   *  *   `description`.
    *  *   `annotations`.
-   *  *   `platform_version`.
+   *  *   `authorization.admin_groups`.
    *  *   `authorization.admin_users`.
+   *  *   `binary_authorization.evaluation_mode`.
+   *  *   `description`.
    *  *   `logging_config.component_config.enable_components`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `platform_version`.
+   *  *   `proxy_config.kubernetes_secret.name`.
+   *  *   `proxy_config.kubernetes_secret.namespace`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -203,12 +211,16 @@ public com.google.protobuf.FieldMask getUpdateMask() {
    * fields from
    * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
    *
-   *  *   `description`.
    *  *   `annotations`.
-   *  *   `platform_version`.
+   *  *   `authorization.admin_groups`.
    *  *   `authorization.admin_users`.
+   *  *   `binary_authorization.evaluation_mode`.
+   *  *   `description`.
    *  *   `logging_config.component_config.enable_components`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `platform_version`.
+   *  *   `proxy_config.kubernetes_secret.name`.
+   *  *   `proxy_config.kubernetes_secret.namespace`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -916,12 +928,16 @@ public Builder clearValidateOnly() {
      * fields from
      * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
      *
-     *  *   `description`.
      *  *   `annotations`.
-     *  *   `platform_version`.
+     *  *   `authorization.admin_groups`.
      *  *   `authorization.admin_users`.
+     *  *   `binary_authorization.evaluation_mode`.
+     *  *   `description`.
      *  *   `logging_config.component_config.enable_components`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `platform_version`.
+     *  *   `proxy_config.kubernetes_secret.name`.
+     *  *   `proxy_config.kubernetes_secret.namespace`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -941,12 +957,16 @@ public boolean hasUpdateMask() {
      * fields from
      * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
      *
-     *  *   `description`.
      *  *   `annotations`.
-     *  *   `platform_version`.
+     *  *   `authorization.admin_groups`.
      *  *   `authorization.admin_users`.
+     *  *   `binary_authorization.evaluation_mode`.
+     *  *   `description`.
      *  *   `logging_config.component_config.enable_components`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `platform_version`.
+     *  *   `proxy_config.kubernetes_secret.name`.
+     *  *   `proxy_config.kubernetes_secret.namespace`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -972,12 +992,16 @@ public com.google.protobuf.FieldMask getUpdateMask() {
      * fields from
      * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
      *
-     *  *   `description`.
      *  *   `annotations`.
-     *  *   `platform_version`.
+     *  *   `authorization.admin_groups`.
      *  *   `authorization.admin_users`.
+     *  *   `binary_authorization.evaluation_mode`.
+     *  *   `description`.
      *  *   `logging_config.component_config.enable_components`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `platform_version`.
+     *  *   `proxy_config.kubernetes_secret.name`.
+     *  *   `proxy_config.kubernetes_secret.namespace`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1005,12 +1029,16 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask value) {
      * fields from
      * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
      *
-     *  *   `description`.
      *  *   `annotations`.
-     *  *   `platform_version`.
+     *  *   `authorization.admin_groups`.
      *  *   `authorization.admin_users`.
+     *  *   `binary_authorization.evaluation_mode`.
+     *  *   `description`.
      *  *   `logging_config.component_config.enable_components`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `platform_version`.
+     *  *   `proxy_config.kubernetes_secret.name`.
+     *  *   `proxy_config.kubernetes_secret.namespace`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1035,12 +1063,16 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask.Builder builderForVal
      * fields from
      * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
      *
-     *  *   `description`.
      *  *   `annotations`.
-     *  *   `platform_version`.
+     *  *   `authorization.admin_groups`.
      *  *   `authorization.admin_users`.
+     *  *   `binary_authorization.evaluation_mode`.
+     *  *   `description`.
      *  *   `logging_config.component_config.enable_components`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `platform_version`.
+     *  *   `proxy_config.kubernetes_secret.name`.
+     *  *   `proxy_config.kubernetes_secret.namespace`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1071,12 +1103,16 @@ public Builder mergeUpdateMask(com.google.protobuf.FieldMask value) {
      * fields from
      * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
      *
-     *  *   `description`.
      *  *   `annotations`.
-     *  *   `platform_version`.
+     *  *   `authorization.admin_groups`.
      *  *   `authorization.admin_users`.
+     *  *   `binary_authorization.evaluation_mode`.
+     *  *   `description`.
      *  *   `logging_config.component_config.enable_components`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `platform_version`.
+     *  *   `proxy_config.kubernetes_secret.name`.
+     *  *   `proxy_config.kubernetes_secret.namespace`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1101,12 +1137,16 @@ public Builder clearUpdateMask() {
      * fields from
      * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
      *
-     *  *   `description`.
      *  *   `annotations`.
-     *  *   `platform_version`.
+     *  *   `authorization.admin_groups`.
      *  *   `authorization.admin_users`.
+     *  *   `binary_authorization.evaluation_mode`.
+     *  *   `description`.
      *  *   `logging_config.component_config.enable_components`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `platform_version`.
+     *  *   `proxy_config.kubernetes_secret.name`.
+     *  *   `proxy_config.kubernetes_secret.namespace`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1126,12 +1166,16 @@ public com.google.protobuf.FieldMask.Builder getUpdateMaskBuilder() {
      * fields from
      * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
      *
-     *  *   `description`.
      *  *   `annotations`.
-     *  *   `platform_version`.
+     *  *   `authorization.admin_groups`.
      *  *   `authorization.admin_users`.
+     *  *   `binary_authorization.evaluation_mode`.
+     *  *   `description`.
      *  *   `logging_config.component_config.enable_components`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `platform_version`.
+     *  *   `proxy_config.kubernetes_secret.name`.
+     *  *   `proxy_config.kubernetes_secret.namespace`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1155,12 +1199,16 @@ public com.google.protobuf.FieldMaskOrBuilder getUpdateMaskOrBuilder() {
      * fields from
      * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
      *
-     *  *   `description`.
      *  *   `annotations`.
-     *  *   `platform_version`.
+     *  *   `authorization.admin_groups`.
      *  *   `authorization.admin_users`.
+     *  *   `binary_authorization.evaluation_mode`.
+     *  *   `description`.
      *  *   `logging_config.component_config.enable_components`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `platform_version`.
+     *  *   `proxy_config.kubernetes_secret.name`.
+     *  *   `proxy_config.kubernetes_secret.namespace`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAttachedClusterRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAttachedClusterRequestOrBuilder.java
index 3381d1509134..e139f1154b3e 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAttachedClusterRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAttachedClusterRequestOrBuilder.java
@@ -92,12 +92,16 @@ public interface UpdateAttachedClusterRequestOrBuilder
    * fields from
    * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
    *
-   *  *   `description`.
    *  *   `annotations`.
-   *  *   `platform_version`.
+   *  *   `authorization.admin_groups`.
    *  *   `authorization.admin_users`.
+   *  *   `binary_authorization.evaluation_mode`.
+   *  *   `description`.
    *  *   `logging_config.component_config.enable_components`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `platform_version`.
+   *  *   `proxy_config.kubernetes_secret.name`.
+   *  *   `proxy_config.kubernetes_secret.namespace`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -115,12 +119,16 @@ public interface UpdateAttachedClusterRequestOrBuilder
    * fields from
    * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
    *
-   *  *   `description`.
    *  *   `annotations`.
-   *  *   `platform_version`.
+   *  *   `authorization.admin_groups`.
    *  *   `authorization.admin_users`.
+   *  *   `binary_authorization.evaluation_mode`.
+   *  *   `description`.
    *  *   `logging_config.component_config.enable_components`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `platform_version`.
+   *  *   `proxy_config.kubernetes_secret.name`.
+   *  *   `proxy_config.kubernetes_secret.namespace`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -138,12 +146,16 @@ public interface UpdateAttachedClusterRequestOrBuilder
    * fields from
    * [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
    *
-   *  *   `description`.
    *  *   `annotations`.
-   *  *   `platform_version`.
+   *  *   `authorization.admin_groups`.
    *  *   `authorization.admin_users`.
+   *  *   `binary_authorization.evaluation_mode`.
+   *  *   `description`.
    *  *   `logging_config.component_config.enable_components`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `platform_version`.
+   *  *   `proxy_config.kubernetes_secret.name`.
+   *  *   `proxy_config.kubernetes_secret.namespace`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsClusterRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsClusterRequest.java
index e0062a232cdc..8a26cf69fd16 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsClusterRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsClusterRequest.java
@@ -151,6 +151,8 @@ public boolean getValidateOnly() {
    *  *   `annotations`.
    *  *   `control_plane.version`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
+   *  *   `binary_authorization.evaluation_mode`.
    *  *   `control_plane.aws_services_authentication.role_arn`.
    *  *   `control_plane.aws_services_authentication.role_session_name`.
    *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -162,6 +164,7 @@ public boolean getValidateOnly() {
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `control_plane.root_volume.volume_type`.
    *  *   `control_plane.root_volume.iops`.
+   *  *   `control_plane.root_volume.throughput`.
    *  *   `control_plane.root_volume.kms_key_arn`.
    *  *   `control_plane.ssh_config`.
    *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -170,6 +173,7 @@ public boolean getValidateOnly() {
    *  *   `logging_config.component_config.enable_components`.
    *  *   `control_plane.tags`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `networking.per_node_pool_sg_rules_disabled`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -193,6 +197,8 @@ public boolean hasUpdateMask() {
    *  *   `annotations`.
    *  *   `control_plane.version`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
+   *  *   `binary_authorization.evaluation_mode`.
    *  *   `control_plane.aws_services_authentication.role_arn`.
    *  *   `control_plane.aws_services_authentication.role_session_name`.
    *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -204,6 +210,7 @@ public boolean hasUpdateMask() {
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `control_plane.root_volume.volume_type`.
    *  *   `control_plane.root_volume.iops`.
+   *  *   `control_plane.root_volume.throughput`.
    *  *   `control_plane.root_volume.kms_key_arn`.
    *  *   `control_plane.ssh_config`.
    *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -212,6 +219,7 @@ public boolean hasUpdateMask() {
    *  *   `logging_config.component_config.enable_components`.
    *  *   `control_plane.tags`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `networking.per_node_pool_sg_rules_disabled`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -235,6 +243,8 @@ public com.google.protobuf.FieldMask getUpdateMask() {
    *  *   `annotations`.
    *  *   `control_plane.version`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
+   *  *   `binary_authorization.evaluation_mode`.
    *  *   `control_plane.aws_services_authentication.role_arn`.
    *  *   `control_plane.aws_services_authentication.role_session_name`.
    *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -246,6 +256,7 @@ public com.google.protobuf.FieldMask getUpdateMask() {
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `control_plane.root_volume.volume_type`.
    *  *   `control_plane.root_volume.iops`.
+   *  *   `control_plane.root_volume.throughput`.
    *  *   `control_plane.root_volume.kms_key_arn`.
    *  *   `control_plane.ssh_config`.
    *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -254,6 +265,7 @@ public com.google.protobuf.FieldMask getUpdateMask() {
    *  *   `logging_config.component_config.enable_components`.
    *  *   `control_plane.tags`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `networking.per_node_pool_sg_rules_disabled`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -949,6 +961,8 @@ public Builder clearValidateOnly() {
      *  *   `annotations`.
      *  *   `control_plane.version`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
+     *  *   `binary_authorization.evaluation_mode`.
      *  *   `control_plane.aws_services_authentication.role_arn`.
      *  *   `control_plane.aws_services_authentication.role_session_name`.
      *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -960,6 +974,7 @@ public Builder clearValidateOnly() {
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `control_plane.root_volume.volume_type`.
      *  *   `control_plane.root_volume.iops`.
+     *  *   `control_plane.root_volume.throughput`.
      *  *   `control_plane.root_volume.kms_key_arn`.
      *  *   `control_plane.ssh_config`.
      *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -968,6 +983,7 @@ public Builder clearValidateOnly() {
      *  *   `logging_config.component_config.enable_components`.
      *  *   `control_plane.tags`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `networking.per_node_pool_sg_rules_disabled`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -990,6 +1006,8 @@ public boolean hasUpdateMask() {
      *  *   `annotations`.
      *  *   `control_plane.version`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
+     *  *   `binary_authorization.evaluation_mode`.
      *  *   `control_plane.aws_services_authentication.role_arn`.
      *  *   `control_plane.aws_services_authentication.role_session_name`.
      *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -1001,6 +1019,7 @@ public boolean hasUpdateMask() {
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `control_plane.root_volume.volume_type`.
      *  *   `control_plane.root_volume.iops`.
+     *  *   `control_plane.root_volume.throughput`.
      *  *   `control_plane.root_volume.kms_key_arn`.
      *  *   `control_plane.ssh_config`.
      *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -1009,6 +1028,7 @@ public boolean hasUpdateMask() {
      *  *   `logging_config.component_config.enable_components`.
      *  *   `control_plane.tags`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `networking.per_node_pool_sg_rules_disabled`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -1037,6 +1057,8 @@ public com.google.protobuf.FieldMask getUpdateMask() {
      *  *   `annotations`.
      *  *   `control_plane.version`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
+     *  *   `binary_authorization.evaluation_mode`.
      *  *   `control_plane.aws_services_authentication.role_arn`.
      *  *   `control_plane.aws_services_authentication.role_session_name`.
      *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -1048,6 +1070,7 @@ public com.google.protobuf.FieldMask getUpdateMask() {
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `control_plane.root_volume.volume_type`.
      *  *   `control_plane.root_volume.iops`.
+     *  *   `control_plane.root_volume.throughput`.
      *  *   `control_plane.root_volume.kms_key_arn`.
      *  *   `control_plane.ssh_config`.
      *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -1056,6 +1079,7 @@ public com.google.protobuf.FieldMask getUpdateMask() {
      *  *   `logging_config.component_config.enable_components`.
      *  *   `control_plane.tags`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `networking.per_node_pool_sg_rules_disabled`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -1086,6 +1110,8 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `annotations`.
      *  *   `control_plane.version`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
+     *  *   `binary_authorization.evaluation_mode`.
      *  *   `control_plane.aws_services_authentication.role_arn`.
      *  *   `control_plane.aws_services_authentication.role_session_name`.
      *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -1097,6 +1123,7 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `control_plane.root_volume.volume_type`.
      *  *   `control_plane.root_volume.iops`.
+     *  *   `control_plane.root_volume.throughput`.
      *  *   `control_plane.root_volume.kms_key_arn`.
      *  *   `control_plane.ssh_config`.
      *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -1105,6 +1132,7 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `logging_config.component_config.enable_components`.
      *  *   `control_plane.tags`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `networking.per_node_pool_sg_rules_disabled`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -1132,6 +1160,8 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask.Builder builderForVal
      *  *   `annotations`.
      *  *   `control_plane.version`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
+     *  *   `binary_authorization.evaluation_mode`.
      *  *   `control_plane.aws_services_authentication.role_arn`.
      *  *   `control_plane.aws_services_authentication.role_session_name`.
      *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -1143,6 +1173,7 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask.Builder builderForVal
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `control_plane.root_volume.volume_type`.
      *  *   `control_plane.root_volume.iops`.
+     *  *   `control_plane.root_volume.throughput`.
      *  *   `control_plane.root_volume.kms_key_arn`.
      *  *   `control_plane.ssh_config`.
      *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -1151,6 +1182,7 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask.Builder builderForVal
      *  *   `logging_config.component_config.enable_components`.
      *  *   `control_plane.tags`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `networking.per_node_pool_sg_rules_disabled`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -1184,6 +1216,8 @@ public Builder mergeUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `annotations`.
      *  *   `control_plane.version`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
+     *  *   `binary_authorization.evaluation_mode`.
      *  *   `control_plane.aws_services_authentication.role_arn`.
      *  *   `control_plane.aws_services_authentication.role_session_name`.
      *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -1195,6 +1229,7 @@ public Builder mergeUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `control_plane.root_volume.volume_type`.
      *  *   `control_plane.root_volume.iops`.
+     *  *   `control_plane.root_volume.throughput`.
      *  *   `control_plane.root_volume.kms_key_arn`.
      *  *   `control_plane.ssh_config`.
      *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -1203,6 +1238,7 @@ public Builder mergeUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `logging_config.component_config.enable_components`.
      *  *   `control_plane.tags`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `networking.per_node_pool_sg_rules_disabled`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -1230,6 +1266,8 @@ public Builder clearUpdateMask() {
      *  *   `annotations`.
      *  *   `control_plane.version`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
+     *  *   `binary_authorization.evaluation_mode`.
      *  *   `control_plane.aws_services_authentication.role_arn`.
      *  *   `control_plane.aws_services_authentication.role_session_name`.
      *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -1241,6 +1279,7 @@ public Builder clearUpdateMask() {
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `control_plane.root_volume.volume_type`.
      *  *   `control_plane.root_volume.iops`.
+     *  *   `control_plane.root_volume.throughput`.
      *  *   `control_plane.root_volume.kms_key_arn`.
      *  *   `control_plane.ssh_config`.
      *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -1249,6 +1288,7 @@ public Builder clearUpdateMask() {
      *  *   `logging_config.component_config.enable_components`.
      *  *   `control_plane.tags`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `networking.per_node_pool_sg_rules_disabled`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -1271,6 +1311,8 @@ public com.google.protobuf.FieldMask.Builder getUpdateMaskBuilder() {
      *  *   `annotations`.
      *  *   `control_plane.version`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
+     *  *   `binary_authorization.evaluation_mode`.
      *  *   `control_plane.aws_services_authentication.role_arn`.
      *  *   `control_plane.aws_services_authentication.role_session_name`.
      *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -1282,6 +1324,7 @@ public com.google.protobuf.FieldMask.Builder getUpdateMaskBuilder() {
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `control_plane.root_volume.volume_type`.
      *  *   `control_plane.root_volume.iops`.
+     *  *   `control_plane.root_volume.throughput`.
      *  *   `control_plane.root_volume.kms_key_arn`.
      *  *   `control_plane.ssh_config`.
      *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -1290,6 +1333,7 @@ public com.google.protobuf.FieldMask.Builder getUpdateMaskBuilder() {
      *  *   `logging_config.component_config.enable_components`.
      *  *   `control_plane.tags`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `networking.per_node_pool_sg_rules_disabled`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -1316,6 +1360,8 @@ public com.google.protobuf.FieldMaskOrBuilder getUpdateMaskOrBuilder() {
      *  *   `annotations`.
      *  *   `control_plane.version`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
+     *  *   `binary_authorization.evaluation_mode`.
      *  *   `control_plane.aws_services_authentication.role_arn`.
      *  *   `control_plane.aws_services_authentication.role_session_name`.
      *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -1327,6 +1373,7 @@ public com.google.protobuf.FieldMaskOrBuilder getUpdateMaskOrBuilder() {
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `control_plane.root_volume.volume_type`.
      *  *   `control_plane.root_volume.iops`.
+     *  *   `control_plane.root_volume.throughput`.
      *  *   `control_plane.root_volume.kms_key_arn`.
      *  *   `control_plane.ssh_config`.
      *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -1335,6 +1382,7 @@ public com.google.protobuf.FieldMaskOrBuilder getUpdateMaskOrBuilder() {
      *  *   `logging_config.component_config.enable_components`.
      *  *   `control_plane.tags`.
      *  *   `monitoring_config.managed_prometheus_config.enabled`.
+     *  *   `networking.per_node_pool_sg_rules_disabled`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsClusterRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsClusterRequestOrBuilder.java
index 403d139e0f08..cad46dae8c74 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsClusterRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsClusterRequestOrBuilder.java
@@ -92,6 +92,8 @@ public interface UpdateAwsClusterRequestOrBuilder
    *  *   `annotations`.
    *  *   `control_plane.version`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
+   *  *   `binary_authorization.evaluation_mode`.
    *  *   `control_plane.aws_services_authentication.role_arn`.
    *  *   `control_plane.aws_services_authentication.role_session_name`.
    *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -103,6 +105,7 @@ public interface UpdateAwsClusterRequestOrBuilder
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `control_plane.root_volume.volume_type`.
    *  *   `control_plane.root_volume.iops`.
+   *  *   `control_plane.root_volume.throughput`.
    *  *   `control_plane.root_volume.kms_key_arn`.
    *  *   `control_plane.ssh_config`.
    *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -111,6 +114,7 @@ public interface UpdateAwsClusterRequestOrBuilder
    *  *   `logging_config.component_config.enable_components`.
    *  *   `control_plane.tags`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `networking.per_node_pool_sg_rules_disabled`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -131,6 +135,8 @@ public interface UpdateAwsClusterRequestOrBuilder
    *  *   `annotations`.
    *  *   `control_plane.version`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
+   *  *   `binary_authorization.evaluation_mode`.
    *  *   `control_plane.aws_services_authentication.role_arn`.
    *  *   `control_plane.aws_services_authentication.role_session_name`.
    *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -142,6 +148,7 @@ public interface UpdateAwsClusterRequestOrBuilder
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `control_plane.root_volume.volume_type`.
    *  *   `control_plane.root_volume.iops`.
+   *  *   `control_plane.root_volume.throughput`.
    *  *   `control_plane.root_volume.kms_key_arn`.
    *  *   `control_plane.ssh_config`.
    *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -150,6 +157,7 @@ public interface UpdateAwsClusterRequestOrBuilder
    *  *   `logging_config.component_config.enable_components`.
    *  *   `control_plane.tags`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `networking.per_node_pool_sg_rules_disabled`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
@@ -170,6 +178,8 @@ public interface UpdateAwsClusterRequestOrBuilder
    *  *   `annotations`.
    *  *   `control_plane.version`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
+   *  *   `binary_authorization.evaluation_mode`.
    *  *   `control_plane.aws_services_authentication.role_arn`.
    *  *   `control_plane.aws_services_authentication.role_session_name`.
    *  *   `control_plane.config_encryption.kms_key_arn`.
@@ -181,6 +191,7 @@ public interface UpdateAwsClusterRequestOrBuilder
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `control_plane.root_volume.volume_type`.
    *  *   `control_plane.root_volume.iops`.
+   *  *   `control_plane.root_volume.throughput`.
    *  *   `control_plane.root_volume.kms_key_arn`.
    *  *   `control_plane.ssh_config`.
    *  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -189,6 +200,7 @@ public interface UpdateAwsClusterRequestOrBuilder
    *  *   `logging_config.component_config.enable_components`.
    *  *   `control_plane.tags`.
    *  *   `monitoring_config.managed_prometheus_config.enabled`.
+   *  *   `networking.per_node_pool_sg_rules_disabled`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 4 [(.google.api.field_behavior) = REQUIRED];
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsNodePoolRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsNodePoolRequest.java
index 2a169ee2e3ff..f76d7926a511 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsNodePoolRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsNodePoolRequest.java
@@ -154,6 +154,7 @@ public boolean getValidateOnly() {
    *  *   `config.config_encryption.kms_key_arn`.
    *  *   `config.security_group_ids`.
    *  *   `config.root_volume.iops`.
+   *  *   `config.root_volume.throughput`.
    *  *   `config.root_volume.kms_key_arn`.
    *  *   `config.root_volume.volume_type`.
    *  *   `config.root_volume.size_gib`.
@@ -169,6 +170,13 @@ public boolean getValidateOnly() {
    *  *   `config.autoscaling_metrics_collection`.
    *  *   `config.autoscaling_metrics_collection.granularity`.
    *  *   `config.autoscaling_metrics_collection.metrics`.
+   *  *   `config.instance_type`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
+   *  *   `update_settings`.
+   *  *   `update_settings.surge_settings`.
+   *  *   `update_settings.surge_settings.max_surge`.
+   *  *   `update_settings.surge_settings.max_unavailable`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -195,6 +203,7 @@ public boolean hasUpdateMask() {
    *  *   `config.config_encryption.kms_key_arn`.
    *  *   `config.security_group_ids`.
    *  *   `config.root_volume.iops`.
+   *  *   `config.root_volume.throughput`.
    *  *   `config.root_volume.kms_key_arn`.
    *  *   `config.root_volume.volume_type`.
    *  *   `config.root_volume.size_gib`.
@@ -210,6 +219,13 @@ public boolean hasUpdateMask() {
    *  *   `config.autoscaling_metrics_collection`.
    *  *   `config.autoscaling_metrics_collection.granularity`.
    *  *   `config.autoscaling_metrics_collection.metrics`.
+   *  *   `config.instance_type`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
+   *  *   `update_settings`.
+   *  *   `update_settings.surge_settings`.
+   *  *   `update_settings.surge_settings.max_surge`.
+   *  *   `update_settings.surge_settings.max_unavailable`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -236,6 +252,7 @@ public com.google.protobuf.FieldMask getUpdateMask() {
    *  *   `config.config_encryption.kms_key_arn`.
    *  *   `config.security_group_ids`.
    *  *   `config.root_volume.iops`.
+   *  *   `config.root_volume.throughput`.
    *  *   `config.root_volume.kms_key_arn`.
    *  *   `config.root_volume.volume_type`.
    *  *   `config.root_volume.size_gib`.
@@ -251,6 +268,13 @@ public com.google.protobuf.FieldMask getUpdateMask() {
    *  *   `config.autoscaling_metrics_collection`.
    *  *   `config.autoscaling_metrics_collection.granularity`.
    *  *   `config.autoscaling_metrics_collection.metrics`.
+   *  *   `config.instance_type`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
+   *  *   `update_settings`.
+   *  *   `update_settings.surge_settings`.
+   *  *   `update_settings.surge_settings.max_surge`.
+   *  *   `update_settings.surge_settings.max_unavailable`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -950,6 +974,7 @@ public Builder clearValidateOnly() {
      *  *   `config.config_encryption.kms_key_arn`.
      *  *   `config.security_group_ids`.
      *  *   `config.root_volume.iops`.
+     *  *   `config.root_volume.throughput`.
      *  *   `config.root_volume.kms_key_arn`.
      *  *   `config.root_volume.volume_type`.
      *  *   `config.root_volume.size_gib`.
@@ -965,6 +990,13 @@ public Builder clearValidateOnly() {
      *  *   `config.autoscaling_metrics_collection`.
      *  *   `config.autoscaling_metrics_collection.granularity`.
      *  *   `config.autoscaling_metrics_collection.metrics`.
+     *  *   `config.instance_type`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
+     *  *   `update_settings`.
+     *  *   `update_settings.surge_settings`.
+     *  *   `update_settings.surge_settings.max_surge`.
+     *  *   `update_settings.surge_settings.max_unavailable`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -990,6 +1022,7 @@ public boolean hasUpdateMask() {
      *  *   `config.config_encryption.kms_key_arn`.
      *  *   `config.security_group_ids`.
      *  *   `config.root_volume.iops`.
+     *  *   `config.root_volume.throughput`.
      *  *   `config.root_volume.kms_key_arn`.
      *  *   `config.root_volume.volume_type`.
      *  *   `config.root_volume.size_gib`.
@@ -1005,6 +1038,13 @@ public boolean hasUpdateMask() {
      *  *   `config.autoscaling_metrics_collection`.
      *  *   `config.autoscaling_metrics_collection.granularity`.
      *  *   `config.autoscaling_metrics_collection.metrics`.
+     *  *   `config.instance_type`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
+     *  *   `update_settings`.
+     *  *   `update_settings.surge_settings`.
+     *  *   `update_settings.surge_settings.max_surge`.
+     *  *   `update_settings.surge_settings.max_unavailable`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1036,6 +1076,7 @@ public com.google.protobuf.FieldMask getUpdateMask() {
      *  *   `config.config_encryption.kms_key_arn`.
      *  *   `config.security_group_ids`.
      *  *   `config.root_volume.iops`.
+     *  *   `config.root_volume.throughput`.
      *  *   `config.root_volume.kms_key_arn`.
      *  *   `config.root_volume.volume_type`.
      *  *   `config.root_volume.size_gib`.
@@ -1051,6 +1092,13 @@ public com.google.protobuf.FieldMask getUpdateMask() {
      *  *   `config.autoscaling_metrics_collection`.
      *  *   `config.autoscaling_metrics_collection.granularity`.
      *  *   `config.autoscaling_metrics_collection.metrics`.
+     *  *   `config.instance_type`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
+     *  *   `update_settings`.
+     *  *   `update_settings.surge_settings`.
+     *  *   `update_settings.surge_settings.max_surge`.
+     *  *   `update_settings.surge_settings.max_unavailable`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1084,6 +1132,7 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `config.config_encryption.kms_key_arn`.
      *  *   `config.security_group_ids`.
      *  *   `config.root_volume.iops`.
+     *  *   `config.root_volume.throughput`.
      *  *   `config.root_volume.kms_key_arn`.
      *  *   `config.root_volume.volume_type`.
      *  *   `config.root_volume.size_gib`.
@@ -1099,6 +1148,13 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `config.autoscaling_metrics_collection`.
      *  *   `config.autoscaling_metrics_collection.granularity`.
      *  *   `config.autoscaling_metrics_collection.metrics`.
+     *  *   `config.instance_type`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
+     *  *   `update_settings`.
+     *  *   `update_settings.surge_settings`.
+     *  *   `update_settings.surge_settings.max_surge`.
+     *  *   `update_settings.surge_settings.max_unavailable`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1129,6 +1185,7 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask.Builder builderForVal
      *  *   `config.config_encryption.kms_key_arn`.
      *  *   `config.security_group_ids`.
      *  *   `config.root_volume.iops`.
+     *  *   `config.root_volume.throughput`.
      *  *   `config.root_volume.kms_key_arn`.
      *  *   `config.root_volume.volume_type`.
      *  *   `config.root_volume.size_gib`.
@@ -1144,6 +1201,13 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask.Builder builderForVal
      *  *   `config.autoscaling_metrics_collection`.
      *  *   `config.autoscaling_metrics_collection.granularity`.
      *  *   `config.autoscaling_metrics_collection.metrics`.
+     *  *   `config.instance_type`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
+     *  *   `update_settings`.
+     *  *   `update_settings.surge_settings`.
+     *  *   `update_settings.surge_settings.max_surge`.
+     *  *   `update_settings.surge_settings.max_unavailable`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1180,6 +1244,7 @@ public Builder mergeUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `config.config_encryption.kms_key_arn`.
      *  *   `config.security_group_ids`.
      *  *   `config.root_volume.iops`.
+     *  *   `config.root_volume.throughput`.
      *  *   `config.root_volume.kms_key_arn`.
      *  *   `config.root_volume.volume_type`.
      *  *   `config.root_volume.size_gib`.
@@ -1195,6 +1260,13 @@ public Builder mergeUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `config.autoscaling_metrics_collection`.
      *  *   `config.autoscaling_metrics_collection.granularity`.
      *  *   `config.autoscaling_metrics_collection.metrics`.
+     *  *   `config.instance_type`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
+     *  *   `update_settings`.
+     *  *   `update_settings.surge_settings`.
+     *  *   `update_settings.surge_settings.max_surge`.
+     *  *   `update_settings.surge_settings.max_unavailable`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1225,6 +1297,7 @@ public Builder clearUpdateMask() {
      *  *   `config.config_encryption.kms_key_arn`.
      *  *   `config.security_group_ids`.
      *  *   `config.root_volume.iops`.
+     *  *   `config.root_volume.throughput`.
      *  *   `config.root_volume.kms_key_arn`.
      *  *   `config.root_volume.volume_type`.
      *  *   `config.root_volume.size_gib`.
@@ -1240,6 +1313,13 @@ public Builder clearUpdateMask() {
      *  *   `config.autoscaling_metrics_collection`.
      *  *   `config.autoscaling_metrics_collection.granularity`.
      *  *   `config.autoscaling_metrics_collection.metrics`.
+     *  *   `config.instance_type`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
+     *  *   `update_settings`.
+     *  *   `update_settings.surge_settings`.
+     *  *   `update_settings.surge_settings.max_surge`.
+     *  *   `update_settings.surge_settings.max_unavailable`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1265,6 +1345,7 @@ public com.google.protobuf.FieldMask.Builder getUpdateMaskBuilder() {
      *  *   `config.config_encryption.kms_key_arn`.
      *  *   `config.security_group_ids`.
      *  *   `config.root_volume.iops`.
+     *  *   `config.root_volume.throughput`.
      *  *   `config.root_volume.kms_key_arn`.
      *  *   `config.root_volume.volume_type`.
      *  *   `config.root_volume.size_gib`.
@@ -1280,6 +1361,13 @@ public com.google.protobuf.FieldMask.Builder getUpdateMaskBuilder() {
      *  *   `config.autoscaling_metrics_collection`.
      *  *   `config.autoscaling_metrics_collection.granularity`.
