diff --git a/master-local/_definitions.json b/master-local/_definitions.json
index 45efe750ad29e0b6fcf339916a38ba85405cc8f4..2b27b1bee1c0219d8585645139ec2b5012f2b346 100644
--- a/master-local/_definitions.json
+++ b/master-local/_definitions.json
@@ -931,7 +931,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
           },
@@ -939,7 +939,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": "string"
         },
         "namespaceSelector": {
@@ -948,10 +948,10 @@
         },
         "objectSelector": {
           "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector",
-          "description": "ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
+          "description": "ObjectSelector decides whether to run the policy based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the policy's expression (CEL), and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
           },
@@ -8952,6 +8952,17 @@
       },
       "type": "object"
     },
+    "io.k8s.api.core.v1.NodeSwapStatus": {
+      "description": "NodeSwapStatus represents swap memory information.",
+      "properties": {
+        "capacity": {
+          "description": "Total amount of swap memory in bytes.",
+          "format": "int64",
+          "type": "integer"
+        }
+      },
+      "type": "object"
+    },
     "io.k8s.api.core.v1.NodeSystemInfo": {
       "description": "NodeSystemInfo is a set of ids/uuids to uniquely identify the node.",
       "properties": {
@@ -8991,6 +9002,10 @@
           "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
           "type": "string"
         },
+        "swap": {
+          "$ref": "#/definitions/io.k8s.api.core.v1.NodeSwapStatus",
+          "description": "Swap Info reported by the node."
+        },
         "systemUUID": {
           "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
           "type": "string"
@@ -10339,7 +10354,7 @@
           "type": "string"
         },
         "resize": {
-          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
           "type": "string"
         },
         "resourceClaimStatuses": {
@@ -17226,6 +17241,11 @@
           "description": "fsGroupPolicy defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.\n\nDefaults to ReadWriteOnceWithFSType, which will examine each volume to determine if Kubernetes should modify ownership and permissions of the volume. With the default policy the defined fsGroup will only be applied if a fstype is defined and the volume's access mode contains ReadWriteOnce.",
           "type": "string"
         },
+        "nodeAllocatableUpdatePeriodSeconds": {
+          "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+          "format": "int64",
+          "type": "integer"
+        },
         "podInfoOnMount": {
           "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
           "type": "boolean"
@@ -17742,6 +17762,11 @@
     "io.k8s.api.storage.v1.VolumeError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": "integer"
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": "string"
diff --git a/master-local/all.json b/master-local/all.json
index bfabd71e7a0c63836e625cdf2d4888550b854e38..c50db642e6305c6118911194d81373c41773467d 100644
--- a/master-local/all.json
+++ b/master-local/all.json
@@ -891,6 +891,9 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeStatus"
     },
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeSwapStatus"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeSystemInfo"
     },
diff --git a/master-local/csidriverspec-storage-v1.json b/master-local/csidriverspec-storage-v1.json
index 5984e93e68637593a0241da1a0e06c864b038651..bb64a38bfd5e3e48c24e947f53a86bc2d21c0dd1 100644
--- a/master-local/csidriverspec-storage-v1.json
+++ b/master-local/csidriverspec-storage-v1.json
@@ -15,6 +15,14 @@
         "null"
       ]
     },
+    "nodeAllocatableUpdatePeriodSeconds": {
+      "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "podInfoOnMount": {
       "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
       "type": [
diff --git a/master-local/csidriverspec.json b/master-local/csidriverspec.json
index 5984e93e68637593a0241da1a0e06c864b038651..bb64a38bfd5e3e48c24e947f53a86bc2d21c0dd1 100644
--- a/master-local/csidriverspec.json
+++ b/master-local/csidriverspec.json
@@ -15,6 +15,14 @@
         "null"
       ]
     },
+    "nodeAllocatableUpdatePeriodSeconds": {
+      "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "podInfoOnMount": {
       "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
       "type": [
diff --git a/master-local/matchresources-admissionregistration-v1alpha1.json b/master-local/matchresources-admissionregistration-v1alpha1.json
index 8cab5ceff25a481de3c381f6f2647ae76674ff92..195b6d279dfbc143b30c18ef5f39952fea96cde7 100644
--- a/master-local/matchresources-admissionregistration-v1alpha1.json
+++ b/master-local/matchresources-admissionregistration-v1alpha1.json
@@ -2,7 +2,7 @@
   "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
   "properties": {
     "excludeResourceRules": {
-      "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+      "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "items": {
         "$ref": "_definitions.json#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
       },
@@ -13,7 +13,7 @@
       "x-kubernetes-list-type": "atomic"
     },
     "matchPolicy": {
-      "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+      "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
       "type": [
         "string",
         "null"
@@ -25,10 +25,10 @@
     },
     "objectSelector": {
       "$ref": "_definitions.json#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector",
-      "description": "ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
+      "description": "ObjectSelector decides whether to run the policy based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the policy's expression (CEL), and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
     },
     "resourceRules": {
-      "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+      "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
       "items": {
         "$ref": "_definitions.json#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
       },
