feat(gkehub): update the api

#### gkehub:v1

The following keys were added:
- schemas.CommonFeatureSpec.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.CommonFeatureState.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.RBACRoleBindingActuationFeatureSpec (Total Keys: 4)
- schemas.RBACRoleBindingActuationFeatureState (Total Keys: 2)
- schemas.Role.properties.customRole.type (Total Keys: 1)

#### gkehub:v1alpha

The following keys were added:
- schemas.CommonFeatureSpec.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.CommonFeatureState.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.RBACRoleBindingActuationFeatureSpec (Total Keys: 4)
- schemas.RBACRoleBindingActuationFeatureState (Total Keys: 2)
- schemas.Role.properties.customRole.type (Total Keys: 1)

#### gkehub:v1beta

The following keys were added:
- schemas.CommonFeatureSpec.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.CommonFeatureState.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.RBACRoleBindingActuationFeatureSpec (Total Keys: 4)
- schemas.RBACRoleBindingActuationFeatureState (Total Keys: 2)
- schemas.Role.properties.customRole.type (Total Keys: 1)

#### gkehub:v2

The following keys were added:
- schemas.FeatureSpec.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.FeatureState.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.RBACRoleBindingActuationRBACRoleBindingState (Total Keys: 6)
- schemas.RBACRoleBindingActuationSpec (Total Keys: 2)
- schemas.RBACRoleBindingActuationState (Total Keys: 5)

#### gkehub:v2alpha

The following keys were added:
- schemas.FeatureSpec.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.FeatureState.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.RBACRoleBindingActuationRBACRoleBindingState (Total Keys: 6)
- schemas.RBACRoleBindingActuationSpec (Total Keys: 2)
- schemas.RBACRoleBindingActuationState (Total Keys: 5)

#### gkehub:v2beta

The following keys were added:
- schemas.FeatureSpec.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.FeatureState.properties.rbacrolebindingactuation.$ref (Total Keys: 1)
- schemas.RBACRoleBindingActuationRBACRoleBindingState (Total Keys: 6)
- schemas.RBACRoleBindingActuationSpec (Total Keys: 2)
- schemas.RBACRoleBindingActuationState (Total Keys: 5)