      *  *   `config.autoscaling_metrics_collection.metrics`.
+     *  *   `config.instance_type`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
+     *  *   `update_settings`.
+     *  *   `update_settings.surge_settings`.
+     *  *   `update_settings.surge_settings.max_surge`.
+     *  *   `update_settings.surge_settings.max_unavailable`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1309,6 +1397,7 @@ public com.google.protobuf.FieldMaskOrBuilder getUpdateMaskOrBuilder() {
      *  *   `config.config_encryption.kms_key_arn`.
      *  *   `config.security_group_ids`.
      *  *   `config.root_volume.iops`.
+     *  *   `config.root_volume.throughput`.
      *  *   `config.root_volume.kms_key_arn`.
      *  *   `config.root_volume.volume_type`.
      *  *   `config.root_volume.size_gib`.
@@ -1324,6 +1413,13 @@ public com.google.protobuf.FieldMaskOrBuilder getUpdateMaskOrBuilder() {
      *  *   `config.autoscaling_metrics_collection`.
      *  *   `config.autoscaling_metrics_collection.granularity`.
      *  *   `config.autoscaling_metrics_collection.metrics`.
+     *  *   `config.instance_type`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
+     *  *   `update_settings`.
+     *  *   `update_settings.surge_settings`.
+     *  *   `update_settings.surge_settings.max_surge`.
+     *  *   `update_settings.surge_settings.max_unavailable`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsNodePoolRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsNodePoolRequestOrBuilder.java
index 3f34daa84657..4d0d5683c6a4 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsNodePoolRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAwsNodePoolRequestOrBuilder.java
@@ -95,6 +95,7 @@ public interface UpdateAwsNodePoolRequestOrBuilder
    *  *   `config.config_encryption.kms_key_arn`.
    *  *   `config.security_group_ids`.
    *  *   `config.root_volume.iops`.
+   *  *   `config.root_volume.throughput`.
    *  *   `config.root_volume.kms_key_arn`.
    *  *   `config.root_volume.volume_type`.
    *  *   `config.root_volume.size_gib`.
@@ -110,6 +111,13 @@ public interface UpdateAwsNodePoolRequestOrBuilder
    *  *   `config.autoscaling_metrics_collection`.
    *  *   `config.autoscaling_metrics_collection.granularity`.
    *  *   `config.autoscaling_metrics_collection.metrics`.
+   *  *   `config.instance_type`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
+   *  *   `update_settings`.
+   *  *   `update_settings.surge_settings`.
+   *  *   `update_settings.surge_settings.max_surge`.
+   *  *   `update_settings.surge_settings.max_unavailable`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -133,6 +141,7 @@ public interface UpdateAwsNodePoolRequestOrBuilder
    *  *   `config.config_encryption.kms_key_arn`.
    *  *   `config.security_group_ids`.
    *  *   `config.root_volume.iops`.
+   *  *   `config.root_volume.throughput`.
    *  *   `config.root_volume.kms_key_arn`.
    *  *   `config.root_volume.volume_type`.
    *  *   `config.root_volume.size_gib`.
@@ -148,6 +157,13 @@ public interface UpdateAwsNodePoolRequestOrBuilder
    *  *   `config.autoscaling_metrics_collection`.
    *  *   `config.autoscaling_metrics_collection.granularity`.
    *  *   `config.autoscaling_metrics_collection.metrics`.
+   *  *   `config.instance_type`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
+   *  *   `update_settings`.
+   *  *   `update_settings.surge_settings`.
+   *  *   `update_settings.surge_settings.max_surge`.
+   *  *   `update_settings.surge_settings.max_unavailable`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -171,6 +187,7 @@ public interface UpdateAwsNodePoolRequestOrBuilder
    *  *   `config.config_encryption.kms_key_arn`.
    *  *   `config.security_group_ids`.
    *  *   `config.root_volume.iops`.
+   *  *   `config.root_volume.throughput`.
    *  *   `config.root_volume.kms_key_arn`.
    *  *   `config.root_volume.volume_type`.
    *  *   `config.root_volume.size_gib`.
@@ -186,6 +203,13 @@ public interface UpdateAwsNodePoolRequestOrBuilder
    *  *   `config.autoscaling_metrics_collection`.
    *  *   `config.autoscaling_metrics_collection.granularity`.
    *  *   `config.autoscaling_metrics_collection.metrics`.
+   *  *   `config.instance_type`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
+   *  *   `update_settings`.
+   *  *   `update_settings.surge_settings`.
+   *  *   `update_settings.surge_settings.max_surge`.
+   *  *   `update_settings.surge_settings.max_unavailable`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureClusterRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureClusterRequest.java
index 2a3b03fc688e..8382f9ff461d 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureClusterRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureClusterRequest.java
@@ -153,6 +153,7 @@ public boolean getValidateOnly() {
    *  *   `control_plane.vm_size`.
    *  *   `annotations`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `azure_services_authentication`.
    *  *   `azure_services_authentication.tenant_id`.
@@ -188,6 +189,7 @@ public boolean hasUpdateMask() {
    *  *   `control_plane.vm_size`.
    *  *   `annotations`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `azure_services_authentication`.
    *  *   `azure_services_authentication.tenant_id`.
@@ -223,6 +225,7 @@ public com.google.protobuf.FieldMask getUpdateMask() {
    *  *   `control_plane.vm_size`.
    *  *   `annotations`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `azure_services_authentication`.
    *  *   `azure_services_authentication.tenant_id`.
@@ -932,6 +935,7 @@ public Builder clearValidateOnly() {
      *  *   `control_plane.vm_size`.
      *  *   `annotations`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `azure_services_authentication`.
      *  *   `azure_services_authentication.tenant_id`.
@@ -966,6 +970,7 @@ public boolean hasUpdateMask() {
      *  *   `control_plane.vm_size`.
      *  *   `annotations`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `azure_services_authentication`.
      *  *   `azure_services_authentication.tenant_id`.
@@ -1006,6 +1011,7 @@ public com.google.protobuf.FieldMask getUpdateMask() {
      *  *   `control_plane.vm_size`.
      *  *   `annotations`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `azure_services_authentication`.
      *  *   `azure_services_authentication.tenant_id`.
@@ -1048,6 +1054,7 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `control_plane.vm_size`.
      *  *   `annotations`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `azure_services_authentication`.
      *  *   `azure_services_authentication.tenant_id`.
@@ -1087,6 +1094,7 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask.Builder builderForVal
      *  *   `control_plane.vm_size`.
      *  *   `annotations`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `azure_services_authentication`.
      *  *   `azure_services_authentication.tenant_id`.
@@ -1132,6 +1140,7 @@ public Builder mergeUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `control_plane.vm_size`.
      *  *   `annotations`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `azure_services_authentication`.
      *  *   `azure_services_authentication.tenant_id`.
@@ -1171,6 +1180,7 @@ public Builder clearUpdateMask() {
      *  *   `control_plane.vm_size`.
      *  *   `annotations`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `azure_services_authentication`.
      *  *   `azure_services_authentication.tenant_id`.
@@ -1205,6 +1215,7 @@ public com.google.protobuf.FieldMask.Builder getUpdateMaskBuilder() {
      *  *   `control_plane.vm_size`.
      *  *   `annotations`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `azure_services_authentication`.
      *  *   `azure_services_authentication.tenant_id`.
@@ -1243,6 +1254,7 @@ public com.google.protobuf.FieldMaskOrBuilder getUpdateMaskOrBuilder() {
      *  *   `control_plane.vm_size`.
      *  *   `annotations`.
      *  *   `authorization.admin_users`.
+     *  *   `authorization.admin_groups`.
      *  *   `control_plane.root_volume.size_gib`.
      *  *   `azure_services_authentication`.
      *  *   `azure_services_authentication.tenant_id`.
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureClusterRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureClusterRequestOrBuilder.java
index 1d9a93fd3c0e..f9fb93f47f57 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureClusterRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureClusterRequestOrBuilder.java
@@ -94,6 +94,7 @@ public interface UpdateAzureClusterRequestOrBuilder
    *  *   `control_plane.vm_size`.
    *  *   `annotations`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `azure_services_authentication`.
    *  *   `azure_services_authentication.tenant_id`.
@@ -126,6 +127,7 @@ public interface UpdateAzureClusterRequestOrBuilder
    *  *   `control_plane.vm_size`.
    *  *   `annotations`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `azure_services_authentication`.
    *  *   `azure_services_authentication.tenant_id`.
@@ -158,6 +160,7 @@ public interface UpdateAzureClusterRequestOrBuilder
    *  *   `control_plane.vm_size`.
    *  *   `annotations`.
    *  *   `authorization.admin_users`.
+   *  *   `authorization.admin_groups`.
    *  *   `control_plane.root_volume.size_gib`.
    *  *   `azure_services_authentication`.
    *  *   `azure_services_authentication.tenant_id`.
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureNodePoolRequest.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureNodePoolRequest.java
index 9aa732f51261..8b12ae8a8231 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureNodePoolRequest.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureNodePoolRequest.java
@@ -152,6 +152,8 @@ public boolean getValidateOnly() {
    *  *   `autoscaling.min_node_count`.
    *  *   `autoscaling.max_node_count`.
    *  *   `config.ssh_config.authorized_key`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -176,6 +178,8 @@ public boolean hasUpdateMask() {
    *  *   `autoscaling.min_node_count`.
    *  *   `autoscaling.max_node_count`.
    *  *   `config.ssh_config.authorized_key`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -200,6 +204,8 @@ public com.google.protobuf.FieldMask getUpdateMask() {
    *  *   `autoscaling.min_node_count`.
    *  *   `autoscaling.max_node_count`.
    *  *   `config.ssh_config.authorized_key`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -901,6 +907,8 @@ public Builder clearValidateOnly() {
      *  *   `autoscaling.min_node_count`.
      *  *   `autoscaling.max_node_count`.
      *  *   `config.ssh_config.authorized_key`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -924,6 +932,8 @@ public boolean hasUpdateMask() {
      *  *   `autoscaling.min_node_count`.
      *  *   `autoscaling.max_node_count`.
      *  *   `config.ssh_config.authorized_key`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -953,6 +963,8 @@ public com.google.protobuf.FieldMask getUpdateMask() {
      *  *   `autoscaling.min_node_count`.
      *  *   `autoscaling.max_node_count`.
      *  *   `config.ssh_config.authorized_key`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -984,6 +996,8 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `autoscaling.min_node_count`.
      *  *   `autoscaling.max_node_count`.
      *  *   `config.ssh_config.authorized_key`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1012,6 +1026,8 @@ public Builder setUpdateMask(com.google.protobuf.FieldMask.Builder builderForVal
      *  *   `autoscaling.min_node_count`.
      *  *   `autoscaling.max_node_count`.
      *  *   `config.ssh_config.authorized_key`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1046,6 +1062,8 @@ public Builder mergeUpdateMask(com.google.protobuf.FieldMask value) {
      *  *   `autoscaling.min_node_count`.
      *  *   `autoscaling.max_node_count`.
      *  *   `config.ssh_config.authorized_key`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1074,6 +1092,8 @@ public Builder clearUpdateMask() {
      *  *   `autoscaling.min_node_count`.
      *  *   `autoscaling.max_node_count`.
      *  *   `config.ssh_config.authorized_key`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1097,6 +1117,8 @@ public com.google.protobuf.FieldMask.Builder getUpdateMaskBuilder() {
      *  *   `autoscaling.min_node_count`.
      *  *   `autoscaling.max_node_count`.
      *  *   `config.ssh_config.authorized_key`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -1124,6 +1146,8 @@ public com.google.protobuf.FieldMaskOrBuilder getUpdateMaskOrBuilder() {
      *  *   `autoscaling.min_node_count`.
      *  *   `autoscaling.max_node_count`.
      *  *   `config.ssh_config.authorized_key`.
+     *  *   `management.auto_repair`.
+     *  *   `management`.
      * </pre>
      *
      * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureNodePoolRequestOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureNodePoolRequestOrBuilder.java
index 4a639b6e11d0..94aa85f72c05 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureNodePoolRequestOrBuilder.java
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateAzureNodePoolRequestOrBuilder.java
@@ -93,6 +93,8 @@ public interface UpdateAzureNodePoolRequestOrBuilder
    *  *   `autoscaling.min_node_count`.
    *  *   `autoscaling.max_node_count`.
    *  *   `config.ssh_config.authorized_key`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -114,6 +116,8 @@ public interface UpdateAzureNodePoolRequestOrBuilder
    *  *   `autoscaling.min_node_count`.
    *  *   `autoscaling.max_node_count`.
    *  *   `config.ssh_config.authorized_key`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
@@ -135,6 +139,8 @@ public interface UpdateAzureNodePoolRequestOrBuilder
    *  *   `autoscaling.min_node_count`.
    *  *   `autoscaling.max_node_count`.
    *  *   `config.ssh_config.authorized_key`.
+   *  *   `management.auto_repair`.
+   *  *   `management`.
    * </pre>
    *
    * <code>.google.protobuf.FieldMask update_mask = 3 [(.google.api.field_behavior) = REQUIRED];
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateSettings.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateSettings.java
new file mode 100644
index 000000000000..c846ddc594fe
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateSettings.java
@@ -0,0 +1,776 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+/**
+ *
+ *
+ * <pre>
+ * UpdateSettings control the level of parallelism and the level of
+ * disruption caused during the update of a node pool.
+ *
+ * These settings are applicable when the node pool update requires replacing
+ * the existing node pool nodes with the updated ones.
+ *
+ * UpdateSettings are optional. When UpdateSettings are not specified during the
+ * node pool creation, a default is chosen based on the parent cluster's
+ * version. For clusters with minor version 1.27 and later, a default
+ * surge_settings configuration with max_surge = 1 and max_unavailable = 0 is
+ * used. For clusters with older versions, node pool updates use the traditional
+ * rolling update mechanism of updating one node at a time in a
+ * "terminate before create" fashion and update_settings is not applicable.
+ *
+ * Set the surge_settings parameter to use the Surge Update mechanism for
+ * the rolling update of node pool nodes.
+ * 1. max_surge controls the number of additional nodes that can be created
+ * beyond the current size of the node pool temporarily for the time of the
+ * update to increase the number of available nodes.
+ * 2. max_unavailable controls the number of nodes that can be simultaneously
+ * unavailable during the update.
+ * 3. (max_surge + max_unavailable) determines the level of parallelism (i.e.,
+ * the number of nodes being updated at the same time).
+ * </pre>
+ *
+ * Protobuf type {@code google.cloud.gkemulticloud.v1.UpdateSettings}
+ */
+public final class UpdateSettings extends com.google.protobuf.GeneratedMessageV3
+    implements
+    // @@protoc_insertion_point(message_implements:google.cloud.gkemulticloud.v1.UpdateSettings)
+    UpdateSettingsOrBuilder {
+  private static final long serialVersionUID = 0L;
+  // Use UpdateSettings.newBuilder() to construct.
+  private UpdateSettings(com.google.protobuf.GeneratedMessageV3.Builder<?> builder) {
+    super(builder);
+  }
+
+  private UpdateSettings() {}
+
+  @java.lang.Override
+  @SuppressWarnings({"unused"})
+  protected java.lang.Object newInstance(UnusedPrivateParameter unused) {
+    return new UpdateSettings();
+  }
+
+  public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_UpdateSettings_descriptor;
+  }
+
+  @java.lang.Override
+  protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internalGetFieldAccessorTable() {
+    return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+        .internal_static_google_cloud_gkemulticloud_v1_UpdateSettings_fieldAccessorTable
+        .ensureFieldAccessorsInitialized(
+            com.google.cloud.gkemulticloud.v1.UpdateSettings.class,
+            com.google.cloud.gkemulticloud.v1.UpdateSettings.Builder.class);
+  }
+
+  public static final int SURGE_SETTINGS_FIELD_NUMBER = 1;
+  private com.google.cloud.gkemulticloud.v1.SurgeSettings surgeSettings_;
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Settings for surge update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the surgeSettings field is set.
+   */
+  @java.lang.Override
+  public boolean hasSurgeSettings() {
+    return surgeSettings_ != null;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Settings for surge update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The surgeSettings.
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.SurgeSettings getSurgeSettings() {
+    return surgeSettings_ == null
+        ? com.google.cloud.gkemulticloud.v1.SurgeSettings.getDefaultInstance()
+        : surgeSettings_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Settings for surge update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.SurgeSettingsOrBuilder getSurgeSettingsOrBuilder() {
+    return surgeSettings_ == null
+        ? com.google.cloud.gkemulticloud.v1.SurgeSettings.getDefaultInstance()
+        : surgeSettings_;
+  }
+
+  private byte memoizedIsInitialized = -1;
+
+  @java.lang.Override
+  public final boolean isInitialized() {
+    byte isInitialized = memoizedIsInitialized;
+    if (isInitialized == 1) return true;
+    if (isInitialized == 0) return false;
+
+    memoizedIsInitialized = 1;
+    return true;
+  }
+
+  @java.lang.Override
+  public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io.IOException {
+    if (surgeSettings_ != null) {
+      output.writeMessage(1, getSurgeSettings());
+    }
+    getUnknownFields().writeTo(output);
+  }
+
+  @java.lang.Override
+  public int getSerializedSize() {
+    int size = memoizedSize;
+    if (size != -1) return size;
+
+    size = 0;
+    if (surgeSettings_ != null) {
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(1, getSurgeSettings());
+    }
+    size += getUnknownFields().getSerializedSize();
+    memoizedSize = size;
+    return size;
+  }
+
+  @java.lang.Override
+  public boolean equals(final java.lang.Object obj) {
+    if (obj == this) {
+      return true;
+    }
+    if (!(obj instanceof com.google.cloud.gkemulticloud.v1.UpdateSettings)) {
+      return super.equals(obj);
+    }
+    com.google.cloud.gkemulticloud.v1.UpdateSettings other =
+        (com.google.cloud.gkemulticloud.v1.UpdateSettings) obj;
+
+    if (hasSurgeSettings() != other.hasSurgeSettings()) return false;
+    if (hasSurgeSettings()) {
+      if (!getSurgeSettings().equals(other.getSurgeSettings())) return false;
+    }
+    if (!getUnknownFields().equals(other.getUnknownFields())) return false;
+    return true;
+  }
+
+  @java.lang.Override
+  public int hashCode() {
+    if (memoizedHashCode != 0) {
+      return memoizedHashCode;
+    }
+    int hash = 41;
+    hash = (19 * hash) + getDescriptor().hashCode();
+    if (hasSurgeSettings()) {
+      hash = (37 * hash) + SURGE_SETTINGS_FIELD_NUMBER;
+      hash = (53 * hash) + getSurgeSettings().hashCode();
+    }
+    hash = (29 * hash) + getUnknownFields().hashCode();
+    memoizedHashCode = hash;
+    return hash;
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseFrom(java.nio.ByteBuffer data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseFrom(
+      java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseFrom(
+      com.google.protobuf.ByteString data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseFrom(
+      com.google.protobuf.ByteString data,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseFrom(byte[] data)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseFrom(
+      byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws com.google.protobuf.InvalidProtocolBufferException {
+    return PARSER.parseFrom(data, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseDelimitedFrom(
+      java.io.InputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseDelimitedFrom(
+      java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseDelimitedWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseFrom(
+      com.google.protobuf.CodedInputStream input) throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(PARSER, input);
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings parseFrom(
+      com.google.protobuf.CodedInputStream input,
+      com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+      throws java.io.IOException {
+    return com.google.protobuf.GeneratedMessageV3.parseWithIOException(
+        PARSER, input, extensionRegistry);
+  }
+
+  @java.lang.Override
+  public Builder newBuilderForType() {
+    return newBuilder();
+  }
+
+  public static Builder newBuilder() {
+    return DEFAULT_INSTANCE.toBuilder();
+  }
+
+  public static Builder newBuilder(com.google.cloud.gkemulticloud.v1.UpdateSettings prototype) {
+    return DEFAULT_INSTANCE.toBuilder().mergeFrom(prototype);
+  }
+
+  @java.lang.Override
+  public Builder toBuilder() {
+    return this == DEFAULT_INSTANCE ? new Builder() : new Builder().mergeFrom(this);
+  }
+
+  @java.lang.Override
+  protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+    Builder builder = new Builder(parent);
+    return builder;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * UpdateSettings control the level of parallelism and the level of
+   * disruption caused during the update of a node pool.
+   *
+   * These settings are applicable when the node pool update requires replacing
+   * the existing node pool nodes with the updated ones.
+   *
+   * UpdateSettings are optional. When UpdateSettings are not specified during the
+   * node pool creation, a default is chosen based on the parent cluster's
+   * version. For clusters with minor version 1.27 and later, a default
+   * surge_settings configuration with max_surge = 1 and max_unavailable = 0 is
+   * used. For clusters with older versions, node pool updates use the traditional
+   * rolling update mechanism of updating one node at a time in a
+   * "terminate before create" fashion and update_settings is not applicable.
+   *
+   * Set the surge_settings parameter to use the Surge Update mechanism for
+   * the rolling update of node pool nodes.
+   * 1. max_surge controls the number of additional nodes that can be created
+   * beyond the current size of the node pool temporarily for the time of the
+   * update to increase the number of available nodes.
+   * 2. max_unavailable controls the number of nodes that can be simultaneously
+   * unavailable during the update.
+   * 3. (max_surge + max_unavailable) determines the level of parallelism (i.e.,
+   * the number of nodes being updated at the same time).
+   * </pre>
+   *
+   * Protobuf type {@code google.cloud.gkemulticloud.v1.UpdateSettings}
+   */
+  public static final class Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Builder>
+      implements
+      // @@protoc_insertion_point(builder_implements:google.cloud.gkemulticloud.v1.UpdateSettings)
+      com.google.cloud.gkemulticloud.v1.UpdateSettingsOrBuilder {
+    public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_UpdateSettings_descriptor;
+    }
+
+    @java.lang.Override
+    protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+        internalGetFieldAccessorTable() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_UpdateSettings_fieldAccessorTable
+          .ensureFieldAccessorsInitialized(
+              com.google.cloud.gkemulticloud.v1.UpdateSettings.class,
+              com.google.cloud.gkemulticloud.v1.UpdateSettings.Builder.class);
+    }
+
+    // Construct using com.google.cloud.gkemulticloud.v1.UpdateSettings.newBuilder()
+    private Builder() {}
+
+    private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) {
+      super(parent);
+    }
+
+    @java.lang.Override
+    public Builder clear() {
+      super.clear();
+      bitField0_ = 0;
+      surgeSettings_ = null;
+      if (surgeSettingsBuilder_ != null) {
+        surgeSettingsBuilder_.dispose();
+        surgeSettingsBuilder_ = null;
+      }
+      return this;
+    }
+
+    @java.lang.Override
+    public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
+      return com.google.cloud.gkemulticloud.v1.AwsResourcesProto
+          .internal_static_google_cloud_gkemulticloud_v1_UpdateSettings_descriptor;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.UpdateSettings getDefaultInstanceForType() {
+      return com.google.cloud.gkemulticloud.v1.UpdateSettings.getDefaultInstance();
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.UpdateSettings build() {
+      com.google.cloud.gkemulticloud.v1.UpdateSettings result = buildPartial();
+      if (!result.isInitialized()) {
+        throw newUninitializedMessageException(result);
+      }
+      return result;
+    }
+
+    @java.lang.Override
+    public com.google.cloud.gkemulticloud.v1.UpdateSettings buildPartial() {
+      com.google.cloud.gkemulticloud.v1.UpdateSettings result =
+          new com.google.cloud.gkemulticloud.v1.UpdateSettings(this);
+      if (bitField0_ != 0) {
+        buildPartial0(result);
+      }
+      onBuilt();
+      return result;
+    }
+
+    private void buildPartial0(com.google.cloud.gkemulticloud.v1.UpdateSettings result) {
+      int from_bitField0_ = bitField0_;
+      if (((from_bitField0_ & 0x00000001) != 0)) {
+        result.surgeSettings_ =
+            surgeSettingsBuilder_ == null ? surgeSettings_ : surgeSettingsBuilder_.build();
+      }
+    }
+
+    @java.lang.Override
+    public Builder clone() {
+      return super.clone();
+    }
+
+    @java.lang.Override
+    public Builder setField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.setField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) {
+      return super.clearField(field);
+    }
+
+    @java.lang.Override
+    public Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) {
+      return super.clearOneof(oneof);
+    }
+
+    @java.lang.Override
+    public Builder setRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value) {
+      return super.setRepeatedField(field, index, value);
+    }
+
+    @java.lang.Override
+    public Builder addRepeatedField(
+        com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value) {
+      return super.addRepeatedField(field, value);
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(com.google.protobuf.Message other) {
+      if (other instanceof com.google.cloud.gkemulticloud.v1.UpdateSettings) {
+        return mergeFrom((com.google.cloud.gkemulticloud.v1.UpdateSettings) other);
+      } else {
+        super.mergeFrom(other);
+        return this;
+      }
+    }
+
+    public Builder mergeFrom(com.google.cloud.gkemulticloud.v1.UpdateSettings other) {
+      if (other == com.google.cloud.gkemulticloud.v1.UpdateSettings.getDefaultInstance())
+        return this;
+      if (other.hasSurgeSettings()) {
+        mergeSurgeSettings(other.getSurgeSettings());
+      }
+      this.mergeUnknownFields(other.getUnknownFields());
+      onChanged();
+      return this;
+    }
+
+    @java.lang.Override
+    public final boolean isInitialized() {
+      return true;
+    }
+
+    @java.lang.Override
+    public Builder mergeFrom(
+        com.google.protobuf.CodedInputStream input,
+        com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+        throws java.io.IOException {
+      if (extensionRegistry == null) {
+        throw new java.lang.NullPointerException();
+      }
+      try {
+        boolean done = false;
+        while (!done) {
+          int tag = input.readTag();
+          switch (tag) {
+            case 0:
+              done = true;
+              break;
+            case 10:
+              {
+                input.readMessage(getSurgeSettingsFieldBuilder().getBuilder(), extensionRegistry);
+                bitField0_ |= 0x00000001;
+                break;
+              } // case 10
+            default:
+              {
+                if (!super.parseUnknownField(input, extensionRegistry, tag)) {
+                  done = true; // was an endgroup tag
+                }
+                break;
+              } // default:
+          } // switch (tag)
+        } // while (!done)
+      } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+        throw e.unwrapIOException();
+      } finally {
+        onChanged();
+      } // finally
+      return this;
+    }
+
+    private int bitField0_;
+
+    private com.google.cloud.gkemulticloud.v1.SurgeSettings surgeSettings_;
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.SurgeSettings,
+            com.google.cloud.gkemulticloud.v1.SurgeSettings.Builder,
+            com.google.cloud.gkemulticloud.v1.SurgeSettingsOrBuilder>
+        surgeSettingsBuilder_;
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Settings for surge update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return Whether the surgeSettings field is set.
+     */
+    public boolean hasSurgeSettings() {
+      return ((bitField0_ & 0x00000001) != 0);
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Settings for surge update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     *
+     * @return The surgeSettings.
+     */
+    public com.google.cloud.gkemulticloud.v1.SurgeSettings getSurgeSettings() {
+      if (surgeSettingsBuilder_ == null) {
+        return surgeSettings_ == null
+            ? com.google.cloud.gkemulticloud.v1.SurgeSettings.getDefaultInstance()
+            : surgeSettings_;
+      } else {
+        return surgeSettingsBuilder_.getMessage();
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Settings for surge update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setSurgeSettings(com.google.cloud.gkemulticloud.v1.SurgeSettings value) {
+      if (surgeSettingsBuilder_ == null) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        surgeSettings_ = value;
+      } else {
+        surgeSettingsBuilder_.setMessage(value);
+      }
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Settings for surge update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder setSurgeSettings(
+        com.google.cloud.gkemulticloud.v1.SurgeSettings.Builder builderForValue) {
+      if (surgeSettingsBuilder_ == null) {
+        surgeSettings_ = builderForValue.build();
+      } else {
+        surgeSettingsBuilder_.setMessage(builderForValue.build());
+      }
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Settings for surge update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder mergeSurgeSettings(com.google.cloud.gkemulticloud.v1.SurgeSettings value) {
+      if (surgeSettingsBuilder_ == null) {
+        if (((bitField0_ & 0x00000001) != 0)
+            && surgeSettings_ != null
+            && surgeSettings_
+                != com.google.cloud.gkemulticloud.v1.SurgeSettings.getDefaultInstance()) {
+          getSurgeSettingsBuilder().mergeFrom(value);
+        } else {
+          surgeSettings_ = value;
+        }
+      } else {
+        surgeSettingsBuilder_.mergeFrom(value);
+      }
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Settings for surge update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder clearSurgeSettings() {
+      bitField0_ = (bitField0_ & ~0x00000001);
+      surgeSettings_ = null;
+      if (surgeSettingsBuilder_ != null) {
+        surgeSettingsBuilder_.dispose();
+        surgeSettingsBuilder_ = null;
+      }
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Settings for surge update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.SurgeSettings.Builder getSurgeSettingsBuilder() {
+      bitField0_ |= 0x00000001;
+      onChanged();
+      return getSurgeSettingsFieldBuilder().getBuilder();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Settings for surge update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public com.google.cloud.gkemulticloud.v1.SurgeSettingsOrBuilder getSurgeSettingsOrBuilder() {
+      if (surgeSettingsBuilder_ != null) {
+        return surgeSettingsBuilder_.getMessageOrBuilder();
+      } else {
+        return surgeSettings_ == null
+            ? com.google.cloud.gkemulticloud.v1.SurgeSettings.getDefaultInstance()
+            : surgeSettings_;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Settings for surge update.
+     * </pre>
+     *
+     * <code>
+     * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    private com.google.protobuf.SingleFieldBuilderV3<
+            com.google.cloud.gkemulticloud.v1.SurgeSettings,
+            com.google.cloud.gkemulticloud.v1.SurgeSettings.Builder,
+            com.google.cloud.gkemulticloud.v1.SurgeSettingsOrBuilder>
+        getSurgeSettingsFieldBuilder() {
+      if (surgeSettingsBuilder_ == null) {
+        surgeSettingsBuilder_ =
+            new com.google.protobuf.SingleFieldBuilderV3<
+                com.google.cloud.gkemulticloud.v1.SurgeSettings,
+                com.google.cloud.gkemulticloud.v1.SurgeSettings.Builder,
+                com.google.cloud.gkemulticloud.v1.SurgeSettingsOrBuilder>(
+                getSurgeSettings(), getParentForChildren(), isClean());
+        surgeSettings_ = null;
+      }
+      return surgeSettingsBuilder_;
+    }
+
+    @java.lang.Override
+    public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.setUnknownFields(unknownFields);
+    }
+
+    @java.lang.Override
+    public final Builder mergeUnknownFields(
+        final com.google.protobuf.UnknownFieldSet unknownFields) {
+      return super.mergeUnknownFields(unknownFields);
+    }
+
+    // @@protoc_insertion_point(builder_scope:google.cloud.gkemulticloud.v1.UpdateSettings)
+  }
+
+  // @@protoc_insertion_point(class_scope:google.cloud.gkemulticloud.v1.UpdateSettings)
+  private static final com.google.cloud.gkemulticloud.v1.UpdateSettings DEFAULT_INSTANCE;
+
+  static {
+    DEFAULT_INSTANCE = new com.google.cloud.gkemulticloud.v1.UpdateSettings();
+  }
+
+  public static com.google.cloud.gkemulticloud.v1.UpdateSettings getDefaultInstance() {
+    return DEFAULT_INSTANCE;
+  }
+
+  private static final com.google.protobuf.Parser<UpdateSettings> PARSER =
+      new com.google.protobuf.AbstractParser<UpdateSettings>() {
+        @java.lang.Override
+        public UpdateSettings parsePartialFrom(
+            com.google.protobuf.CodedInputStream input,
+            com.google.protobuf.ExtensionRegistryLite extensionRegistry)
+            throws com.google.protobuf.InvalidProtocolBufferException {
+          Builder builder = newBuilder();
+          try {
+            builder.mergeFrom(input, extensionRegistry);
+          } catch (com.google.protobuf.InvalidProtocolBufferException e) {
+            throw e.setUnfinishedMessage(builder.buildPartial());
+          } catch (com.google.protobuf.UninitializedMessageException e) {
+            throw e.asInvalidProtocolBufferException().setUnfinishedMessage(builder.buildPartial());
+          } catch (java.io.IOException e) {
+            throw new com.google.protobuf.InvalidProtocolBufferException(e)
+                .setUnfinishedMessage(builder.buildPartial());
+          }
+          return builder.buildPartial();
+        }
+      };
+
+  public static com.google.protobuf.Parser<UpdateSettings> parser() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.protobuf.Parser<UpdateSettings> getParserForType() {
+    return PARSER;
+  }
+
+  @java.lang.Override
+  public com.google.cloud.gkemulticloud.v1.UpdateSettings getDefaultInstanceForType() {
+    return DEFAULT_INSTANCE;
+  }
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateSettingsOrBuilder.java b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateSettingsOrBuilder.java
new file mode 100644
index 000000000000..680c07293803
--- /dev/null
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/java/com/google/cloud/gkemulticloud/v1/UpdateSettingsOrBuilder.java
@@ -0,0 +1,66 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+// Generated by the protocol buffer compiler.  DO NOT EDIT!
+// source: google/cloud/gkemulticloud/v1/aws_resources.proto
+
+package com.google.cloud.gkemulticloud.v1;
+
+public interface UpdateSettingsOrBuilder
+    extends
+    // @@protoc_insertion_point(interface_extends:google.cloud.gkemulticloud.v1.UpdateSettings)
+    com.google.protobuf.MessageOrBuilder {
+
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Settings for surge update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return Whether the surgeSettings field is set.
+   */
+  boolean hasSurgeSettings();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Settings for surge update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   *
+   * @return The surgeSettings.
+   */
+  com.google.cloud.gkemulticloud.v1.SurgeSettings getSurgeSettings();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Settings for surge update.
+   * </pre>
+   *
+   * <code>
+   * .google.cloud.gkemulticloud.v1.SurgeSettings surge_settings = 1 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  com.google.cloud.gkemulticloud.v1.SurgeSettingsOrBuilder getSurgeSettingsOrBuilder();
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/attached_resources.proto b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/attached_resources.proto
index adca2ee90273..f4f69ab1000b 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/attached_resources.proto
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/attached_resources.proto
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -89,7 +89,7 @@ message AttachedCluster {
 