diff --git a/master-local/nodeswapstatus-v1.json b/master-local/nodeswapstatus-v1.json
new file mode 100644
index 0000000000000000000000000000000000000000..dbf8c04ebc3f36b20337692a888378d3c2007a6e
--- /dev/null
+++ b/master-local/nodeswapstatus-v1.json
@@ -0,0 +1,15 @@
+{
+  "description": "NodeSwapStatus represents swap memory information.",
+  "properties": {
+    "capacity": {
+      "description": "Total amount of swap memory in bytes.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    }
+  },
+  "type": "object",
+  "$schema": "http://json-schema.org/schema#"
+}
\ No newline at end of file
diff --git a/master-local/nodeswapstatus.json b/master-local/nodeswapstatus.json
new file mode 100644
index 0000000000000000000000000000000000000000..dbf8c04ebc3f36b20337692a888378d3c2007a6e
--- /dev/null
+++ b/master-local/nodeswapstatus.json
@@ -0,0 +1,15 @@
+{
+  "description": "NodeSwapStatus represents swap memory information.",
+  "properties": {
+    "capacity": {
+      "description": "Total amount of swap memory in bytes.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    }
+  },
+  "type": "object",
+  "$schema": "http://json-schema.org/schema#"
+}
\ No newline at end of file
diff --git a/master-local/nodesysteminfo-v1.json b/master-local/nodesysteminfo-v1.json
index 2b8bb78400d91f0011b7ca80d30a85c4047ae5c1..0cb18c3502296357cce260a045c69915347878af 100644
--- a/master-local/nodesysteminfo-v1.json
+++ b/master-local/nodesysteminfo-v1.json
@@ -64,6 +64,10 @@
         "null"
       ]
     },
+    "swap": {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeSwapStatus",
+      "description": "Swap Info reported by the node."
+    },
     "systemUUID": {
       "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
       "type": [
diff --git a/master-local/nodesysteminfo.json b/master-local/nodesysteminfo.json
index 2b8bb78400d91f0011b7ca80d30a85c4047ae5c1..0cb18c3502296357cce260a045c69915347878af 100644
--- a/master-local/nodesysteminfo.json
+++ b/master-local/nodesysteminfo.json
@@ -64,6 +64,10 @@
         "null"
       ]
     },
+    "swap": {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeSwapStatus",
+      "description": "Swap Info reported by the node."
+    },
     "systemUUID": {
       "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
       "type": [
diff --git a/master-local/podstatus-v1.json b/master-local/podstatus-v1.json
index 1032637cf84c391f3edca94ab779c43d77a3de89..cb47907ff40b2a3313a297a1ba06dcabead925df 100644
--- a/master-local/podstatus-v1.json
+++ b/master-local/podstatus-v1.json
@@ -137,7 +137,7 @@
       ]
     },
     "resize": {
-      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
       "type": [
         "string",
         "null"
diff --git a/master-local/podstatus.json b/master-local/podstatus.json
index 1032637cf84c391f3edca94ab779c43d77a3de89..cb47907ff40b2a3313a297a1ba06dcabead925df 100644
--- a/master-local/podstatus.json
+++ b/master-local/podstatus.json
@@ -137,7 +137,7 @@
       ]
     },
     "resize": {
-      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
       "type": [
         "string",
         "null"
diff --git a/master-local/volumeerror-storage-v1.json b/master-local/volumeerror-storage-v1.json
index 987a1075b6771e1ae5f63d62a9e6fd6e8f6f7399..c2e4680854ead7f725487dbc6b928114aac92dc1 100644
--- a/master-local/volumeerror-storage-v1.json
+++ b/master-local/volumeerror-storage-v1.json
@@ -1,6 +1,14 @@
 {
   "description": "VolumeError captures an error encountered during a volume operation.",
   "properties": {
+    "errorCode": {
+      "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+      "format": "int32",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "message": {
       "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
       "type": [
diff --git a/master-local/volumeerror.json b/master-local/volumeerror.json
index 987a1075b6771e1ae5f63d62a9e6fd6e8f6f7399..c2e4680854ead7f725487dbc6b928114aac92dc1 100644
--- a/master-local/volumeerror.json
+++ b/master-local/volumeerror.json
@@ -1,6 +1,14 @@
 {
   "description": "VolumeError captures an error encountered during a volume operation.",
   "properties": {
+    "errorCode": {
+      "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+      "format": "int32",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "message": {
       "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
       "type": [
diff --git a/master-standalone-strict/_definitions.json b/master-standalone-strict/_definitions.json
index adb2cb0fe8935ee54dfdce43212d41e09a32c4bf..97dfc24c04a63033ab548ef631c80b03dbcce999 100644
--- a/master-standalone-strict/_definitions.json
+++ b/master-standalone-strict/_definitions.json
@@ -960,7 +960,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
           },
@@ -968,7 +968,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": "string"
         },
         "namespaceSelector": {
@@ -977,10 +977,10 @@
         },
         "objectSelector": {
           "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector",
-          "description": "ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
+          "description": "ObjectSelector decides whether to run the policy based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the policy's expression (CEL), and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
           },
@@ -9248,6 +9248,18 @@
       "type": "object",
       "additionalProperties": false
     },
+    "io.k8s.api.core.v1.NodeSwapStatus": {
+      "description": "NodeSwapStatus represents swap memory information.",
+      "properties": {
+        "capacity": {
+          "description": "Total amount of swap memory in bytes.",
+          "format": "int64",
+          "type": "integer"
+        }
+      },
+      "type": "object",
+      "additionalProperties": false
+    },
     "io.k8s.api.core.v1.NodeSystemInfo": {
       "description": "NodeSystemInfo is a set of ids/uuids to uniquely identify the node.",
       "properties": {
@@ -9287,6 +9299,10 @@
           "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
           "type": "string"
         },
+        "swap": {
+          "$ref": "#/definitions/io.k8s.api.core.v1.NodeSwapStatus",
+          "description": "Swap Info reported by the node."