Author: yoshi-automation

docs/dyn/gkehub_v1.projects.locations.features.html

@@ -948,6 +948,11 @@ <h3>Method Details</h3>
     &quot;multiclusteringress&quot;: { # **Multi-cluster Ingress**: The configuration for the MultiClusterIngress feature. # Multicluster Ingress-specific spec.
       &quot;configMembership&quot;: &quot;A String&quot;, # Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: `projects/foo-proj/locations/global/memberships/bar`
     },
+    &quot;rbacrolebindingactuation&quot;: { # **RBAC RoleBinding Actuation**: The Hub-wide input for the RBACRoleBindingActuation feature. # RBAC Role Binding Actuation feature spec
+      &quot;allowedCustomRoles&quot;: [ # The list of allowed custom roles (ClusterRoles). If a ClusterRole is not part of this list, it cannot be used in a Scope RBACRoleBinding. If a ClusterRole in this list is in use, it cannot be removed from the list.
+        &quot;A String&quot;,
+      ],
+    },
   },
   &quot;state&quot;: { # CommonFeatureState contains Fleet-wide Feature status information. # Output only. The Fleet-wide Feature state.
     &quot;appdevexperience&quot;: { # State for App Dev Exp Feature. # Appdevexperience specific state.
@@ -1026,6 +1031,8 @@ <h3>Method Details</h3>
         },
       },
     },
+    &quot;rbacrolebindingactuation&quot;: { # **RBAC RoleBinding Actuation**: An empty state left as an example Hub-wide Feature state. # RBAC Role Binding Actuation feature state
+    },
     &quot;state&quot;: { # FeatureState describes the high-level state of a Feature. It may be used to describe a Feature&#x27;s state at the environ-level, or per-membershop, depending on the context. # Output only. The &quot;running state&quot; of the Feature in this Fleet.
       &quot;code&quot;: &quot;A String&quot;, # The high-level, machine-readable status of this Feature.
       &quot;description&quot;: &quot;A String&quot;, # A human-readable description of the current status.
@@ -1950,6 +1957,11 @@ <h3>Method Details</h3>
     &quot;multiclusteringress&quot;: { # **Multi-cluster Ingress**: The configuration for the MultiClusterIngress feature. # Multicluster Ingress-specific spec.
       &quot;configMembership&quot;: &quot;A String&quot;, # Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: `projects/foo-proj/locations/global/memberships/bar`
     },
+    &quot;rbacrolebindingactuation&quot;: { # **RBAC RoleBinding Actuation**: The Hub-wide input for the RBACRoleBindingActuation feature. # RBAC Role Binding Actuation feature spec
+      &quot;allowedCustomRoles&quot;: [ # The list of allowed custom roles (ClusterRoles). If a ClusterRole is not part of this list, it cannot be used in a Scope RBACRoleBinding. If a ClusterRole in this list is in use, it cannot be removed from the list.
+        &quot;A String&quot;,
+      ],
+    },
   },
   &quot;state&quot;: { # CommonFeatureState contains Fleet-wide Feature status information. # Output only. The Fleet-wide Feature state.
     &quot;appdevexperience&quot;: { # State for App Dev Exp Feature. # Appdevexperience specific state.
@@ -2028,6 +2040,8 @@ <h3>Method Details</h3>
         },
       },
     },
+    &quot;rbacrolebindingactuation&quot;: { # **RBAC RoleBinding Actuation**: An empty state left as an example Hub-wide Feature state. # RBAC Role Binding Actuation feature state
+    },
     &quot;state&quot;: { # FeatureState describes the high-level state of a Feature. It may be used to describe a Feature&#x27;s state at the environ-level, or per-membershop, depending on the context. # Output only. The &quot;running state&quot; of the Feature in this Fleet.
       &quot;code&quot;: &quot;A String&quot;, # The high-level, machine-readable status of this Feature.
       &quot;description&quot;: &quot;A String&quot;, # A human-readable description of the current status.
@@ -2940,6 +2954,11 @@ <h3>Method Details</h3>
         &quot;multiclusteringress&quot;: { # **Multi-cluster Ingress**: The configuration for the MultiClusterIngress feature. # Multicluster Ingress-specific spec.
           &quot;configMembership&quot;: &quot;A String&quot;, # Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: `projects/foo-proj/locations/global/memberships/bar`
         },
+        &quot;rbacrolebindingactuation&quot;: { # **RBAC RoleBinding Actuation**: The Hub-wide input for the RBACRoleBindingActuation feature. # RBAC Role Binding Actuation feature spec
+          &quot;allowedCustomRoles&quot;: [ # The list of allowed custom roles (ClusterRoles). If a ClusterRole is not part of this list, it cannot be used in a Scope RBACRoleBinding. If a ClusterRole in this list is in use, it cannot be removed from the list.
+            &quot;A String&quot;,
+          ],
+        },
       },
       &quot;state&quot;: { # CommonFeatureState contains Fleet-wide Feature status information. # Output only. The Fleet-wide Feature state.
         &quot;appdevexperience&quot;: { # State for App Dev Exp Feature. # Appdevexperience specific state.
@@ -3018,6 +3037,8 @@ <h3>Method Details</h3>
             },
           },
         },
+        &quot;rbacrolebindingactuation&quot;: { # **RBAC RoleBinding Actuation**: An empty state left as an example Hub-wide Feature state. # RBAC Role Binding Actuation feature state
+        },
         &quot;state&quot;: { # FeatureState describes the high-level state of a Feature. It may be used to describe a Feature&#x27;s state at the environ-level, or per-membershop, depending on the context. # Output only. The &quot;running state&quot; of the Feature in this Fleet.
           &quot;code&quot;: &quot;A String&quot;, # The high-level, machine-readable status of this Feature.
           &quot;description&quot;: &quot;A String&quot;, # A human-readable description of the current status.
@@ -3885,6 +3906,11 @@ <h3>Method Details</h3>
     &quot;multiclusteringress&quot;: { # **Multi-cluster Ingress**: The configuration for the MultiClusterIngress feature. # Multicluster Ingress-specific spec.
       &quot;configMembership&quot;: &quot;A String&quot;, # Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: `projects/foo-proj/locations/global/memberships/bar`
     },
+    &quot;rbacrolebindingactuation&quot;: { # **RBAC RoleBinding Actuation**: The Hub-wide input for the RBACRoleBindingActuation feature. # RBAC Role Binding Actuation feature spec
+      &quot;allowedCustomRoles&quot;: [ # The list of allowed custom roles (ClusterRoles). If a ClusterRole is not part of this list, it cannot be used in a Scope RBACRoleBinding. If a ClusterRole in this list is in use, it cannot be removed from the list.
+        &quot;A String&quot;,
+      ],
+    },
   },
   &quot;state&quot;: { # CommonFeatureState contains Fleet-wide Feature status information. # Output only. The Fleet-wide Feature state.
     &quot;appdevexperience&quot;: { # State for App Dev Exp Feature. # Appdevexperience specific state.
@@ -3963,6 +3989,8 @@ <h3>Method Details</h3>
         },
       },
     },
+    &quot;rbacrolebindingactuation&quot;: { # **RBAC RoleBinding Actuation**: An empty state left as an example Hub-wide Feature state. # RBAC Role Binding Actuation feature state
+    },
     &quot;state&quot;: { # FeatureState describes the high-level state of a Feature. It may be used to describe a Feature&#x27;s state at the environ-level, or per-membershop, depending on the context. # Output only. The &quot;running state&quot; of the Feature in this Fleet.
       &quot;code&quot;: &quot;A String&quot;, # The high-level, machine-readable status of this Feature.
       &quot;description&quot;: &quot;A String&quot;, # A human-readable description of the current status.