   // Required. The Kubernetes distribution of the underlying attached cluster.
   //
-  // Supported values: ["eks", "aks"].
+  // Supported values: ["eks", "aks", "generic"].
   string distribution = 16 [(google.api.field_behavior) = REQUIRED];
 
   // Output only. The region where this cluster runs.
@@ -157,18 +157,35 @@ message AttachedCluster {
   // Optional. Monitoring configuration for this cluster.
   MonitoringConfig monitoring_config = 23
       [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Proxy configuration for outbound HTTP(S) traffic.
+  AttachedProxyConfig proxy_config = 24
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Binary Authorization configuration for this cluster.
+  BinaryAuthorization binary_authorization = 25
+      [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Configuration related to the cluster RBAC settings.
 message AttachedClustersAuthorization {
-  // Required. Users that can perform operations as a cluster admin. A managed
+  // Optional. Users that can perform operations as a cluster admin. A managed
   // ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
   // to the users. Up to ten admin users can be provided.
   //
   // For more info on RBAC, see
   // https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
   repeated AttachedClusterUser admin_users = 1
-      [(google.api.field_behavior) = REQUIRED];
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Groups of users that can perform operations as a cluster admin. A
+  // managed ClusterRoleBinding will be created to grant the `cluster-admin`
+  // ClusterRole to the groups. Up to ten admin groups can be provided.
+  //
+  // For more info on RBAC, see
+  // https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+  repeated AttachedClusterGroup admin_groups = 2
+      [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Identities of a user-type subject for Attached clusters.
@@ -177,6 +194,12 @@ message AttachedClusterUser {
   string username = 1 [(google.api.field_behavior) = REQUIRED];
 }
 