+        },
         "systemUUID": {
           "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
           "type": "string"
@@ -10666,7 +10682,7 @@
           "type": "string"
         },
         "resize": {
-          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
           "type": "string"
         },
         "resourceClaimStatuses": {
@@ -17791,6 +17807,11 @@
           "description": "fsGroupPolicy defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.\n\nDefaults to ReadWriteOnceWithFSType, which will examine each volume to determine if Kubernetes should modify ownership and permissions of the volume. With the default policy the defined fsGroup will only be applied if a fstype is defined and the volume's access mode contains ReadWriteOnce.",
           "type": "string"
         },
+        "nodeAllocatableUpdatePeriodSeconds": {
+          "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+          "format": "int64",
+          "type": "integer"
+        },
         "podInfoOnMount": {
           "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
           "type": "boolean"
@@ -18322,6 +18343,11 @@
     "io.k8s.api.storage.v1.VolumeError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": "integer"
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": "string"
diff --git a/master-standalone-strict/all.json b/master-standalone-strict/all.json
index bfabd71e7a0c63836e625cdf2d4888550b854e38..c50db642e6305c6118911194d81373c41773467d 100644
--- a/master-standalone-strict/all.json
+++ b/master-standalone-strict/all.json
@@ -891,6 +891,9 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeStatus"
     },
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeSwapStatus"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeSystemInfo"
     },
diff --git a/master-standalone-strict/csidriver-storage-v1.json b/master-standalone-strict/csidriver-storage-v1.json
index ebdbfc9fcf1760dc8ce64d17f19d3513045abf8a..20fd17eabe6117feeaebc166d85a4dcca58a0f08 100644
--- a/master-standalone-strict/csidriver-storage-v1.json
+++ b/master-standalone-strict/csidriver-storage-v1.json
@@ -291,6 +291,14 @@
             "null"
           ]
         },
+        "nodeAllocatableUpdatePeriodSeconds": {
+          "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+          "format": "int64",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "podInfoOnMount": {
           "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
           "type": [
diff --git a/master-standalone-strict/csidriver.json b/master-standalone-strict/csidriver.json
index 446fc2dc36acfdef16561d219da95d2c0815e748..5082787fc3bb627c76910eb988f8309215d10419 100644
--- a/master-standalone-strict/csidriver.json
+++ b/master-standalone-strict/csidriver.json
@@ -288,6 +288,14 @@
             "null"
           ]
         },
+        "nodeAllocatableUpdatePeriodSeconds": {
+          "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+          "format": "int64",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "podInfoOnMount": {
           "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
           "type": [
diff --git a/master-standalone-strict/csidriverlist-storage-v1.json b/master-standalone-strict/csidriverlist-storage-v1.json
index 9e0cd8fe53bebc05c053259416271e8b51b02cab..6ce2888f20f7af8e008fe7c8d028f480aaaba6d2 100644
--- a/master-standalone-strict/csidriverlist-storage-v1.json
+++ b/master-standalone-strict/csidriverlist-storage-v1.json
@@ -306,6 +306,14 @@
                   "null"
                 ]
               },
+              "nodeAllocatableUpdatePeriodSeconds": {
+                "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+                "format": "int64",
+                "type": [
+                  "integer",
+                  "null"
+                ]
+              },
               "podInfoOnMount": {
                 "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
                 "type": [
diff --git a/master-standalone-strict/csidriverlist.json b/master-standalone-strict/csidriverlist.json
index a36aaa0b0dc6c61b2dcb41b94d6ffe814bdca639..2853a3b0b52886f5aa6cf0c793c545af81e2439f 100644
--- a/master-standalone-strict/csidriverlist.json
+++ b/master-standalone-strict/csidriverlist.json
@@ -300,6 +300,14 @@
                   "null"
                 ]
               },
+              "nodeAllocatableUpdatePeriodSeconds": {
+                "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+                "format": "int64",
+                "type": [
+                  "integer",
+                  "null"
+                ]
+              },
               "podInfoOnMount": {
                 "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
                 "type": [
diff --git a/master-standalone-strict/csidriverspec-storage-v1.json b/master-standalone-strict/csidriverspec-storage-v1.json
index c36d941d4f59b146298488550fb8153ada11abf0..6311a996c1d369cba99058b1843a32246fa20cb6 100644
--- a/master-standalone-strict/csidriverspec-storage-v1.json
+++ b/master-standalone-strict/csidriverspec-storage-v1.json
@@ -15,6 +15,14 @@
         "null"
       ]
     },
+    "nodeAllocatableUpdatePeriodSeconds": {
+      "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "podInfoOnMount": {
       "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
       "type": [
diff --git a/master-standalone-strict/csidriverspec.json b/master-standalone-strict/csidriverspec.json
index c36d941d4f59b146298488550fb8153ada11abf0..6311a996c1d369cba99058b1843a32246fa20cb6 100644
--- a/master-standalone-strict/csidriverspec.json
+++ b/master-standalone-strict/csidriverspec.json
@@ -15,6 +15,14 @@
         "null"
       ]
     },
+    "nodeAllocatableUpdatePeriodSeconds": {
+      "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "podInfoOnMount": {
       "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