docs/dyn/gkehub_v1.projects.locations.memberships.html

@@ -197,7 +197,7 @@ <h3>Method Details</h3>
     },
   },
   &quot;externalId&quot;: &quot;A String&quot;, # Optional. An externally-generated and managed ID for this Membership. This ID may be modified after creation, but this is not recommended. The ID must match the regex: `a-zA-Z0-9*` If this Membership represents a Kubernetes cluster, this value should be set to the UID of the `kube-system` namespace object.
-  &quot;labels&quot;: { # Optional. Labels for this membership.
+  &quot;labels&quot;: { # Optional. Labels for this membership. These labels are not leveraged by multi-cluster features, instead, we prefer cluster labels, which can be set on GKE cluster or other cluster types.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
   &quot;lastConnectionTime&quot;: &quot;A String&quot;, # Output only. For clusters using Connect, the timestamp of the most recent connection established with Google Cloud. This time is updated every several minutes, not continuously. For clusters that do not use GKE Connect, or that have never connected successfully, this field will be unset.
@@ -396,7 +396,7 @@ <h3>Method Details</h3>
     },
   },
   &quot;externalId&quot;: &quot;A String&quot;, # Optional. An externally-generated and managed ID for this Membership. This ID may be modified after creation, but this is not recommended. The ID must match the regex: `a-zA-Z0-9*` If this Membership represents a Kubernetes cluster, this value should be set to the UID of the `kube-system` namespace object.
-  &quot;labels&quot;: { # Optional. Labels for this membership.
+  &quot;labels&quot;: { # Optional. Labels for this membership. These labels are not leveraged by multi-cluster features, instead, we prefer cluster labels, which can be set on GKE cluster or other cluster types.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
   &quot;lastConnectionTime&quot;: &quot;A String&quot;, # Output only. For clusters using Connect, the timestamp of the most recent connection established with Google Cloud. This time is updated every several minutes, not continuously. For clusters that do not use GKE Connect, or that have never connected successfully, this field will be unset.
@@ -550,7 +550,7 @@ <h3>Method Details</h3>
         },
       },
       &quot;externalId&quot;: &quot;A String&quot;, # Optional. An externally-generated and managed ID for this Membership. This ID may be modified after creation, but this is not recommended. The ID must match the regex: `a-zA-Z0-9*` If this Membership represents a Kubernetes cluster, this value should be set to the UID of the `kube-system` namespace object.
-      &quot;labels&quot;: { # Optional. Labels for this membership.
+      &quot;labels&quot;: { # Optional. Labels for this membership. These labels are not leveraged by multi-cluster features, instead, we prefer cluster labels, which can be set on GKE cluster or other cluster types.
         &quot;a_key&quot;: &quot;A String&quot;,
       },
       &quot;lastConnectionTime&quot;: &quot;A String&quot;, # Output only. For clusters using Connect, the timestamp of the most recent connection established with Google Cloud. This time is updated every several minutes, not continuously. For clusters that do not use GKE Connect, or that have never connected successfully, this field will be unset.
@@ -663,7 +663,7 @@ <h3>Method Details</h3>
     },
   },
   &quot;externalId&quot;: &quot;A String&quot;, # Optional. An externally-generated and managed ID for this Membership. This ID may be modified after creation, but this is not recommended. The ID must match the regex: `a-zA-Z0-9*` If this Membership represents a Kubernetes cluster, this value should be set to the UID of the `kube-system` namespace object.
-  &quot;labels&quot;: { # Optional. Labels for this membership.
+  &quot;labels&quot;: { # Optional. Labels for this membership. These labels are not leveraged by multi-cluster features, instead, we prefer cluster labels, which can be set on GKE cluster or other cluster types.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
   &quot;lastConnectionTime&quot;: &quot;A String&quot;, # Output only. For clusters using Connect, the timestamp of the most recent connection established with Google Cloud. This time is updated every several minutes, not continuously. For clusters that do not use GKE Connect, or that have never connected successfully, this field will be unset.