+// Identities of a group-type subject for Attached clusters.
+message AttachedClusterGroup {
+  // Required. The name of the group, e.g. `my-group@domain.com`.
+  string group = 1 [(google.api.field_behavior) = REQUIRED];
+}
+
 // OIDC discovery information of the target cluster.
 //
 // Kubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster
@@ -228,3 +251,20 @@ message AttachedClusterError {
   // Human-friendly description of the error.
   string message = 1;
 }
+
+// Details of a proxy config.
+message AttachedProxyConfig {
+  // The Kubernetes Secret resource that contains the HTTP(S) proxy
+  // configuration. The secret must be a JSON encoded proxy configuration
+  // as described in
+  KubernetesSecret kubernetes_secret = 1;
+}
+
+// Information about a Kubernetes Secret
+message KubernetesSecret {
+  // Name of the kubernetes secret.
+  string name = 1;
+
+  // Namespace in which the kubernetes secret is stored.
+  string namespace = 2;
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/attached_service.proto b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/attached_service.proto
index 175be6d4e441..eb15cd093cb5 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/attached_service.proto
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/attached_service.proto
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -21,7 +21,9 @@ import "google/api/client.proto";
 import "google/api/field_behavior.proto";
 import "google/api/resource.proto";
 import "google/cloud/gkemulticloud/v1/attached_resources.proto";
+import "google/cloud/gkemulticloud/v1/common_resources.proto";
 import "google/longrunning/operations.proto";
+import "google/protobuf/empty.proto";
 import "google/protobuf/field_mask.proto";
 
 option csharp_namespace = "Google.Cloud.GkeMultiCloud.V1";
@@ -155,6 +157,16 @@ service AttachedClusters {
     };
     option (google.api.method_signature) = "parent,attached_cluster_id";
   }
+
+  // Generates an access token for a cluster agent.
+  rpc GenerateAttachedClusterAgentToken(
+      GenerateAttachedClusterAgentTokenRequest)
+      returns (GenerateAttachedClusterAgentTokenResponse) {
+    option (google.api.http) = {
+      post: "/v1/{attached_cluster=projects/*/locations/*/attachedClusters/*}:generateAttachedClusterAgentToken"
+      body: "*"
+    };
+  }
 }
 
 // Request message for `AttachedClusters.GenerateAttachedClusterInstallManifest`
@@ -198,6 +210,9 @@ message GenerateAttachedClusterInstallManifestRequest {
   // calling
   // [GetAttachedServerConfig][google.cloud.gkemulticloud.v1.AttachedClusters.GetAttachedServerConfig].
   string platform_version = 3 [(google.api.field_behavior) = REQUIRED];
+
+  // Optional. Proxy configuration for outbound HTTP(S) traffic.
+  AttachedProxyConfig proxy_config = 4 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Response message for
@@ -278,6 +293,9 @@ message ImportAttachedClusterRequest {
   //
   // Supported values: ["eks", "aks"].
   string distribution = 5 [(google.api.field_behavior) = REQUIRED];
+
+  // Optional. Proxy configuration for outbound HTTP(S) traffic.
+  AttachedProxyConfig proxy_config = 6 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Request message for `AttachedClusters.UpdateAttachedCluster` method.
@@ -295,12 +313,16 @@ message UpdateAttachedClusterRequest {
   // fields from
   // [AttachedCluster][google.cloud.gkemulticloud.v1.AttachedCluster]:
   //
-  //  *   `description`.
   //  *   `annotations`.
-  //  *   `platform_version`.
+  //  *   `authorization.admin_groups`.
   //  *   `authorization.admin_users`.
+  //  *   `binary_authorization.evaluation_mode`.
+  //  *   `description`.
   //  *   `logging_config.component_config.enable_components`.
   //  *   `monitoring_config.managed_prometheus_config.enabled`.
+  //  *   `platform_version`.
+  //  *   `proxy_config.kubernetes_secret.name`.
+  //  *   `proxy_config.kubernetes_secret.namespace`.
   google.protobuf.FieldMask update_mask = 3
       [(google.api.field_behavior) = REQUIRED];
 }
@@ -430,3 +452,45 @@ message GetAttachedServerConfigRequest {
     }
   ];
 }
+
+message GenerateAttachedClusterAgentTokenRequest {
+  // Required.
+  string attached_cluster = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "gkemulticloud.googleapis.com/AttachedCluster"
+    }
+  ];
+
+  // Required.
+  string subject_token = 2 [(google.api.field_behavior) = REQUIRED];
+
+  // Required.
+  string subject_token_type = 3 [(google.api.field_behavior) = REQUIRED];
+
+  // Required.
+  string version = 4 [(google.api.field_behavior) = REQUIRED];
+
+  // Optional.
+  string grant_type = 6 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string audience = 7 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string scope = 8 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string requested_token_type = 9 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string options = 10 [(google.api.field_behavior) = OPTIONAL];
+}
+
+message GenerateAttachedClusterAgentTokenResponse {
+  string access_token = 1;
+
+  int32 expires_in = 2;
+
+  string token_type = 3;
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/aws_resources.proto b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/aws_resources.proto
index 8989cd8643df..a40b66054f56 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/aws_resources.proto
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/aws_resources.proto
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -20,6 +20,7 @@ import "google/api/field_behavior.proto";
 import "google/api/resource.proto";
 import "google/cloud/gkemulticloud/v1/common_resources.proto";
 import "google/protobuf/timestamp.proto";
+import "google/type/date.proto";
 
 option csharp_namespace = "Google.Cloud.GkeMultiCloud.V1";
 option go_package = "cloud.google.com/go/gkemulticloud/apiv1/gkemulticloudpb;gkemulticloudpb";
@@ -153,6 +154,10 @@ message AwsCluster {
   // Optional. Monitoring configuration for this cluster.
   MonitoringConfig monitoring_config = 21
       [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Binary Authorization configuration for this cluster.
+  BinaryAuthorization binary_authorization = 22
+      [(google.api.field_behavior) = OPTIONAL];
 }
 
 // ControlPlane defines common parameters between control plane nodes.
@@ -252,14 +257,23 @@ message AwsServicesAuthentication {
 