       "type": [
diff --git a/master-standalone-strict/matchresources-admissionregistration-v1alpha1.json b/master-standalone-strict/matchresources-admissionregistration-v1alpha1.json
index 3ba0c1f49f71b9562ab1c535870449e02cc0a82a..28cac0e69f02bd1dc6c6955f667d592af40cb994 100644
--- a/master-standalone-strict/matchresources-admissionregistration-v1alpha1.json
+++ b/master-standalone-strict/matchresources-admissionregistration-v1alpha1.json
@@ -2,7 +2,7 @@
   "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
   "properties": {
     "excludeResourceRules": {
-      "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+      "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "items": {
         "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
         "properties": {
@@ -98,7 +98,7 @@
       "x-kubernetes-list-type": "atomic"
     },
     "matchPolicy": {
-      "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+      "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
       "type": [
         "string",
         "null"
@@ -241,7 +241,7 @@
       "additionalProperties": false
     },
     "resourceRules": {
-      "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+      "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
       "items": {
         "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
         "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicy-admissionregistration-v1alpha1.json b/master-standalone-strict/mutatingadmissionpolicy-admissionregistration-v1alpha1.json
index d2045c62869b83b2bb8c40de01aa70f216d05878..df9ab2462e2b204173879f4c4717e76d4bd90f9a 100644
--- a/master-standalone-strict/mutatingadmissionpolicy-admissionregistration-v1alpha1.json
+++ b/master-standalone-strict/mutatingadmissionpolicy-admissionregistration-v1alpha1.json
@@ -322,7 +322,7 @@
           "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "properties": {
             "excludeResourceRules": {
-              "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+              "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
@@ -418,7 +418,7 @@
               "x-kubernetes-list-type": "atomic"
             },
             "matchPolicy": {
-              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
               "type": [
                 "string",
                 "null"
@@ -561,7 +561,7 @@
               "additionalProperties": false
             },
             "resourceRules": {
-              "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+              "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicy.json b/master-standalone-strict/mutatingadmissionpolicy.json
index 651521f4f3c6765dd8a4282150545acb0611f19d..9af76c538265896ff358b428d5f38a601a90b9ab 100644
--- a/master-standalone-strict/mutatingadmissionpolicy.json
+++ b/master-standalone-strict/mutatingadmissionpolicy.json
@@ -319,7 +319,7 @@
           "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "properties": {
             "excludeResourceRules": {
-              "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+              "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
@@ -415,7 +415,7 @@
               "x-kubernetes-list-type": "atomic"
             },
             "matchPolicy": {
-              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
               "type": [
                 "string",
                 "null"
@@ -558,7 +558,7 @@
               "additionalProperties": false
             },
             "resourceRules": {
-              "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+              "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicybinding-admissionregistration-v1alpha1.json b/master-standalone-strict/mutatingadmissionpolicybinding-admissionregistration-v1alpha1.json
index 5d8fe8efc63d665cdabd8352586380f49491a2b6..83ad3322d74aa42dc78a290c3ca33278d0d84d57 100644
--- a/master-standalone-strict/mutatingadmissionpolicybinding-admissionregistration-v1alpha1.json
+++ b/master-standalone-strict/mutatingadmissionpolicybinding-admissionregistration-v1alpha1.json
@@ -281,7 +281,7 @@
           "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "properties": {
             "excludeResourceRules": {
-              "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+              "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
@@ -377,7 +377,7 @@
               "x-kubernetes-list-type": "atomic"
             },
             "matchPolicy": {
-              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
               "type": [
                 "string",
                 "null"
@@ -520,7 +520,7 @@
               "additionalProperties": false
             },
             "resourceRules": {
-              "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+              "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicybinding.json b/master-standalone-strict/mutatingadmissionpolicybinding.json
index e86659efdcc6a56c116299785f24f2b3f992c390..4edf02250f6eb02d15804e1d9c83c6e5eff87f0f 100644
--- a/master-standalone-strict/mutatingadmissionpolicybinding.json
+++ b/master-standalone-strict/mutatingadmissionpolicybinding.json
@@ -278,7 +278,7 @@
           "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "properties": {
             "excludeResourceRules": {
-              "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+              "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
@@ -374,7 +374,7 @@
               "x-kubernetes-list-type": "atomic"
             },
             "matchPolicy": {
-              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
               "type": [
                 "string",
                 "null"
@@ -517,7 +517,7 @@
               "additionalProperties": false
             },
             "resourceRules": {