docs/dyn/gkehub_v1.projects.locations.memberships.rbacrolebindings.html

@@ -122,6 +122,7 @@ <h3>Method Details</h3>
   },
   &quot;name&quot;: &quot;A String&quot;, # The resource name for the rbacrolebinding `projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`
   &quot;role&quot;: { # Role is the type for Kubernetes roles # Required. Role to bind to the principal
+    &quot;customRole&quot;: &quot;A String&quot;, # Optional. custom_role is the name of a custom KubernetesClusterRole to use.
     &quot;predefinedRole&quot;: &quot;A String&quot;, # predefined_role is the Kubernetes default role to use
   },
   &quot;state&quot;: { # RBACRoleBindingLifecycleState describes the state of a RbacRoleBinding resource. # Output only. State of the rbacrolebinding resource.
@@ -215,6 +216,7 @@ <h3>Method Details</h3>
   },
   &quot;name&quot;: &quot;A String&quot;, # The resource name for the rbacrolebinding `projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`
   &quot;role&quot;: { # Role is the type for Kubernetes roles # Required. Role to bind to the principal
+    &quot;customRole&quot;: &quot;A String&quot;, # Optional. custom_role is the name of a custom KubernetesClusterRole to use.
     &quot;predefinedRole&quot;: &quot;A String&quot;, # predefined_role is the Kubernetes default role to use
   },
   &quot;state&quot;: { # RBACRoleBindingLifecycleState describes the state of a RbacRoleBinding resource. # Output only. State of the rbacrolebinding resource.
@@ -262,6 +264,7 @@ <h3>Method Details</h3>
   },
   &quot;name&quot;: &quot;A String&quot;, # The resource name for the rbacrolebinding `projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`
   &quot;role&quot;: { # Role is the type for Kubernetes roles # Required. Role to bind to the principal
+    &quot;customRole&quot;: &quot;A String&quot;, # Optional. custom_role is the name of a custom KubernetesClusterRole to use.
     &quot;predefinedRole&quot;: &quot;A String&quot;, # predefined_role is the Kubernetes default role to use
   },
   &quot;state&quot;: { # RBACRoleBindingLifecycleState describes the state of a RbacRoleBinding resource. # Output only. State of the rbacrolebinding resource.
@@ -301,6 +304,7 @@ <h3>Method Details</h3>
       },
       &quot;name&quot;: &quot;A String&quot;, # The resource name for the rbacrolebinding `projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`
       &quot;role&quot;: { # Role is the type for Kubernetes roles # Required. Role to bind to the principal
+        &quot;customRole&quot;: &quot;A String&quot;, # Optional. custom_role is the name of a custom KubernetesClusterRole to use.
         &quot;predefinedRole&quot;: &quot;A String&quot;, # predefined_role is the Kubernetes default role to use
       },
       &quot;state&quot;: { # RBACRoleBindingLifecycleState describes the state of a RbacRoleBinding resource. # Output only. State of the rbacrolebinding resource.
@@ -349,6 +353,7 @@ <h3>Method Details</h3>
   },
   &quot;name&quot;: &quot;A String&quot;, # The resource name for the rbacrolebinding `projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding}` or `projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}`
   &quot;role&quot;: { # Role is the type for Kubernetes roles # Required. Role to bind to the principal
+    &quot;customRole&quot;: &quot;A String&quot;, # Optional. custom_role is the name of a custom KubernetesClusterRole to use.
     &quot;predefinedRole&quot;: &quot;A String&quot;, # predefined_role is the Kubernetes default role to use
   },
   &quot;state&quot;: { # RBACRoleBindingLifecycleState describes the state of a RbacRoleBinding resource. # Output only. State of the rbacrolebinding resource.

docs/dyn/gkehub_v1.projects.locations.scopes.html

@@ -426,7 +426,7 @@ <h3>Method Details</h3>
         },
       },
       &quot;externalId&quot;: &quot;A String&quot;, # Optional. An externally-generated and managed ID for this Membership. This ID may be modified after creation, but this is not recommended. The ID must match the regex: `a-zA-Z0-9*` If this Membership represents a Kubernetes cluster, this value should be set to the UID of the `kube-system` namespace object.
-      &quot;labels&quot;: { # Optional. Labels for this membership.
+      &quot;labels&quot;: { # Optional. Labels for this membership. These labels are not leveraged by multi-cluster features, instead, we prefer cluster labels, which can be set on GKE cluster or other cluster types.
         &quot;a_key&quot;: &quot;A String&quot;,
       },
       &quot;lastConnectionTime&quot;: &quot;A String&quot;, # Output only. For clusters using Connect, the timestamp of the most recent connection established with Google Cloud. This time is updated every several minutes, not continuously. For clusters that do not use GKE Connect, or that have never connected successfully, this field will be unset.