 // Configuration related to the cluster RBAC settings.
 message AwsAuthorization {
-  // Required. Users that can perform operations as a cluster admin. A managed
+  // Optional. Users that can perform operations as a cluster admin. A managed
   // ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
   // to the users. Up to ten admin users can be provided.
   //
   // For more info on RBAC, see
   // https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
   repeated AwsClusterUser admin_users = 1
-      [(google.api.field_behavior) = REQUIRED];
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Groups of users that can perform operations as a cluster admin. A
+  // managed ClusterRoleBinding will be created to grant the `cluster-admin`
+  // ClusterRole to the groups. Up to ten admin groups can be provided.
+  //
+  // For more info on RBAC, see
+  // https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+  repeated AwsClusterGroup admin_groups = 2
+      [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Identities of a user-type subject for AWS clusters.
@@ -268,6 +282,12 @@ message AwsClusterUser {
   string username = 1 [(google.api.field_behavior) = REQUIRED];
 }
 
+// Identities of a group-type subject for AWS clusters.
+message AwsClusterGroup {
+  // Required. The name of the group, e.g. `my-group@domain.com`.
+  string group = 1 [(google.api.field_behavior) = REQUIRED];
+}
+
 // Configuration related to application-layer secrets encryption.
 message AwsDatabaseEncryption {
   // Required. The ARN of the AWS KMS key used to encrypt cluster secrets.
@@ -306,6 +326,12 @@ message AwsVolumeTemplate {
   // GP3 volume.
   int32 iops = 3 [(google.api.field_behavior) = OPTIONAL];
 
+  // Optional. The throughput that the volume supports, in MiB/s. Only valid if
+  // volume_type is GP3.
+  //
+  // If the volume_type is GP3 and this is not speficied, it defaults to 125.
+  int32 throughput = 5 [(google.api.field_behavior) = OPTIONAL];
+
   // Optional. The Amazon Resource Name (ARN) of the Customer Managed Key (CMK)
   // used to encrypt AWS EBS volumes.
   //
@@ -336,6 +362,14 @@ message AwsClusterNetworking {
   // changed after creation.
   repeated string service_address_cidr_blocks = 3
       [(google.api.field_behavior) = REQUIRED];
+
+  // Optional. Disable the per node pool subnet security group rules on the
+  // control plane security group. When set to true, you must also provide one
+  // or more security groups that ensure node pools are able to send requests to
+  // the control plane on TCP/443 and TCP/8132. Failure to do so may result in
+  // unavailable node pools.
+  bool per_node_pool_sg_rules_disabled = 5
+      [(google.api.field_behavior) = OPTIONAL];
 }
 
 // An Anthos node pool running on AWS.
@@ -443,13 +477,70 @@ message AwsNodePool {
   // Output only. A set of errors found in the node pool.
   repeated AwsNodePoolError errors = 29
       [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Optional. The Management configuration for this node pool.
+  AwsNodeManagement management = 30 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Update settings control the speed and disruption of the update.
+  UpdateSettings update_settings = 32 [(google.api.field_behavior) = OPTIONAL];
+}
+
+// UpdateSettings control the level of parallelism and the level of
+// disruption caused during the update of a node pool.
+//
+// These settings are applicable when the node pool update requires replacing
+// the existing node pool nodes with the updated ones.
+//
+// UpdateSettings are optional. When UpdateSettings are not specified during the
+// node pool creation, a default is chosen based on the parent cluster's
+// version. For clusters with minor version 1.27 and later, a default
+// surge_settings configuration with max_surge = 1 and max_unavailable = 0 is
+// used. For clusters with older versions, node pool updates use the traditional
+// rolling update mechanism of updating one node at a time in a
+// "terminate before create" fashion and update_settings is not applicable.
+//
+// Set the surge_settings parameter to use the Surge Update mechanism for
+// the rolling update of node pool nodes.
+// 1. max_surge controls the number of additional nodes that can be created
+// beyond the current size of the node pool temporarily for the time of the
+// update to increase the number of available nodes.
+// 2. max_unavailable controls the number of nodes that can be simultaneously
+// unavailable during the update.
+// 3. (max_surge + max_unavailable) determines the level of parallelism (i.e.,
+// the number of nodes being updated at the same time).
+message UpdateSettings {
+  // Optional. Settings for surge update.
+  SurgeSettings surge_settings = 1 [(google.api.field_behavior) = OPTIONAL];
+}
+
+// SurgeSettings contains the parameters for Surge update.
+message SurgeSettings {
+  // Optional. The maximum number of nodes that can be created beyond the
+  // current size of the node pool during the update process.
+  int32 max_surge = 1 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The maximum number of nodes that can be simultaneously
+  // unavailable during the update process. A node is considered unavailable if
+  // its status is not Ready.
+  int32 max_unavailable = 2 [(google.api.field_behavior) = OPTIONAL];
+}
+
+// AwsNodeManagement defines the set of node management features turned on for
+// an AWS node pool.
+message AwsNodeManagement {
+  // Optional. Whether or not the nodes will be automatically repaired. When set
+  // to true, the nodes in this node pool will be monitored and if they fail
+  // health checks consistently over a period of time, an automatic repair
+  // action will be triggered to replace them with new nodes.
+  bool auto_repair = 1 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Parameters that describe the nodes in a cluster.
 message AwsNodeConfig {
-  // Optional. The AWS instance type.
+  // Optional. The EC2 instance type when creating on-Demand instances.
   //
-  // When unspecified, it uses a default based on the node pool's version.
+  // If unspecified during node pool creation, a default will be chosen based on
+  // the node pool version, and assigned to this field.
   string instance_type = 1 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. Template for the root volume provisioned for node pool nodes.
@@ -478,8 +569,7 @@ message AwsNodeConfig {
   string iam_instance_profile = 6 [(google.api.field_behavior) = REQUIRED];
 
   // Optional. The OS image type to use on node pool instances.
-  // Can have a value of `ubuntu`, or `windows` if the cluster enables
-  // the Windows node pool preview feature.
+  // Can be unspecified, or have a value of `ubuntu`.
   //
   // When unspecified, it defaults to `ubuntu`.
   string image_type = 11 [(google.api.field_behavior) = OPTIONAL];
@@ -511,6 +601,13 @@ message AwsNodeConfig {
   // When unspecified, metrics collection is disabled.
   AwsAutoscalingGroupMetricsCollection autoscaling_metrics_collection = 15
       [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Configuration for provisioning EC2 Spot instances
+  //
+  // When specified, the node pool will provision Spot instances from the set
+  // of spot_config.instance_types.
+  // This field is mutually exclusive with `instance_type`.
+  SpotConfig spot_config = 16 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // AwsNodePoolAutoscaling contains information required by cluster autoscaler
@@ -525,6 +622,38 @@ message AwsNodePoolAutoscaling {
   int32 max_node_count = 2 [(google.api.field_behavior) = REQUIRED];
 }
 
+// AwsOpenIdConfig is an OIDC discovery document for the cluster.
+// See the OpenID Connect Discovery 1.0 specification for details.
+message AwsOpenIdConfig {
+  // OIDC Issuer.
+  string issuer = 1;
+
+  // JSON Web Key uri.
+  string jwks_uri = 2;
+
+  // Supported response types.
+  repeated string response_types_supported = 3;
+
+  // Supported subject types.
+  repeated string subject_types_supported = 4;
+
+  // supported ID Token signing Algorithms.
+  repeated string id_token_signing_alg_values_supported = 5;
+
+  // Supported claims.
+  repeated string claims_supported = 6;
+
+  // Supported grant types.
+  repeated string grant_types = 7;
+}
+
+// AwsJsonWebKeys is a valid JSON Web Key Set as specififed in RFC 7517.
+message AwsJsonWebKeys {
+  // The public component of the keys used by the cluster to sign token
+  // requests.
+  repeated Jwk keys = 1;
+}
+
 // AwsServerConfig is the configuration of GKE cluster on AWS.
 message AwsServerConfig {
   option (google.api.resource) = {
@@ -535,7 +664,10 @@ message AwsServerConfig {
   // The resource name of the config.
   string name = 1;
 
-  // List of valid Kubernetes versions.
+  // List of all released Kubernetes versions, including ones which are end of
+  // life and can no longer be used.  Filter by the `enabled`
+  // property to limit to currently available versions.
+  // Valid versions supported for both create and update operations
   repeated AwsK8sVersionInfo valid_versions = 2;
 
   // The list of supported AWS regions.
@@ -546,6 +678,27 @@ message AwsServerConfig {
 message AwsK8sVersionInfo {
   // Kubernetes version name.
   string version = 1;
+
+  // Optional. True if the version is available for cluster creation. If a
+  // version is enabled for creation, it can be used to create new clusters.
+  // Otherwise, cluster creation will fail. However, cluster upgrade operations
+  // may succeed, even if the version is not enabled.
+  bool enabled = 3 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. True if this cluster version belongs to a minor version that has
+  // reached its end of life and is no longer in scope to receive security and
+  // bug fixes.
+  bool end_of_life = 4 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The estimated date (in Pacific Time) when this cluster version
+  // will reach its end of life. Or if this version is no longer supported (the
+  // `end_of_life` field is true), this is the actual date (in Pacific time)
+  // when the version reached its end of life.
+  google.type.Date end_of_life_date = 5
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The date (in Pacific Time) when the cluster version was released.
+  google.type.Date release_date = 6 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // SSH configuration for AWS resources.
@@ -614,6 +767,12 @@ message AwsAutoscalingGroupMetricsCollection {
   repeated string metrics = 2 [(google.api.field_behavior) = OPTIONAL];
 }
 
+// SpotConfig has configuration info for Spot node.
+message SpotConfig {
+  // Required. A list of instance types for creating spot node pool.
+  repeated string instance_types = 1 [(google.api.field_behavior) = REQUIRED];
+}
+
 // AwsClusterError describes errors found on AWS clusters.
 message AwsClusterError {
   // Human-friendly description of the error.
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/aws_service.proto b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/aws_service.proto
index 874f4df58e15..ce713cf6567c 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/aws_service.proto
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/aws_service.proto
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -21,7 +21,9 @@ import "google/api/client.proto";
 import "google/api/field_behavior.proto";
 import "google/api/resource.proto";
 import "google/cloud/gkemulticloud/v1/aws_resources.proto";
+import "google/cloud/gkemulticloud/v1/common_resources.proto";
 import "google/longrunning/operations.proto";
+import "google/protobuf/empty.proto";
 import "google/protobuf/field_mask.proto";
 import "google/protobuf/timestamp.proto";
 
@@ -113,6 +115,15 @@ service AwsClusters {
     };
   }
 
+  // Generates an access token for a cluster agent.
+  rpc GenerateAwsClusterAgentToken(GenerateAwsClusterAgentTokenRequest)
+      returns (GenerateAwsClusterAgentTokenResponse) {
+    option (google.api.http) = {
+      post: "/v1/{aws_cluster=projects/*/locations/*/awsClusters/*}:generateAwsClusterAgentToken"
+      body: "*"
+    };
+  }
+
   // Generates a short-lived access token to authenticate to a given
   // [AwsCluster][google.cloud.gkemulticloud.v1.AwsCluster] resource.
   rpc GenerateAwsAccessToken(GenerateAwsAccessTokenRequest)
@@ -156,6 +167,25 @@ service AwsClusters {
     };
   }
 
+  // Rolls back a previously aborted or failed
+  // [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] update request.
+  // Makes no changes if the last update request successfully finished.
+  // If an update request is in progress, you cannot rollback the update.
+  // You must first cancel or let it finish unsuccessfully before you can
+  // rollback.
+  rpc RollbackAwsNodePoolUpdate(RollbackAwsNodePoolUpdateRequest)
+      returns (google.longrunning.Operation) {
+    option (google.api.http) = {
+      post: "/v1/{name=projects/*/locations/*/awsClusters/*/awsNodePools/*}:rollback"
+      body: "*"
+    };
+    option (google.api.method_signature) = "name";
+    option (google.longrunning.operation_info) = {
+      response_type: "AwsNodePool"
+      metadata_type: "OperationMetadata"
+    };
+  }
+
   // Describes a specific
   // [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource.
   rpc GetAwsNodePool(GetAwsNodePoolRequest) returns (AwsNodePool) {
@@ -194,6 +224,25 @@ service AwsClusters {
     };
   }
 
+  // Gets the OIDC discovery document for the cluster.
+  // See the
+  // [OpenID Connect Discovery 1.0
+  // specification](https://openid.net/specs/openid-connect-discovery-1_0.html)
+  // for details.
+  rpc GetAwsOpenIdConfig(GetAwsOpenIdConfigRequest) returns (AwsOpenIdConfig) {
+    option (google.api.http) = {
+      get: "/v1/{aws_cluster=projects/*/locations/*/awsClusters/*}/.well-known/openid-configuration"
+    };
+  }
+
+  // Gets the public component of the cluster signing keys in
+  // JSON Web Key format.
+  rpc GetAwsJsonWebKeys(GetAwsJsonWebKeysRequest) returns (AwsJsonWebKeys) {
+    option (google.api.http) = {
+      get: "/v1/{aws_cluster=projects/*/locations/*/awsClusters/*}/jwks"
+    };
+  }
+
   // Returns information, such as supported AWS regions and Kubernetes
   // versions, on a given Google Cloud location.
   rpc GetAwsServerConfig(GetAwsServerConfigRequest) returns (AwsServerConfig) {
@@ -257,6 +306,8 @@ message UpdateAwsClusterRequest {
   //  *   `annotations`.
   //  *   `control_plane.version`.
   //  *   `authorization.admin_users`.
+  //  *   `authorization.admin_groups`.
+  //  *   `binary_authorization.evaluation_mode`.
   //  *   `control_plane.aws_services_authentication.role_arn`.
   //  *   `control_plane.aws_services_authentication.role_session_name`.
   //  *   `control_plane.config_encryption.kms_key_arn`.
@@ -268,6 +319,7 @@ message UpdateAwsClusterRequest {
   //  *   `control_plane.root_volume.size_gib`.
   //  *   `control_plane.root_volume.volume_type`.
   //  *   `control_plane.root_volume.iops`.
+  //  *   `control_plane.root_volume.throughput`.
   //  *   `control_plane.root_volume.kms_key_arn`.
   //  *   `control_plane.ssh_config`.
   //  *   `control_plane.ssh_config.ec2_key_pair`.
@@ -276,6 +328,7 @@ message UpdateAwsClusterRequest {
   //  *   `logging_config.component_config.enable_components`.
   //  *   `control_plane.tags`.
   //  *   `monitoring_config.managed_prometheus_config.enabled`.
+  //  *   `networking.per_node_pool_sg_rules_disabled`.
   google.protobuf.FieldMask update_mask = 4
       [(google.api.field_behavior) = REQUIRED];
 }
@@ -369,6 +422,12 @@ message DeleteAwsClusterRequest {
   // Useful for idempotent deletion.
   bool allow_missing = 3;
 
+  // Optional. If set to true, the deletion of
+  // [AwsCluster][google.cloud.gkemulticloud.v1.AwsCluster] resource will
+  // succeed even if errors occur during deleting in cluster resources. Using
+  // this parameter may result in orphaned resources in the cluster.
+  bool ignore_errors = 5 [(google.api.field_behavior) = OPTIONAL];
+
   // The current etag of the
   // [AwsCluster][google.cloud.gkemulticloud.v1.AwsCluster].
   //
@@ -436,6 +495,7 @@ message UpdateAwsNodePoolRequest {
   //  *   `config.config_encryption.kms_key_arn`.
   //  *   `config.security_group_ids`.
   //  *   `config.root_volume.iops`.
+  //  *   `config.root_volume.throughput`.
   //  *   `config.root_volume.kms_key_arn`.
   //  *   `config.root_volume.volume_type`.
   //  *   `config.root_volume.size_gib`.
@@ -451,10 +511,40 @@ message UpdateAwsNodePoolRequest {
   //  *   `config.autoscaling_metrics_collection`.
   //  *   `config.autoscaling_metrics_collection.granularity`.
   //  *   `config.autoscaling_metrics_collection.metrics`.
+  //  *   `config.instance_type`.
+  //  *   `management.auto_repair`.
+  //  *   `management`.
+  //  *   `update_settings`.
+  //  *   `update_settings.surge_settings`.
+  //  *   `update_settings.surge_settings.max_surge`.
+  //  *   `update_settings.surge_settings.max_unavailable`.
   google.protobuf.FieldMask update_mask = 3
       [(google.api.field_behavior) = REQUIRED];
 }
 
+// Request message for `AwsClusters.RollbackAwsNodePoolUpdate` method.
+message RollbackAwsNodePoolUpdateRequest {
+  // Required. The name of the
+  // [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource to
+  // rollback.
+  //
+  // `AwsNodePool` names are formatted as
+  // `projects/<project-id>/locations/<region>/awsClusters/<cluster-id>/awsNodePools/<node-pool-id>`.
+  //
+  // See [Resource Names](https://cloud.google.com/apis/design/resource_names)
+  // for more details on Google Cloud resource names.
+  string name = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "gkemulticloud.googleapis.com/AwsNodePool"
+    }
+  ];
+
+  // Optional. Option for rollback to ignore the PodDisruptionBudget when
+  // draining the node pool nodes. Default value is false.
+  bool respect_pdb = 2 [(google.api.field_behavior) = OPTIONAL];
+}
+
 // Request message for `AwsClusters.GetAwsNodePool` method.
 message GetAwsNodePoolRequest {
   // Required. The name of the
@@ -546,6 +636,12 @@ message DeleteAwsNodePoolRequest {
   // Useful for idempotent deletion.
   bool allow_missing = 3;
 
+  // Optional. If set to true, the deletion of
+  // [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool] resource will
+  // succeed even if errors occur during deleting in node pool resources. Using
+  // this parameter may result in orphaned resources in the node pool.
+  bool ignore_errors = 5 [(google.api.field_behavior) = OPTIONAL];
+
   // The current ETag of the
   // [AwsNodePool][google.cloud.gkemulticloud.v1.AwsNodePool].
   //
@@ -556,6 +652,36 @@ message DeleteAwsNodePoolRequest {
   string etag = 4;
 }
 