-              "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+              "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicybindinglist-admissionregistration-v1alpha1.json b/master-standalone-strict/mutatingadmissionpolicybindinglist-admissionregistration-v1alpha1.json
index 82c0c37846c834e3e48a092281f730724c4caf7b..1933d40c81cfdb4e359d90724829aa003f4651bd 100644
--- a/master-standalone-strict/mutatingadmissionpolicybindinglist-admissionregistration-v1alpha1.json
+++ b/master-standalone-strict/mutatingadmissionpolicybindinglist-admissionregistration-v1alpha1.json
@@ -296,7 +296,7 @@
                 "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                 "properties": {
                   "excludeResourceRules": {
-                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
@@ -392,7 +392,7 @@
                     "x-kubernetes-list-type": "atomic"
                   },
                   "matchPolicy": {
-                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
                     "type": [
                       "string",
                       "null"
@@ -535,7 +535,7 @@
                     "additionalProperties": false
                   },
                   "resourceRules": {
-                    "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+                    "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicybindinglist.json b/master-standalone-strict/mutatingadmissionpolicybindinglist.json
index 4ce7ba65897a54761adb841dd77d94f21cf0eb9a..4b1ba6c9c94ed327736308e279e6bcd0a9dcb7ec 100644
--- a/master-standalone-strict/mutatingadmissionpolicybindinglist.json
+++ b/master-standalone-strict/mutatingadmissionpolicybindinglist.json
@@ -290,7 +290,7 @@
                 "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                 "properties": {
                   "excludeResourceRules": {
-                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
@@ -386,7 +386,7 @@
                     "x-kubernetes-list-type": "atomic"
                   },
                   "matchPolicy": {
-                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
                     "type": [
                       "string",
                       "null"
@@ -529,7 +529,7 @@
                     "additionalProperties": false
                   },
                   "resourceRules": {
-                    "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+                    "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicybindingspec-admissionregistration-v1alpha1.json b/master-standalone-strict/mutatingadmissionpolicybindingspec-admissionregistration-v1alpha1.json
index 9ac5429129ff272debd0305ce15208e44ecec408..6f4f49af1af29ec8587defd67755066c59da570b 100644
--- a/master-standalone-strict/mutatingadmissionpolicybindingspec-admissionregistration-v1alpha1.json
+++ b/master-standalone-strict/mutatingadmissionpolicybindingspec-admissionregistration-v1alpha1.json
@@ -5,7 +5,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
@@ -101,7 +101,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": [
             "string",
             "null"
@@ -244,7 +244,7 @@
           "additionalProperties": false
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicybindingspec.json b/master-standalone-strict/mutatingadmissionpolicybindingspec.json
index 9ac5429129ff272debd0305ce15208e44ecec408..6f4f49af1af29ec8587defd67755066c59da570b 100644
--- a/master-standalone-strict/mutatingadmissionpolicybindingspec.json
+++ b/master-standalone-strict/mutatingadmissionpolicybindingspec.json
@@ -5,7 +5,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
@@ -101,7 +101,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": [
             "string",
             "null"
@@ -244,7 +244,7 @@
           "additionalProperties": false
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicylist-admissionregistration-v1alpha1.json b/master-standalone-strict/mutatingadmissionpolicylist-admissionregistration-v1alpha1.json
index 6b894ba5062470f94f5e0a5a197b274d221607bc..e2ada0bccb5b58c05dbb804d13644a351acd548e 100644
--- a/master-standalone-strict/mutatingadmissionpolicylist-admissionregistration-v1alpha1.json
+++ b/master-standalone-strict/mutatingadmissionpolicylist-admissionregistration-v1alpha1.json
@@ -337,7 +337,7 @@
                 "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                 "properties": {
                   "excludeResourceRules": {
-                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
@@ -433,7 +433,7 @@
                     "x-kubernetes-list-type": "atomic"
                   },
                   "matchPolicy": {
-                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
                     "type": [
                       "string",
                       "null"
@@ -576,7 +576,7 @@
                     "additionalProperties": false
                   },
                   "resourceRules": {
-                    "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+                    "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicylist.json b/master-standalone-strict/mutatingadmissionpolicylist.json
index 08dd9ba70ea92a3bc51d23ae55f50eed025ee966..9b1911800a3612b31073068197d1c9d262ec2b48 100644
--- a/master-standalone-strict/mutatingadmissionpolicylist.json
+++ b/master-standalone-strict/mutatingadmissionpolicylist.json
@@ -331,7 +331,7 @@
                 "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                 "properties": {
                   "excludeResourceRules": {
-                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
@@ -427,7 +427,7 @@
                     "x-kubernetes-list-type": "atomic"
                   },
                   "matchPolicy": {
-                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
                     "type": [
                       "string",
                       "null"
@@ -570,7 +570,7 @@
                     "additionalProperties": false
                   },
                   "resourceRules": {
-                    "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+                    "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicyspec-admissionregistration-v1alpha1.json b/master-standalone-strict/mutatingadmissionpolicyspec-admissionregistration-v1alpha1.json
index 8d2da03b0ad7ffb4732cd2c94e6adf3115301f16..b31f57427f41b82b83f735c572a2f835236b126c 100644
--- a/master-standalone-strict/mutatingadmissionpolicyspec-admissionregistration-v1alpha1.json
+++ b/master-standalone-strict/mutatingadmissionpolicyspec-admissionregistration-v1alpha1.json
@@ -46,7 +46,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
@@ -142,7 +142,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": [
             "string",
             "null"
@@ -285,7 +285,7 @@
           "additionalProperties": false
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
diff --git a/master-standalone-strict/mutatingadmissionpolicyspec.json b/master-standalone-strict/mutatingadmissionpolicyspec.json
index 8d2da03b0ad7ffb4732cd2c94e6adf3115301f16..b31f57427f41b82b83f735c572a2f835236b126c 100644
--- a/master-standalone-strict/mutatingadmissionpolicyspec.json
+++ b/master-standalone-strict/mutatingadmissionpolicyspec.json
@@ -46,7 +46,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
@@ -142,7 +142,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": [
             "string",
             "null"
@@ -285,7 +285,7 @@
           "additionalProperties": false
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
diff --git a/master-standalone-strict/node-v1.json b/master-standalone-strict/node-v1.json
index 29bda0689e240fdb29f543e13d26e09c6059e1ee..f5485f12c55e7511c8ad6000bbbc715b6758bc7b 100644
--- a/master-standalone-strict/node-v1.json
+++ b/master-standalone-strict/node-v1.json
@@ -866,6 +866,24 @@
               "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
               "type": "string"
             },
+            "swap": {
+              "description": "NodeSwapStatus represents swap memory information.",
+              "properties": {
+                "capacity": {
+                  "description": "Total amount of swap memory in bytes.",
+                  "format": "int64",
+                  "type": [
+                    "integer",
+                    "null"
+                  ]
+                }
+              },
+              "type": [
+                "object",
+                "null"
+              ],
+              "additionalProperties": false
+            },
             "systemUUID": {
               "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
               "type": "string"
diff --git a/master-standalone-strict/node.json b/master-standalone-strict/node.json
index 7dee2181d54d41f3b2ac65a48e338341317dceeb..d6cd3eb69e4f723ab51a4047246433ed9e1ab8c4 100644
--- a/master-standalone-strict/node.json
+++ b/master-standalone-strict/node.json
@@ -863,6 +863,24 @@
               "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
               "type": "string"
             },
+            "swap": {
+              "description": "NodeSwapStatus represents swap memory information.",
+              "properties": {
+                "capacity": {
+                  "description": "Total amount of swap memory in bytes.",
+                  "format": "int64",
+                  "type": [
+                    "integer",
+                    "null"
+                  ]
+                }
+              },
+              "type": [
+                "object",
+                "null"
+              ],
+              "additionalProperties": false
+            },
             "systemUUID": {
               "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
               "type": "string"
diff --git a/master-standalone-strict/nodelist-v1.json b/master-standalone-strict/nodelist-v1.json
index fac9f09ef6deaf48586eb037d8fc7d82d6bb8df4..e38ab0fe47348eaa521c50daeab100b64fb5c394 100644
--- a/master-standalone-strict/nodelist-v1.json
+++ b/master-standalone-strict/nodelist-v1.json
@@ -881,6 +881,24 @@
                     "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
                     "type": "string"
                   },
+                  "swap": {
+                    "description": "NodeSwapStatus represents swap memory information.",
+                    "properties": {
+                      "capacity": {
+                        "description": "Total amount of swap memory in bytes.",
+                        "format": "int64",
+                        "type": [
+                          "integer",
+                          "null"
+                        ]
+                      }
+                    },
+                    "type": [
+                      "object",
+                      "null"
+                    ],
+                    "additionalProperties": false
+                  },
                   "systemUUID": {
                     "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
                     "type": "string"
diff --git a/master-standalone-strict/nodelist.json b/master-standalone-strict/nodelist.json
index 778a9405627458a5cba2736e67fe6388f493a7e9..04abe6f671e818fdfaad20c0dc09a0d08407293f 100644
--- a/master-standalone-strict/nodelist.json
+++ b/master-standalone-strict/nodelist.json
@@ -875,6 +875,24 @@
                     "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
                     "type": "string"
                   },
+                  "swap": {
+                    "description": "NodeSwapStatus represents swap memory information.",
+                    "properties": {
+                      "capacity": {
+                        "description": "Total amount of swap memory in bytes.",
+                        "format": "int64",