+// GetAwsOpenIdConfigRequest gets the OIDC discovery document for the
+// cluster. See the OpenID Connect Discovery 1.0 specification for details.
+message GetAwsOpenIdConfigRequest {
+  // Required. The AwsCluster, which owns the OIDC discovery document.
+  // Format:
+  // projects/{project}/locations/{location}/awsClusters/{cluster}
+  string aws_cluster = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "gkemulticloud.googleapis.com/AwsCluster"
+    }
+  ];
+}
+
+// GetAwsJsonWebKeysRequest gets the public component of the keys used by the
+// cluster to sign token requests. This will be the jwks_uri for the discover
+// document returned by getOpenIDConfig. See the OpenID Connect
+// Discovery 1.0 specification for details.
+message GetAwsJsonWebKeysRequest {
+  // Required. The AwsCluster, which owns the JsonWebKeys.
+  // Format:
+  // projects/{project}/locations/{location}/awsClusters/{cluster}
+  string aws_cluster = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "gkemulticloud.googleapis.com/AwsCluster"
+    }
+  ];
+}
+
 // GetAwsServerConfigRequest gets the server config of GKE cluster on AWS.
 message GetAwsServerConfigRequest {
   // Required. The name of the
@@ -603,3 +729,48 @@ message GenerateAwsAccessTokenResponse {
   google.protobuf.Timestamp expiration_time = 2
       [(google.api.field_behavior) = OUTPUT_ONLY];
 }
+
+message GenerateAwsClusterAgentTokenRequest {
+  // Required.
+  string aws_cluster = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "gkemulticloud.googleapis.com/AwsCluster"
+    }
+  ];
+
+  // Required.
+  string subject_token = 2 [(google.api.field_behavior) = REQUIRED];
+
+  // Required.
+  string subject_token_type = 3 [(google.api.field_behavior) = REQUIRED];
+
+  // Required.
+  string version = 4 [(google.api.field_behavior) = REQUIRED];
+
+  // Optional.
+  string node_pool_id = 5 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string grant_type = 6 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string audience = 7 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string scope = 8 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string requested_token_type = 9 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string options = 10 [(google.api.field_behavior) = OPTIONAL];
+}
+
+message GenerateAwsClusterAgentTokenResponse {
+  string access_token = 1;
+
+  int32 expires_in = 2;
+
+  string token_type = 3;
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/azure_resources.proto b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/azure_resources.proto
index d7b6fc19e2d6..ba6a45da790e 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/azure_resources.proto
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/azure_resources.proto
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -20,6 +20,7 @@ import "google/api/field_behavior.proto";
 import "google/api/resource.proto";
 import "google/cloud/gkemulticloud/v1/common_resources.proto";
 import "google/protobuf/timestamp.proto";
+import "google/type/date.proto";
 
 option csharp_namespace = "Google.Cloud.GkeMultiCloud.V1";
 option go_package = "cloud.google.com/go/gkemulticloud/apiv1/gkemulticloudpb;gkemulticloudpb";
@@ -95,6 +96,8 @@ message AzureCluster {
   // authentication configuration for how the Anthos Multi-Cloud API connects to
   // Azure APIs.
   //
+  // Either azure_client or azure_services_authentication should be provided.
+  //
   // The `AzureClient` resource must reside on the same Google Cloud Platform
   // project and region as the `AzureCluster`.
   //
@@ -116,6 +119,8 @@ message AzureCluster {
   AzureAuthorization authorization = 6 [(google.api.field_behavior) = REQUIRED];
 
   // Optional. Authentication configuration for management of Azure resources.
+  //
+  // Either azure_client or azure_services_authentication should be provided.
   AzureServicesAuthentication azure_services_authentication = 22
       [(google.api.field_behavior) = OPTIONAL];
 
@@ -445,14 +450,23 @@ message AzureClient {
 
 // Configuration related to the cluster RBAC settings.
 message AzureAuthorization {
-  // Required. Users that can perform operations as a cluster admin. A managed
+  // Optional. Users that can perform operations as a cluster admin. A managed
   // ClusterRoleBinding will be created to grant the `cluster-admin` ClusterRole
   // to the users. Up to ten admin users can be provided.
   //
   // For more info on RBAC, see
   // https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
   repeated AzureClusterUser admin_users = 1
-      [(google.api.field_behavior) = REQUIRED];
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Groups of users that can perform operations as a cluster admin. A
+  // managed ClusterRoleBinding will be created to grant the `cluster-admin`
+  // ClusterRole to the groups. Up to ten admin groups can be provided.
+  //
+  // For more info on RBAC, see
+  // https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
+  repeated AzureClusterGroup admin_groups = 2
+      [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Authentication configuration for the management of Azure resources.
@@ -470,6 +484,12 @@ message AzureClusterUser {
   string username = 1 [(google.api.field_behavior) = REQUIRED];
 }
 
+// Identities of a group-type subject for Azure clusters.
+message AzureClusterGroup {
+  // Required. The name of the group, e.g. `my-group@domain.com`.
+  string group = 1 [(google.api.field_behavior) = REQUIRED];
+}
+
 // An Anthos node pool running on Azure.
 message AzureNodePool {
   option (google.api.resource) = {
@@ -577,6 +597,19 @@ message AzureNodePool {
   // Output only. A set of errors found in the node pool.
   repeated AzureNodePoolError errors = 29
       [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Optional. The Management configuration for this node pool.
+  AzureNodeManagement management = 30 [(google.api.field_behavior) = OPTIONAL];
+}
+
+// AzureNodeManagement defines the set of node management features turned on for
+// an Azure node pool.
+message AzureNodeManagement {
+  // Optional. Whether or not the nodes will be automatically repaired. When set
+  // to true, the nodes in this node pool will be monitored and if they fail
+  // health checks consistently over a period of time, an automatic repair
+  // action will be triggered to replace them with new nodes.
+  bool auto_repair = 1 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Parameters that describe the configuration of all node machines
@@ -605,8 +638,7 @@ message AzureNodeConfig {
   map<string, string> tags = 3 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. The OS image type to use on node pool instances.
-  // Can have a value of `ubuntu`, or `windows` if the cluster enables
-  // the Windows node pool preview feature.
+  // Can be unspecified, or have a value of `ubuntu`.
   //
   // When unspecified, it defaults to `ubuntu`.
   string image_type = 8 [(google.api.field_behavior) = OPTIONAL];
@@ -644,6 +676,38 @@ message AzureNodePoolAutoscaling {
   int32 max_node_count = 2 [(google.api.field_behavior) = REQUIRED];
 }
 
+// AzureOpenIdConfig is an OIDC discovery document for the cluster.
+// See the OpenID Connect Discovery 1.0 specification for details.
+message AzureOpenIdConfig {
+  // OIDC Issuer.
+  string issuer = 1;
+
+  // JSON Web Key uri.
+  string jwks_uri = 2;
+
+  // Supported response types.
+  repeated string response_types_supported = 3;
+
+  // Supported subject types.
+  repeated string subject_types_supported = 4;
+
+  // supported ID Token signing Algorithms.
+  repeated string id_token_signing_alg_values_supported = 5;
+
+  // Supported claims.
+  repeated string claims_supported = 6;
+
+  // Supported grant types.
+  repeated string grant_types = 7;
+}
+
+// AzureJsonWebKeys is a valid JSON Web Key Set as specififed in RFC 7517.
+message AzureJsonWebKeys {
+  // The public component of the keys used by the cluster to sign token
+  // requests.
+  repeated Jwk keys = 1;
+}
+
 // AzureServerConfig contains information about a Google Cloud location, such as
 // supported Azure regions and Kubernetes versions.
 message AzureServerConfig {
@@ -661,17 +725,41 @@ message AzureServerConfig {
   // for more details on Google Cloud Platform resource names.
   string name = 1;
 
-  // List of valid Kubernetes versions.
+  // List of all released Kubernetes versions, including ones which are end of
+  // life and can no longer be used.  Filter by the `enabled`
+  // property to limit to currently available versions.
+  // Valid versions supported for both create and update operations
   repeated AzureK8sVersionInfo valid_versions = 2;
 
   // The list of supported Azure regions.
   repeated string supported_azure_regions = 3;
 }
 
-// Information about a supported Kubernetes version.
+// Kubernetes version information of GKE cluster on Azure.
 message AzureK8sVersionInfo {
-  // A supported Kubernetes version (for example, `1.19.10-gke.1000`)
+  // Kubernetes version name (for example, `1.19.10-gke.1000`)
   string version = 1;
+
+  // Optional. True if the version is available for cluster creation. If a
+  // version is enabled for creation, it can be used to create new clusters.
+  // Otherwise, cluster creation will fail. However, cluster upgrade operations
+  // may succeed, even if the version is not enabled.
+  bool enabled = 3 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. True if this cluster version belongs to a minor version that has
+  // reached its end of life and is no longer in scope to receive security and
+  // bug fixes.
+  bool end_of_life = 4 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The estimated date (in Pacific Time) when this cluster version
+  // will reach its end of life. Or if this version is no longer supported (the
+  // `end_of_life` field is true), this is the actual date (in Pacific time)
+  // when the version reached its end of life.
+  google.type.Date end_of_life_date = 5
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The date (in Pacific Time) when the cluster version was released.
+  google.type.Date release_date = 6 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // SSH configuration for Azure resources.
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/azure_service.proto b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/azure_service.proto
index d39e9dd63b55..8e669a05600d 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/azure_service.proto
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/azure_service.proto
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -21,7 +21,9 @@ import "google/api/client.proto";
 import "google/api/field_behavior.proto";
 import "google/api/resource.proto";
 import "google/cloud/gkemulticloud/v1/azure_resources.proto";
+import "google/cloud/gkemulticloud/v1/common_resources.proto";
 import "google/longrunning/operations.proto";
+import "google/protobuf/empty.proto";
 import "google/protobuf/field_mask.proto";
 import "google/protobuf/timestamp.proto";
 
@@ -178,6 +180,15 @@ service AzureClusters {
     };
   }
 
+  // Generates an access token for a cluster agent.
+  rpc GenerateAzureClusterAgentToken(GenerateAzureClusterAgentTokenRequest)
+      returns (GenerateAzureClusterAgentTokenResponse) {
+    option (google.api.http) = {
+      post: "/v1/{azure_cluster=projects/*/locations/*/azureClusters/*}:generateAzureClusterAgentToken"
+      body: "*"
+    };
+  }
+
   // Generates a short-lived access token to authenticate to a given
   // [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster] resource.
   rpc GenerateAzureAccessToken(GenerateAzureAccessTokenRequest)
@@ -260,6 +271,29 @@ service AzureClusters {
     };
   }
 
+  // Gets the OIDC discovery document for the cluster.
+  // See the
+  // [OpenID Connect Discovery 1.0
+  // specification](https://openid.net/specs/openid-connect-discovery-1_0.html)
+  // for details.
+  rpc GetAzureOpenIdConfig(GetAzureOpenIdConfigRequest)
+      returns (AzureOpenIdConfig) {
+    option (google.api.http) = {
+      get: "/v1/{azure_cluster=projects/*/locations/*/azureClusters/*}/.well-known/openid-configuration"
+    };
+    option (google.api.method_signature) = "azure_cluster";
+  }
+
+  // Gets the public component of the cluster signing keys in
+  // JSON Web Key format.
+  rpc GetAzureJsonWebKeys(GetAzureJsonWebKeysRequest)
+      returns (AzureJsonWebKeys) {
+    option (google.api.http) = {
+      get: "/v1/{azure_cluster=projects/*/locations/*/azureClusters/*}/jwks"
+    };
+    option (google.api.method_signature) = "azure_cluster";
+  }
+
   // Returns information, such as supported Azure regions and Kubernetes
   // versions, on a given Google Cloud location.
   rpc GetAzureServerConfig(GetAzureServerConfigRequest)
@@ -326,6 +360,7 @@ message UpdateAzureClusterRequest {
   //  *   `control_plane.vm_size`.
   //  *   `annotations`.
   //  *   `authorization.admin_users`.
+  //  *   `authorization.admin_groups`.
   //  *   `control_plane.root_volume.size_gib`.
   //  *   `azure_services_authentication`.
   //  *   `azure_services_authentication.tenant_id`.
@@ -401,7 +436,7 @@ message ListAzureClustersResponse {
   string next_page_token = 2;
 }
 
-// Request message for `Clusters.DeleteAzureCluster` method.
+// Request message for `AzureClusters.DeleteAzureCluster` method.
 message DeleteAzureClusterRequest {
   // Required. The resource name the
   // [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster] to delete.
@@ -444,7 +479,8 @@ message CreateAzureNodePoolRequest {
   // Required. The [AzureCluster][google.cloud.gkemulticloud.v1.AzureCluster]
   // resource where this node pool will be created.
   //
-  // Location names are formatted as `projects/<project-id>/locations/<region>`.
+  // `AzureCluster` names are formatted as
+  // `projects/<project-id>/locations/<region>/azureClusters/<cluster-id>`.
   //
   // See [Resource Names](https://cloud.google.com/apis/design/resource_names)
   // for more details on Google Cloud resource names.
@@ -493,6 +529,8 @@ message UpdateAzureNodePoolRequest {
   //  *   `autoscaling.min_node_count`.
   //  *   `autoscaling.max_node_count`.
   //  *   `config.ssh_config.authorized_key`.
+  //  *   `management.auto_repair`.
+  //  *   `management`.
   google.protobuf.FieldMask update_mask = 3
       [(google.api.field_behavior) = REQUIRED];
 }
@@ -559,7 +597,7 @@ message ListAzureNodePoolsResponse {
   string next_page_token = 2;
 }
 
-// Delete message for `AzureClusters.DeleteAzureNodePool` method.
+// Request message for `AzureClusters.DeleteAzureNodePool` method.
 message DeleteAzureNodePoolRequest {
   // Required. The resource name the
   // [AzureNodePool][google.cloud.gkemulticloud.v1.AzureNodePool] to delete.
@@ -599,6 +637,36 @@ message DeleteAzureNodePoolRequest {
   string etag = 4;
 }
 
+// GetAzureOpenIdConfigRequest gets the OIDC discovery document for the
+// cluster. See the OpenID Connect Discovery 1.0 specification for details.
+message GetAzureOpenIdConfigRequest {
+  // Required. The AzureCluster, which owns the OIDC discovery document.
+  // Format:
+  // projects/<project-id>/locations/<region>/azureClusters/<cluster-id>
+  string azure_cluster = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "gkemulticloud.googleapis.com/AzureCluster"
+    }
+  ];
+}
+
+// GetAzureJsonWebKeysRequest gets the public component of the keys used by the
+// cluster to sign token requests. This will be the jwks_uri for the discover
+// document returned by getOpenIDConfig. See the OpenID Connect
+// Discovery 1.0 specification for details.
+message GetAzureJsonWebKeysRequest {
+  // Required. The AzureCluster, which owns the JsonWebKeys.
+  // Format:
+  // projects/<project-id>/locations/<region>/azureClusters/<cluster-id>
+  string azure_cluster = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "gkemulticloud.googleapis.com/AzureCluster"
+    }
+  ];
+}
+
 // GetAzureServerConfigRequest gets the server config of GKE cluster on Azure.
 message GetAzureServerConfigRequest {
   // Required. The name of the
@@ -753,7 +821,7 @@ message GenerateAzureAccessTokenRequest {
   // authenticate to.
   //
   // `AzureCluster` names are formatted as
-  // `projects/<project-id>/locations/<region>/AzureClusters/<cluster-id>`.
+  // `projects/<project-id>/locations/<region>/azureClusters/<cluster-id>`.
   //
   // See [Resource Names](https://cloud.google.com/apis/design/resource_names)
   // for more details on Google Cloud resource names.
@@ -774,3 +842,48 @@ message GenerateAzureAccessTokenResponse {
   google.protobuf.Timestamp expiration_time = 2
       [(google.api.field_behavior) = OUTPUT_ONLY];
 }
+
+message GenerateAzureClusterAgentTokenRequest {
+  // Required.
+  string azure_cluster = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "gkemulticloud.googleapis.com/AzureCluster"
+    }
+  ];
+
+  // Required.
+  string subject_token = 2 [(google.api.field_behavior) = REQUIRED];
+
+  // Required.
+  string subject_token_type = 3 [(google.api.field_behavior) = REQUIRED];
+
+  // Required.
+  string version = 4 [(google.api.field_behavior) = REQUIRED];
+
+  // Optional.
+  string node_pool_id = 5 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string grant_type = 6 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string audience = 7 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string scope = 8 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string requested_token_type = 9 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional.
+  string options = 10 [(google.api.field_behavior) = OPTIONAL];
+}
+
+message GenerateAzureClusterAgentTokenResponse {
+  string access_token = 1;
+
+  int32 expires_in = 2;
+
+  string token_type = 3;
+}
diff --git a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/common_resources.proto b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/common_resources.proto
index a39cb813e21a..a9746cabacde 100644
--- a/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/common_resources.proto
+++ b/java-gke-multi-cloud/proto-google-cloud-gke-multi-cloud-v1/src/main/proto/google/cloud/gkemulticloud/v1/common_resources.proto
@@ -1,4 +1,4 @@
-// Copyright 2022 Google LLC
+// Copyright 2023 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -27,6 +27,36 @@ option java_package = "com.google.cloud.gkemulticloud.v1";
 option php_namespace = "Google\\Cloud\\GkeMultiCloud\\V1";
 option ruby_package = "Google::Cloud::GkeMultiCloud::V1";
 