+                        "type": [
+                          "integer",
+                          "null"
+                        ]
+                      }
+                    },
+                    "type": [
+                      "object",
+                      "null"
+                    ],
+                    "additionalProperties": false
+                  },
                   "systemUUID": {
                     "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
                     "type": "string"
diff --git a/master-standalone-strict/nodestatus-v1.json b/master-standalone-strict/nodestatus-v1.json
index 39c4430baadcae1e8c9bafdb42679d46d2e610c6..6e0ed389c302c065eeed8280df16217ea9a10332 100644
--- a/master-standalone-strict/nodestatus-v1.json
+++ b/master-standalone-strict/nodestatus-v1.json
@@ -441,6 +441,24 @@
           "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
           "type": "string"
         },
+        "swap": {
+          "description": "NodeSwapStatus represents swap memory information.",
+          "properties": {
+            "capacity": {
+              "description": "Total amount of swap memory in bytes.",
+              "format": "int64",
+              "type": [
+                "integer",
+                "null"
+              ]
+            }
+          },
+          "type": [
+            "object",
+            "null"
+          ],
+          "additionalProperties": false
+        },
         "systemUUID": {
           "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
           "type": "string"
diff --git a/master-standalone-strict/nodestatus.json b/master-standalone-strict/nodestatus.json
index 39c4430baadcae1e8c9bafdb42679d46d2e610c6..6e0ed389c302c065eeed8280df16217ea9a10332 100644
--- a/master-standalone-strict/nodestatus.json
+++ b/master-standalone-strict/nodestatus.json
@@ -441,6 +441,24 @@
           "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
           "type": "string"
         },
+        "swap": {
+          "description": "NodeSwapStatus represents swap memory information.",
+          "properties": {
+            "capacity": {
+              "description": "Total amount of swap memory in bytes.",
+              "format": "int64",
+              "type": [
+                "integer",
+                "null"
+              ]
+            }
+          },
+          "type": [
+            "object",
+            "null"
+          ],
+          "additionalProperties": false
+        },
         "systemUUID": {
           "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
           "type": "string"
diff --git a/master-standalone-strict/nodeswapstatus-v1.json b/master-standalone-strict/nodeswapstatus-v1.json
new file mode 100644
index 0000000000000000000000000000000000000000..fefe5e47cd945c9fecb5ef917e8d3f3563418c80
--- /dev/null
+++ b/master-standalone-strict/nodeswapstatus-v1.json
@@ -0,0 +1,16 @@
+{
+  "description": "NodeSwapStatus represents swap memory information.",
+  "properties": {
+    "capacity": {
+      "description": "Total amount of swap memory in bytes.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    }
+  },
+  "type": "object",
+  "additionalProperties": false,
+  "$schema": "http://json-schema.org/schema#"
+}
\ No newline at end of file
diff --git a/master-standalone-strict/nodeswapstatus.json b/master-standalone-strict/nodeswapstatus.json
new file mode 100644
index 0000000000000000000000000000000000000000..fefe5e47cd945c9fecb5ef917e8d3f3563418c80
--- /dev/null
+++ b/master-standalone-strict/nodeswapstatus.json
@@ -0,0 +1,16 @@
+{
+  "description": "NodeSwapStatus represents swap memory information.",
+  "properties": {
+    "capacity": {
+      "description": "Total amount of swap memory in bytes.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    }
+  },
+  "type": "object",
+  "additionalProperties": false,
+  "$schema": "http://json-schema.org/schema#"
+}
\ No newline at end of file
diff --git a/master-standalone-strict/nodesysteminfo-v1.json b/master-standalone-strict/nodesysteminfo-v1.json
index 31084b9b81daddbeb253a6a548d3b36f02633d44..08c65cd59f7ed36fde48d78f99cf20fd50dad010 100644
--- a/master-standalone-strict/nodesysteminfo-v1.json
+++ b/master-standalone-strict/nodesysteminfo-v1.json
@@ -64,6 +64,24 @@
         "null"
       ]
     },
+    "swap": {
+      "description": "NodeSwapStatus represents swap memory information.",
+      "properties": {
+        "capacity": {
+          "description": "Total amount of swap memory in bytes.",
+          "format": "int64",
+          "type": [
+            "integer",
+            "null"
+          ]
+        }
+      },
+      "type": [
+        "object",
+        "null"
+      ],
+      "additionalProperties": false
+    },
     "systemUUID": {
       "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
       "type": [
diff --git a/master-standalone-strict/nodesysteminfo.json b/master-standalone-strict/nodesysteminfo.json
index 31084b9b81daddbeb253a6a548d3b36f02633d44..08c65cd59f7ed36fde48d78f99cf20fd50dad010 100644
--- a/master-standalone-strict/nodesysteminfo.json
+++ b/master-standalone-strict/nodesysteminfo.json
@@ -64,6 +64,24 @@
         "null"
       ]
     },
+    "swap": {
+      "description": "NodeSwapStatus represents swap memory information.",
+      "properties": {
+        "capacity": {
+          "description": "Total amount of swap memory in bytes.",
+          "format": "int64",
+          "type": [
+            "integer",
+            "null"
+          ]
+        }
+      },
+      "type": [
+        "object",
+        "null"
+      ],
+      "additionalProperties": false
+    },
     "systemUUID": {
       "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
       "type": [
diff --git a/master-standalone-strict/pod-v1.json b/master-standalone-strict/pod-v1.json
index 9b9ccb70212c99d97c0baefdb6890226ba151800..ed8ce2975da3433974c59162259b6af52b1097e2 100644