+// Jwk is a JSON Web Key as specified in RFC 7517.
+message Jwk {
+  // Key Type.
+  string kty = 1;
+
+  // Algorithm.
+  string alg = 2;
+
+  // Permitted uses for the public keys.
+  string use = 3;
+
+  // Key ID.
+  string kid = 4;
+
+  // Used for RSA keys.
+  string n = 5;
+
+  // Used for RSA keys.
+  string e = 6;
+
+  // Used for ECDSA keys.
+  string x = 7;
+
+  // Used for ECDSA keys.
+  string y = 8;
+
+  // Used for ECDSA keys.
+  string crv = 9;
+}
+
 // Workload Identity settings.
 message WorkloadIdentityConfig {
   // The OIDC issuer URL for this cluster.
@@ -172,3 +202,23 @@ message ManagedPrometheusConfig {
   // Enable Managed Collection.
   bool enabled = 1;
 }
+
+// Configuration for Binary Authorization.
+message BinaryAuthorization {
+  // Binary Authorization mode of operation.
+  enum EvaluationMode {
+    // Default value
+    EVALUATION_MODE_UNSPECIFIED = 0;
+
+    // Disable BinaryAuthorization
+    DISABLED = 1;
+
+    // Enforce Kubernetes admission requests with BinaryAuthorization using the
+    // project's singleton policy.
+    PROJECT_SINGLETON_POLICY_ENFORCE = 2;
+  }
+
+  // Mode of operation for binauthz policy evaluation. If unspecified, defaults
+  // to DISABLED.
+  EvaluationMode evaluation_mode = 1;
+}
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusteragenttoken/AsyncGenerateAttachedClusterAgentToken.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusteragenttoken/AsyncGenerateAttachedClusterAgentToken.java
new file mode 100644
index 000000000000..853f572d0ceb
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusteragenttoken/AsyncGenerateAttachedClusterAgentToken.java
@@ -0,0 +1,60 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AttachedClusters_GenerateAttachedClusterAgentToken_async]
+import com.google.api.core.ApiFuture;
+import com.google.cloud.gkemulticloud.v1.AttachedClusterName;
+import com.google.cloud.gkemulticloud.v1.AttachedClustersClient;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse;
+
+public class AsyncGenerateAttachedClusterAgentToken {
+
+  public static void main(String[] args) throws Exception {
+    asyncGenerateAttachedClusterAgentToken();
+  }
+
+  public static void asyncGenerateAttachedClusterAgentToken() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AttachedClustersClient attachedClustersClient = AttachedClustersClient.create()) {
+      GenerateAttachedClusterAgentTokenRequest request =
+          GenerateAttachedClusterAgentTokenRequest.newBuilder()
+              .setAttachedCluster(
+                  AttachedClusterName.of("[PROJECT]", "[LOCATION]", "[ATTACHED_CLUSTER]")
+                      .toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      ApiFuture<GenerateAttachedClusterAgentTokenResponse> future =
+          attachedClustersClient.generateAttachedClusterAgentTokenCallable().futureCall(request);
+      // Do something.
+      GenerateAttachedClusterAgentTokenResponse response = future.get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AttachedClusters_GenerateAttachedClusterAgentToken_async]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusteragenttoken/SyncGenerateAttachedClusterAgentToken.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusteragenttoken/SyncGenerateAttachedClusterAgentToken.java
new file mode 100644
index 000000000000..2e7c4dc74cc2
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusteragenttoken/SyncGenerateAttachedClusterAgentToken.java
@@ -0,0 +1,57 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AttachedClusters_GenerateAttachedClusterAgentToken_sync]
+import com.google.cloud.gkemulticloud.v1.AttachedClusterName;
+import com.google.cloud.gkemulticloud.v1.AttachedClustersClient;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterAgentTokenResponse;
+
+public class SyncGenerateAttachedClusterAgentToken {
+
+  public static void main(String[] args) throws Exception {
+    syncGenerateAttachedClusterAgentToken();
+  }
+
+  public static void syncGenerateAttachedClusterAgentToken() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AttachedClustersClient attachedClustersClient = AttachedClustersClient.create()) {
+      GenerateAttachedClusterAgentTokenRequest request =
+          GenerateAttachedClusterAgentTokenRequest.newBuilder()
+              .setAttachedCluster(
+                  AttachedClusterName.of("[PROJECT]", "[LOCATION]", "[ATTACHED_CLUSTER]")
+                      .toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      GenerateAttachedClusterAgentTokenResponse response =
+          attachedClustersClient.generateAttachedClusterAgentToken(request);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AttachedClusters_GenerateAttachedClusterAgentToken_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusterinstallmanifest/AsyncGenerateAttachedClusterInstallManifest.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusterinstallmanifest/AsyncGenerateAttachedClusterInstallManifest.java
index e23a39435003..1934f7b0c13e 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusterinstallmanifest/AsyncGenerateAttachedClusterInstallManifest.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusterinstallmanifest/AsyncGenerateAttachedClusterInstallManifest.java
@@ -19,6 +19,7 @@
 // [START gkemulticloud_v1_generated_AttachedClusters_GenerateAttachedClusterInstallManifest_async]
 import com.google.api.core.ApiFuture;
 import com.google.cloud.gkemulticloud.v1.AttachedClustersClient;
+import com.google.cloud.gkemulticloud.v1.AttachedProxyConfig;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestResponse;
 import com.google.cloud.gkemulticloud.v1.LocationName;
@@ -41,6 +42,7 @@ public static void asyncGenerateAttachedClusterInstallManifest() throws Exceptio
               .setParent(LocationName.of("[PROJECT]", "[LOCATION]").toString())
               .setAttachedClusterId("attachedClusterId865943409")
               .setPlatformVersion("platformVersion1848800485")
+              .setProxyConfig(AttachedProxyConfig.newBuilder().build())
               .build();
       ApiFuture<GenerateAttachedClusterInstallManifestResponse> future =
           attachedClustersClient
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusterinstallmanifest/SyncGenerateAttachedClusterInstallManifest.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusterinstallmanifest/SyncGenerateAttachedClusterInstallManifest.java
index 3f67bee6382b..24e194034f87 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusterinstallmanifest/SyncGenerateAttachedClusterInstallManifest.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/generateattachedclusterinstallmanifest/SyncGenerateAttachedClusterInstallManifest.java
@@ -18,6 +18,7 @@
 
 // [START gkemulticloud_v1_generated_AttachedClusters_GenerateAttachedClusterInstallManifest_sync]
 import com.google.cloud.gkemulticloud.v1.AttachedClustersClient;
+import com.google.cloud.gkemulticloud.v1.AttachedProxyConfig;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestRequest;
 import com.google.cloud.gkemulticloud.v1.GenerateAttachedClusterInstallManifestResponse;
 import com.google.cloud.gkemulticloud.v1.LocationName;
@@ -40,6 +41,7 @@ public static void syncGenerateAttachedClusterInstallManifest() throws Exception
               .setParent(LocationName.of("[PROJECT]", "[LOCATION]").toString())
               .setAttachedClusterId("attachedClusterId865943409")
               .setPlatformVersion("platformVersion1848800485")
+              .setProxyConfig(AttachedProxyConfig.newBuilder().build())
               .build();
       GenerateAttachedClusterInstallManifestResponse response =
           attachedClustersClient.generateAttachedClusterInstallManifest(request);
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/AsyncImportAttachedCluster.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/AsyncImportAttachedCluster.java
index 4ecb033dd9ba..4074b6d9e194 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/AsyncImportAttachedCluster.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/AsyncImportAttachedCluster.java
@@ -19,6 +19,7 @@
 // [START gkemulticloud_v1_generated_AttachedClusters_ImportAttachedCluster_async]
 import com.google.api.core.ApiFuture;
 import com.google.cloud.gkemulticloud.v1.AttachedClustersClient;
+import com.google.cloud.gkemulticloud.v1.AttachedProxyConfig;
 import com.google.cloud.gkemulticloud.v1.ImportAttachedClusterRequest;
 import com.google.cloud.gkemulticloud.v1.LocationName;
 import com.google.longrunning.Operation;
@@ -43,6 +44,7 @@ public static void asyncImportAttachedCluster() throws Exception {
               .setFleetMembership("fleetMembership-665479228")
               .setPlatformVersion("platformVersion1848800485")
               .setDistribution("distribution-1580708220")
+              .setProxyConfig(AttachedProxyConfig.newBuilder().build())
               .build();
       ApiFuture<Operation> future =
           attachedClustersClient.importAttachedClusterCallable().futureCall(request);
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/AsyncImportAttachedClusterLRO.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/AsyncImportAttachedClusterLRO.java
index 0863ccbbd59d..da6fd516ab54 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/AsyncImportAttachedClusterLRO.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/AsyncImportAttachedClusterLRO.java
@@ -20,6 +20,7 @@
 import com.google.api.gax.longrunning.OperationFuture;
 import com.google.cloud.gkemulticloud.v1.AttachedCluster;
 import com.google.cloud.gkemulticloud.v1.AttachedClustersClient;
+import com.google.cloud.gkemulticloud.v1.AttachedProxyConfig;
 import com.google.cloud.gkemulticloud.v1.ImportAttachedClusterRequest;
 import com.google.cloud.gkemulticloud.v1.LocationName;
 import com.google.cloud.gkemulticloud.v1.OperationMetadata;
@@ -44,6 +45,7 @@ public static void asyncImportAttachedClusterLRO() throws Exception {
               .setFleetMembership("fleetMembership-665479228")
               .setPlatformVersion("platformVersion1848800485")
               .setDistribution("distribution-1580708220")
+              .setProxyConfig(AttachedProxyConfig.newBuilder().build())
               .build();
       OperationFuture<AttachedCluster, OperationMetadata> future =
           attachedClustersClient.importAttachedClusterOperationCallable().futureCall(request);
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/SyncImportAttachedCluster.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/SyncImportAttachedCluster.java
index 01f612d52ad0..6cfb2d352547 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/SyncImportAttachedCluster.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/attachedclusters/importattachedcluster/SyncImportAttachedCluster.java
@@ -19,6 +19,7 @@
 // [START gkemulticloud_v1_generated_AttachedClusters_ImportAttachedCluster_sync]
 import com.google.cloud.gkemulticloud.v1.AttachedCluster;
 import com.google.cloud.gkemulticloud.v1.AttachedClustersClient;
+import com.google.cloud.gkemulticloud.v1.AttachedProxyConfig;
 import com.google.cloud.gkemulticloud.v1.ImportAttachedClusterRequest;
 import com.google.cloud.gkemulticloud.v1.LocationName;
 
@@ -42,6 +43,7 @@ public static void syncImportAttachedCluster() throws Exception {
               .setFleetMembership("fleetMembership-665479228")
               .setPlatformVersion("platformVersion1848800485")
               .setDistribution("distribution-1580708220")
+              .setProxyConfig(AttachedProxyConfig.newBuilder().build())
               .build();
       AttachedCluster response = attachedClustersClient.importAttachedClusterAsync(request).get();
     }
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/AsyncDeleteAwsCluster.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/AsyncDeleteAwsCluster.java
index b901b0733705..f03be3515a26 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/AsyncDeleteAwsCluster.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/AsyncDeleteAwsCluster.java
@@ -41,6 +41,7 @@ public static void asyncDeleteAwsCluster() throws Exception {
               .setName(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
               .setValidateOnly(true)
               .setAllowMissing(true)
+              .setIgnoreErrors(true)
               .setEtag("etag3123477")
               .build();
       ApiFuture<Operation> future =
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/AsyncDeleteAwsClusterLRO.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/AsyncDeleteAwsClusterLRO.java
index 0d744172b3ce..e1a3ff7e5498 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/AsyncDeleteAwsClusterLRO.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/AsyncDeleteAwsClusterLRO.java
@@ -42,6 +42,7 @@ public static void asyncDeleteAwsClusterLRO() throws Exception {
               .setName(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
               .setValidateOnly(true)
               .setAllowMissing(true)
+              .setIgnoreErrors(true)
               .setEtag("etag3123477")
               .build();
       OperationFuture<Empty, OperationMetadata> future =
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/SyncDeleteAwsCluster.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/SyncDeleteAwsCluster.java
index 8fb90fe7710b..e6c9c3bbafd4 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/SyncDeleteAwsCluster.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawscluster/SyncDeleteAwsCluster.java
@@ -40,6 +40,7 @@ public static void syncDeleteAwsCluster() throws Exception {
               .setName(AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
               .setValidateOnly(true)
               .setAllowMissing(true)
+              .setIgnoreErrors(true)
               .setEtag("etag3123477")
               .build();
       awsClustersClient.deleteAwsClusterAsync(request).get();
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/AsyncDeleteAwsNodePool.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/AsyncDeleteAwsNodePool.java
index ba6a48b70c30..eac3b256a7fb 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/AsyncDeleteAwsNodePool.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/AsyncDeleteAwsNodePool.java
@@ -43,6 +43,7 @@ public static void asyncDeleteAwsNodePool() throws Exception {
                       .toString())
               .setValidateOnly(true)
               .setAllowMissing(true)
+              .setIgnoreErrors(true)
               .setEtag("etag3123477")
               .build();
       ApiFuture<Operation> future =
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/AsyncDeleteAwsNodePoolLRO.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/AsyncDeleteAwsNodePoolLRO.java
index 981d243825e3..77e4942d1a54 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/AsyncDeleteAwsNodePoolLRO.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/AsyncDeleteAwsNodePoolLRO.java
@@ -44,6 +44,7 @@ public static void asyncDeleteAwsNodePoolLRO() throws Exception {
                       .toString())
               .setValidateOnly(true)
               .setAllowMissing(true)
+              .setIgnoreErrors(true)
               .setEtag("etag3123477")
               .build();
       OperationFuture<Empty, OperationMetadata> future =
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/SyncDeleteAwsNodePool.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/SyncDeleteAwsNodePool.java
index 3ca33d9f366d..d8d871741373 100644
--- a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/SyncDeleteAwsNodePool.java
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/deleteawsnodepool/SyncDeleteAwsNodePool.java
@@ -42,6 +42,7 @@ public static void syncDeleteAwsNodePool() throws Exception {
                       .toString())
               .setValidateOnly(true)
               .setAllowMissing(true)
+              .setIgnoreErrors(true)
               .setEtag("etag3123477")
               .build();
       awsClustersClient.deleteAwsNodePoolAsync(request).get();
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/generateawsclusteragenttoken/AsyncGenerateAwsClusterAgentToken.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/generateawsclusteragenttoken/AsyncGenerateAwsClusterAgentToken.java
new file mode 100644
index 000000000000..bd14a290922a
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/generateawsclusteragenttoken/AsyncGenerateAwsClusterAgentToken.java
@@ -0,0 +1,60 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_GenerateAwsClusterAgentToken_async]
+import com.google.api.core.ApiFuture;
+import com.google.cloud.gkemulticloud.v1.AwsClusterName;
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse;
+
+public class AsyncGenerateAwsClusterAgentToken {
+
+  public static void main(String[] args) throws Exception {
+    asyncGenerateAwsClusterAgentToken();
+  }
+
+  public static void asyncGenerateAwsClusterAgentToken() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      GenerateAwsClusterAgentTokenRequest request =
+          GenerateAwsClusterAgentTokenRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setNodePoolId("nodePoolId1121557241")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      ApiFuture<GenerateAwsClusterAgentTokenResponse> future =
+          awsClustersClient.generateAwsClusterAgentTokenCallable().futureCall(request);
+      // Do something.
+      GenerateAwsClusterAgentTokenResponse response = future.get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_GenerateAwsClusterAgentToken_async]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/generateawsclusteragenttoken/SyncGenerateAwsClusterAgentToken.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/generateawsclusteragenttoken/SyncGenerateAwsClusterAgentToken.java
new file mode 100644
index 000000000000..aac400d766bd
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/generateawsclusteragenttoken/SyncGenerateAwsClusterAgentToken.java
@@ -0,0 +1,57 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_GenerateAwsClusterAgentToken_sync]
+import com.google.cloud.gkemulticloud.v1.AwsClusterName;
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAwsClusterAgentTokenResponse;
+
+public class SyncGenerateAwsClusterAgentToken {
+
+  public static void main(String[] args) throws Exception {
+    syncGenerateAwsClusterAgentToken();
+  }
+
+  public static void syncGenerateAwsClusterAgentToken() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      GenerateAwsClusterAgentTokenRequest request =
+          GenerateAwsClusterAgentTokenRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setNodePoolId("nodePoolId1121557241")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      GenerateAwsClusterAgentTokenResponse response =
+          awsClustersClient.generateAwsClusterAgentToken(request);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_GenerateAwsClusterAgentToken_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsjsonwebkeys/AsyncGetAwsJsonWebKeys.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsjsonwebkeys/AsyncGetAwsJsonWebKeys.java
new file mode 100644
index 000000000000..866b93d921a2
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsjsonwebkeys/AsyncGetAwsJsonWebKeys.java
@@ -0,0 +1,51 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_GetAwsJsonWebKeys_async]
+import com.google.api.core.ApiFuture;
+import com.google.cloud.gkemulticloud.v1.AwsClusterName;
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys;
+import com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest;
+
+public class AsyncGetAwsJsonWebKeys {
+
+  public static void main(String[] args) throws Exception {
+    asyncGetAwsJsonWebKeys();
+  }
+
+  public static void asyncGetAwsJsonWebKeys() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      GetAwsJsonWebKeysRequest request =
+          GetAwsJsonWebKeysRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .build();
+      ApiFuture<AwsJsonWebKeys> future =
+          awsClustersClient.getAwsJsonWebKeysCallable().futureCall(request);
+      // Do something.
+      AwsJsonWebKeys response = future.get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_GetAwsJsonWebKeys_async]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsjsonwebkeys/SyncGetAwsJsonWebKeys.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsjsonwebkeys/SyncGetAwsJsonWebKeys.java
new file mode 100644
index 000000000000..79f4e0455ecc
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsjsonwebkeys/SyncGetAwsJsonWebKeys.java
@@ -0,0 +1,47 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_GetAwsJsonWebKeys_sync]
+import com.google.cloud.gkemulticloud.v1.AwsClusterName;
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.AwsJsonWebKeys;
+import com.google.cloud.gkemulticloud.v1.GetAwsJsonWebKeysRequest;
+
+public class SyncGetAwsJsonWebKeys {
+
+  public static void main(String[] args) throws Exception {
+    syncGetAwsJsonWebKeys();
+  }
+
+  public static void syncGetAwsJsonWebKeys() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      GetAwsJsonWebKeysRequest request =
+          GetAwsJsonWebKeysRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .build();
+      AwsJsonWebKeys response = awsClustersClient.getAwsJsonWebKeys(request);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_GetAwsJsonWebKeys_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsopenidconfig/AsyncGetAwsOpenIdConfig.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsopenidconfig/AsyncGetAwsOpenIdConfig.java
new file mode 100644
index 000000000000..5e9d35027242
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsopenidconfig/AsyncGetAwsOpenIdConfig.java
@@ -0,0 +1,51 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_GetAwsOpenIdConfig_async]
+import com.google.api.core.ApiFuture;
+import com.google.cloud.gkemulticloud.v1.AwsClusterName;
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig;
+import com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest;
+
+public class AsyncGetAwsOpenIdConfig {
+
+  public static void main(String[] args) throws Exception {
+    asyncGetAwsOpenIdConfig();
+  }
+
+  public static void asyncGetAwsOpenIdConfig() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      GetAwsOpenIdConfigRequest request =
+          GetAwsOpenIdConfigRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .build();
+      ApiFuture<AwsOpenIdConfig> future =
+          awsClustersClient.getAwsOpenIdConfigCallable().futureCall(request);
+      // Do something.
+      AwsOpenIdConfig response = future.get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_GetAwsOpenIdConfig_async]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsopenidconfig/SyncGetAwsOpenIdConfig.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsopenidconfig/SyncGetAwsOpenIdConfig.java
new file mode 100644
index 000000000000..d9dc1baacfa7
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/getawsopenidconfig/SyncGetAwsOpenIdConfig.java
@@ -0,0 +1,47 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_GetAwsOpenIdConfig_sync]
+import com.google.cloud.gkemulticloud.v1.AwsClusterName;
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.AwsOpenIdConfig;
+import com.google.cloud.gkemulticloud.v1.GetAwsOpenIdConfigRequest;
+
+public class SyncGetAwsOpenIdConfig {
+
+  public static void main(String[] args) throws Exception {
+    syncGetAwsOpenIdConfig();
+  }
+
+  public static void syncGetAwsOpenIdConfig() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      GetAwsOpenIdConfigRequest request =
+          GetAwsOpenIdConfigRequest.newBuilder()
+              .setAwsCluster(
+                  AwsClusterName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]").toString())
+              .build();
+      AwsOpenIdConfig response = awsClustersClient.getAwsOpenIdConfig(request);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_GetAwsOpenIdConfig_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/AsyncRollbackAwsNodePoolUpdate.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/AsyncRollbackAwsNodePoolUpdate.java
new file mode 100644
index 000000000000..e249715eaa60
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/AsyncRollbackAwsNodePoolUpdate.java
@@ -0,0 +1,53 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_RollbackAwsNodePoolUpdate_async]
+import com.google.api.core.ApiFuture;
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.AwsNodePoolName;
+import com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest;
+import com.google.longrunning.Operation;
+
+public class AsyncRollbackAwsNodePoolUpdate {
+
+  public static void main(String[] args) throws Exception {
+    asyncRollbackAwsNodePoolUpdate();
+  }
+
+  public static void asyncRollbackAwsNodePoolUpdate() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      RollbackAwsNodePoolUpdateRequest request =
+          RollbackAwsNodePoolUpdateRequest.newBuilder()
+              .setName(
+                  AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+                      .toString())
+              .setRespectPdb(true)
+              .build();
+      ApiFuture<Operation> future =
+          awsClustersClient.rollbackAwsNodePoolUpdateCallable().futureCall(request);
+      // Do something.
+      Operation response = future.get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_RollbackAwsNodePoolUpdate_async]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/AsyncRollbackAwsNodePoolUpdateLRO.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/AsyncRollbackAwsNodePoolUpdateLRO.java
new file mode 100644
index 000000000000..2120bb65902b
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/AsyncRollbackAwsNodePoolUpdateLRO.java
@@ -0,0 +1,54 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_RollbackAwsNodePoolUpdate_LRO_async]
+import com.google.api.gax.longrunning.OperationFuture;
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.AwsNodePool;
+import com.google.cloud.gkemulticloud.v1.AwsNodePoolName;
+import com.google.cloud.gkemulticloud.v1.OperationMetadata;
+import com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest;
+
+public class AsyncRollbackAwsNodePoolUpdateLRO {
+
+  public static void main(String[] args) throws Exception {
+    asyncRollbackAwsNodePoolUpdateLRO();
+  }
+
+  public static void asyncRollbackAwsNodePoolUpdateLRO() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      RollbackAwsNodePoolUpdateRequest request =
+          RollbackAwsNodePoolUpdateRequest.newBuilder()
+              .setName(
+                  AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+                      .toString())
+              .setRespectPdb(true)
+              .build();
+      OperationFuture<AwsNodePool, OperationMetadata> future =
+          awsClustersClient.rollbackAwsNodePoolUpdateOperationCallable().futureCall(request);
+      // Do something.
+      AwsNodePool response = future.get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_RollbackAwsNodePoolUpdate_LRO_async]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/SyncRollbackAwsNodePoolUpdate.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/SyncRollbackAwsNodePoolUpdate.java
new file mode 100644
index 000000000000..a085c99dd769
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/SyncRollbackAwsNodePoolUpdate.java
@@ -0,0 +1,49 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_RollbackAwsNodePoolUpdate_sync]
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.AwsNodePool;
+import com.google.cloud.gkemulticloud.v1.AwsNodePoolName;
+import com.google.cloud.gkemulticloud.v1.RollbackAwsNodePoolUpdateRequest;
+
+public class SyncRollbackAwsNodePoolUpdate {
+
+  public static void main(String[] args) throws Exception {
+    syncRollbackAwsNodePoolUpdate();
+  }
+
+  public static void syncRollbackAwsNodePoolUpdate() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      RollbackAwsNodePoolUpdateRequest request =
+          RollbackAwsNodePoolUpdateRequest.newBuilder()
+              .setName(
+                  AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+                      .toString())
+              .setRespectPdb(true)
+              .build();
+      AwsNodePool response = awsClustersClient.rollbackAwsNodePoolUpdateAsync(request).get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_RollbackAwsNodePoolUpdate_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/SyncRollbackAwsNodePoolUpdateAwsnodepoolname.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/SyncRollbackAwsNodePoolUpdateAwsnodepoolname.java
new file mode 100644
index 000000000000..5a6f3c7f09b7
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/SyncRollbackAwsNodePoolUpdateAwsnodepoolname.java
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_RollbackAwsNodePoolUpdate_Awsnodepoolname_sync]
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.AwsNodePool;
+import com.google.cloud.gkemulticloud.v1.AwsNodePoolName;
+
+public class SyncRollbackAwsNodePoolUpdateAwsnodepoolname {
+
+  public static void main(String[] args) throws Exception {
+    syncRollbackAwsNodePoolUpdateAwsnodepoolname();
+  }
+
+  public static void syncRollbackAwsNodePoolUpdateAwsnodepoolname() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      AwsNodePoolName name =
+          AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]");
+      AwsNodePool response = awsClustersClient.rollbackAwsNodePoolUpdateAsync(name).get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_RollbackAwsNodePoolUpdate_Awsnodepoolname_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/SyncRollbackAwsNodePoolUpdateString.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/SyncRollbackAwsNodePoolUpdateString.java
new file mode 100644
index 000000000000..84f9f8c7a9ae
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/awsclusters/rollbackawsnodepoolupdate/SyncRollbackAwsNodePoolUpdateString.java
@@ -0,0 +1,44 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AwsClusters_RollbackAwsNodePoolUpdate_String_sync]
+import com.google.cloud.gkemulticloud.v1.AwsClustersClient;
+import com.google.cloud.gkemulticloud.v1.AwsNodePool;
+import com.google.cloud.gkemulticloud.v1.AwsNodePoolName;
+
+public class SyncRollbackAwsNodePoolUpdateString {
+
+  public static void main(String[] args) throws Exception {
+    syncRollbackAwsNodePoolUpdateString();
+  }
+
+  public static void syncRollbackAwsNodePoolUpdateString() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AwsClustersClient awsClustersClient = AwsClustersClient.create()) {
+      String name =
+          AwsNodePoolName.of("[PROJECT]", "[LOCATION]", "[AWS_CLUSTER]", "[AWS_NODE_POOL]")
+              .toString();
+      AwsNodePool response = awsClustersClient.rollbackAwsNodePoolUpdateAsync(name).get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AwsClusters_RollbackAwsNodePoolUpdate_String_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/generateazureclusteragenttoken/AsyncGenerateAzureClusterAgentToken.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/generateazureclusteragenttoken/AsyncGenerateAzureClusterAgentToken.java
new file mode 100644
index 000000000000..141449484bda
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/generateazureclusteragenttoken/AsyncGenerateAzureClusterAgentToken.java
@@ -0,0 +1,60 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AzureClusters_GenerateAzureClusterAgentToken_async]
+import com.google.api.core.ApiFuture;
+import com.google.cloud.gkemulticloud.v1.AzureClusterName;
+import com.google.cloud.gkemulticloud.v1.AzureClustersClient;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse;
+
+public class AsyncGenerateAzureClusterAgentToken {
+
+  public static void main(String[] args) throws Exception {
+    asyncGenerateAzureClusterAgentToken();
+  }
+
+  public static void asyncGenerateAzureClusterAgentToken() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+      GenerateAzureClusterAgentTokenRequest request =
+          GenerateAzureClusterAgentTokenRequest.newBuilder()
+              .setAzureCluster(
+                  AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setNodePoolId("nodePoolId1121557241")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      ApiFuture<GenerateAzureClusterAgentTokenResponse> future =
+          azureClustersClient.generateAzureClusterAgentTokenCallable().futureCall(request);
+      // Do something.
+      GenerateAzureClusterAgentTokenResponse response = future.get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AzureClusters_GenerateAzureClusterAgentToken_async]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/generateazureclusteragenttoken/SyncGenerateAzureClusterAgentToken.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/generateazureclusteragenttoken/SyncGenerateAzureClusterAgentToken.java
new file mode 100644
index 000000000000..dcf85813d68e
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/generateazureclusteragenttoken/SyncGenerateAzureClusterAgentToken.java
@@ -0,0 +1,57 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AzureClusters_GenerateAzureClusterAgentToken_sync]
+import com.google.cloud.gkemulticloud.v1.AzureClusterName;
+import com.google.cloud.gkemulticloud.v1.AzureClustersClient;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenRequest;
+import com.google.cloud.gkemulticloud.v1.GenerateAzureClusterAgentTokenResponse;
+
+public class SyncGenerateAzureClusterAgentToken {
+
+  public static void main(String[] args) throws Exception {
+    syncGenerateAzureClusterAgentToken();
+  }
+
+  public static void syncGenerateAzureClusterAgentToken() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+      GenerateAzureClusterAgentTokenRequest request =
+          GenerateAzureClusterAgentTokenRequest.newBuilder()
+              .setAzureCluster(
+                  AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+              .setSubjectToken("subjectToken-1519661011")
+              .setSubjectTokenType("subjectTokenType1839592711")
+              .setVersion("version351608024")
+              .setNodePoolId("nodePoolId1121557241")
+              .setGrantType("grantType-1219832202")
+              .setAudience("audience975628804")
+              .setScope("scope109264468")
+              .setRequestedTokenType("requestedTokenType1733106949")
+              .setOptions("options-1249474914")
+              .build();
+      GenerateAzureClusterAgentTokenResponse response =
+          azureClustersClient.generateAzureClusterAgentToken(request);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AzureClusters_GenerateAzureClusterAgentToken_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/AsyncGetAzureJsonWebKeys.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/AsyncGetAzureJsonWebKeys.java
new file mode 100644
index 000000000000..eeba82c7a01f
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/AsyncGetAzureJsonWebKeys.java
@@ -0,0 +1,51 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AzureClusters_GetAzureJsonWebKeys_async]
+import com.google.api.core.ApiFuture;
+import com.google.cloud.gkemulticloud.v1.AzureClusterName;
+import com.google.cloud.gkemulticloud.v1.AzureClustersClient;
+import com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys;
+import com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest;
+
+public class AsyncGetAzureJsonWebKeys {
+
+  public static void main(String[] args) throws Exception {
+    asyncGetAzureJsonWebKeys();
+  }
+
+  public static void asyncGetAzureJsonWebKeys() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+      GetAzureJsonWebKeysRequest request =
+          GetAzureJsonWebKeysRequest.newBuilder()
+              .setAzureCluster(
+                  AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+              .build();
+      ApiFuture<AzureJsonWebKeys> future =
+          azureClustersClient.getAzureJsonWebKeysCallable().futureCall(request);
+      // Do something.
+      AzureJsonWebKeys response = future.get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AzureClusters_GetAzureJsonWebKeys_async]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/SyncGetAzureJsonWebKeys.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/SyncGetAzureJsonWebKeys.java
new file mode 100644
index 000000000000..77489a994201
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/SyncGetAzureJsonWebKeys.java
@@ -0,0 +1,47 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AzureClusters_GetAzureJsonWebKeys_sync]
+import com.google.cloud.gkemulticloud.v1.AzureClusterName;
+import com.google.cloud.gkemulticloud.v1.AzureClustersClient;
+import com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys;
+import com.google.cloud.gkemulticloud.v1.GetAzureJsonWebKeysRequest;
+
+public class SyncGetAzureJsonWebKeys {
+
+  public static void main(String[] args) throws Exception {
+    syncGetAzureJsonWebKeys();
+  }
+
+  public static void syncGetAzureJsonWebKeys() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+      GetAzureJsonWebKeysRequest request =
+          GetAzureJsonWebKeysRequest.newBuilder()
+              .setAzureCluster(
+                  AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+              .build();
+      AzureJsonWebKeys response = azureClustersClient.getAzureJsonWebKeys(request);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AzureClusters_GetAzureJsonWebKeys_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/SyncGetAzureJsonWebKeysAzureclustername.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/SyncGetAzureJsonWebKeysAzureclustername.java
new file mode 100644
index 000000000000..bcfe02b23b19
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/SyncGetAzureJsonWebKeysAzureclustername.java
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AzureClusters_GetAzureJsonWebKeys_Azureclustername_sync]
+import com.google.cloud.gkemulticloud.v1.AzureClusterName;
+import com.google.cloud.gkemulticloud.v1.AzureClustersClient;
+import com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys;
+
+public class SyncGetAzureJsonWebKeysAzureclustername {
+
+  public static void main(String[] args) throws Exception {
+    syncGetAzureJsonWebKeysAzureclustername();
+  }
+
+  public static void syncGetAzureJsonWebKeysAzureclustername() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+      AzureClusterName azureCluster =
+          AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+      AzureJsonWebKeys response = azureClustersClient.getAzureJsonWebKeys(azureCluster);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AzureClusters_GetAzureJsonWebKeys_Azureclustername_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/SyncGetAzureJsonWebKeysString.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/SyncGetAzureJsonWebKeysString.java
new file mode 100644
index 000000000000..071b5eb88756
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazurejsonwebkeys/SyncGetAzureJsonWebKeysString.java
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AzureClusters_GetAzureJsonWebKeys_String_sync]
+import com.google.cloud.gkemulticloud.v1.AzureClusterName;
+import com.google.cloud.gkemulticloud.v1.AzureClustersClient;
+import com.google.cloud.gkemulticloud.v1.AzureJsonWebKeys;
+
+public class SyncGetAzureJsonWebKeysString {
+
+  public static void main(String[] args) throws Exception {
+    syncGetAzureJsonWebKeysString();
+  }
+
+  public static void syncGetAzureJsonWebKeysString() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+      String azureCluster =
+          AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString();
+      AzureJsonWebKeys response = azureClustersClient.getAzureJsonWebKeys(azureCluster);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AzureClusters_GetAzureJsonWebKeys_String_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/AsyncGetAzureOpenIdConfig.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/AsyncGetAzureOpenIdConfig.java
new file mode 100644
index 000000000000..0e7f19b5bfef
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/AsyncGetAzureOpenIdConfig.java
@@ -0,0 +1,51 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AzureClusters_GetAzureOpenIdConfig_async]
+import com.google.api.core.ApiFuture;
+import com.google.cloud.gkemulticloud.v1.AzureClusterName;
+import com.google.cloud.gkemulticloud.v1.AzureClustersClient;
+import com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig;
+import com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest;
+
+public class AsyncGetAzureOpenIdConfig {
+
+  public static void main(String[] args) throws Exception {
+    asyncGetAzureOpenIdConfig();
+  }
+
+  public static void asyncGetAzureOpenIdConfig() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+      GetAzureOpenIdConfigRequest request =
+          GetAzureOpenIdConfigRequest.newBuilder()
+              .setAzureCluster(
+                  AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+              .build();
+      ApiFuture<AzureOpenIdConfig> future =
+          azureClustersClient.getAzureOpenIdConfigCallable().futureCall(request);
+      // Do something.
+      AzureOpenIdConfig response = future.get();
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AzureClusters_GetAzureOpenIdConfig_async]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/SyncGetAzureOpenIdConfig.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/SyncGetAzureOpenIdConfig.java
new file mode 100644
index 000000000000..7682cfd139da
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/SyncGetAzureOpenIdConfig.java
@@ -0,0 +1,47 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AzureClusters_GetAzureOpenIdConfig_sync]
+import com.google.cloud.gkemulticloud.v1.AzureClusterName;
+import com.google.cloud.gkemulticloud.v1.AzureClustersClient;
+import com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig;
+import com.google.cloud.gkemulticloud.v1.GetAzureOpenIdConfigRequest;
+
+public class SyncGetAzureOpenIdConfig {
+
+  public static void main(String[] args) throws Exception {
+    syncGetAzureOpenIdConfig();
+  }
+
+  public static void syncGetAzureOpenIdConfig() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+      GetAzureOpenIdConfigRequest request =
+          GetAzureOpenIdConfigRequest.newBuilder()
+              .setAzureCluster(
+                  AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString())
+              .build();
+      AzureOpenIdConfig response = azureClustersClient.getAzureOpenIdConfig(request);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AzureClusters_GetAzureOpenIdConfig_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/SyncGetAzureOpenIdConfigAzureclustername.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/SyncGetAzureOpenIdConfigAzureclustername.java
new file mode 100644
index 000000000000..37360a5a87a5
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/SyncGetAzureOpenIdConfigAzureclustername.java
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AzureClusters_GetAzureOpenIdConfig_Azureclustername_sync]
+import com.google.cloud.gkemulticloud.v1.AzureClusterName;
+import com.google.cloud.gkemulticloud.v1.AzureClustersClient;
+import com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig;
+
+public class SyncGetAzureOpenIdConfigAzureclustername {
+
+  public static void main(String[] args) throws Exception {
+    syncGetAzureOpenIdConfigAzureclustername();
+  }
+
+  public static void syncGetAzureOpenIdConfigAzureclustername() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+      AzureClusterName azureCluster =
+          AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]");
+      AzureOpenIdConfig response = azureClustersClient.getAzureOpenIdConfig(azureCluster);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AzureClusters_GetAzureOpenIdConfig_Azureclustername_sync]
diff --git a/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/SyncGetAzureOpenIdConfigString.java b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/SyncGetAzureOpenIdConfigString.java
new file mode 100644
index 000000000000..58c15baa10e3
--- /dev/null
+++ b/java-gke-multi-cloud/samples/snippets/generated/com/google/cloud/gkemulticloud/v1/azureclusters/getazureopenidconfig/SyncGetAzureOpenIdConfigString.java
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.google.cloud.gkemulticloud.v1.samples;
+
+// [START gkemulticloud_v1_generated_AzureClusters_GetAzureOpenIdConfig_String_sync]
+import com.google.cloud.gkemulticloud.v1.AzureClusterName;
+import com.google.cloud.gkemulticloud.v1.AzureClustersClient;
+import com.google.cloud.gkemulticloud.v1.AzureOpenIdConfig;
+
+public class SyncGetAzureOpenIdConfigString {
+
+  public static void main(String[] args) throws Exception {
+    syncGetAzureOpenIdConfigString();
+  }
+
+  public static void syncGetAzureOpenIdConfigString() throws Exception {
+    // This snippet has been automatically generated and should be regarded as a code template only.
+    // It will require modifications to work:
+    // - It may require correct/in-range values for request initialization.
+    // - It may require specifying regional endpoints when creating the service client as shown in
+    // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
+    try (AzureClustersClient azureClustersClient = AzureClustersClient.create()) {
+      String azureCluster =
+          AzureClusterName.of("[PROJECT]", "[LOCATION]", "[AZURE_CLUSTER]").toString();
+      AzureOpenIdConfig response = azureClustersClient.getAzureOpenIdConfig(azureCluster);
+    }
+  }
+}
+// [END gkemulticloud_v1_generated_AzureClusters_GetAzureOpenIdConfig_String_sync]