--- a/master-standalone-strict/pod-v1.json
+++ b/master-standalone-strict/pod-v1.json
@@ -12394,7 +12394,7 @@
           ]
         },
         "resize": {
-          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
           "type": [
             "string",
             "null"
diff --git a/master-standalone-strict/pod.json b/master-standalone-strict/pod.json
index fdddb9d2c2c1c30d3c04273a4ff95b61aa56ede9..c41b1cda0acb83db39d1a7400eac0e77e9f71418 100644
--- a/master-standalone-strict/pod.json
+++ b/master-standalone-strict/pod.json
@@ -12391,7 +12391,7 @@
           ]
         },
         "resize": {
-          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
           "type": [
             "string",
             "null"
diff --git a/master-standalone-strict/podlist-v1.json b/master-standalone-strict/podlist-v1.json
index b066ba4a501dc7c3f5d8f2e5728d30325fd099bc..0d093e10f5adc90b114554257ee388c79f407ce3 100644
--- a/master-standalone-strict/podlist-v1.json
+++ b/master-standalone-strict/podlist-v1.json
@@ -12409,7 +12409,7 @@
                 ]
               },
               "resize": {
-                "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+                "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
                 "type": [
                   "string",
                   "null"
diff --git a/master-standalone-strict/podlist.json b/master-standalone-strict/podlist.json
index 6006652f56ee9d45db0630fd79f296fb5bbf8058..1750cc902be93b783c55b2d1e03deb3d7ff14cf6 100644
--- a/master-standalone-strict/podlist.json
+++ b/master-standalone-strict/podlist.json
@@ -12403,7 +12403,7 @@
                 ]
               },
               "resize": {
-                "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+                "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
                 "type": [
                   "string",
                   "null"
diff --git a/master-standalone-strict/podstatus-v1.json b/master-standalone-strict/podstatus-v1.json
index 06ba2b92cb02550dcb6da85ffa6d8b3e5059b939..d0c15109bda39a6d9d5318e01de78091860efc6d 100644
--- a/master-standalone-strict/podstatus-v1.json
+++ b/master-standalone-strict/podstatus-v1.json
@@ -1890,7 +1890,7 @@
       ]
     },
     "resize": {
-      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
       "type": [
         "string",
         "null"
diff --git a/master-standalone-strict/podstatus.json b/master-standalone-strict/podstatus.json
index 06ba2b92cb02550dcb6da85ffa6d8b3e5059b939..d0c15109bda39a6d9d5318e01de78091860efc6d 100644
--- a/master-standalone-strict/podstatus.json
+++ b/master-standalone-strict/podstatus.json
@@ -1890,7 +1890,7 @@
       ]
     },
     "resize": {
-      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
       "type": [
         "string",
         "null"
diff --git a/master-standalone-strict/volumeattachment-storage-v1.json b/master-standalone-strict/volumeattachment-storage-v1.json
index 22afda18aedeb9bd8f75d368a8a7c5b1f488c687..3b960d908b823cf25e54340342da980535e9bb85 100644
--- a/master-standalone-strict/volumeattachment-storage-v1.json
+++ b/master-standalone-strict/volumeattachment-storage-v1.json
@@ -1864,6 +1864,14 @@
         "attachError": {
           "description": "VolumeError captures an error encountered during a volume operation.",
           "properties": {
+            "errorCode": {
+              "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+              "format": "int32",
+              "type": [
+                "integer",
+                "null"
+              ]
+            },
             "message": {
               "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
               "type": [
@@ -1906,6 +1914,14 @@
         "detachError": {
           "description": "VolumeError captures an error encountered during a volume operation.",
           "properties": {
+            "errorCode": {
+              "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+              "format": "int32",
+              "type": [
+                "integer",
+                "null"
+              ]
+            },
             "message": {
               "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
               "type": [
diff --git a/master-standalone-strict/volumeattachment.json b/master-standalone-strict/volumeattachment.json
index 6c7aa867a8ef6b61bb1f7e6569c22fb546039513..fa415073f4a7c5eb17c4605a27d0f63e0051901a 100644
--- a/master-standalone-strict/volumeattachment.json
+++ b/master-standalone-strict/volumeattachment.json
@@ -1861,6 +1861,14 @@
         "attachError": {
           "description": "VolumeError captures an error encountered during a volume operation.",
           "properties": {
+            "errorCode": {
+              "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+              "format": "int32",
+              "type": [
+                "integer",
+                "null"
+              ]
+            },
             "message": {
               "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
               "type": [
@@ -1903,6 +1911,14 @@
         "detachError": {
           "description": "VolumeError captures an error encountered during a volume operation.",
           "properties": {
+            "errorCode": {
+              "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+              "format": "int32",
+              "type": [
+                "integer",
+                "null"
+              ]
+            },
             "message": {
               "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
               "type": [
diff --git a/master-standalone-strict/volumeattachmentlist-storage-v1.json b/master-standalone-strict/volumeattachmentlist-storage-v1.json
index 25ea36b6fa4f9826171c09547dd6a31fb6438fbc..ebc5a5b98a039ef867c24aeb1368a1024e983271 100644
--- a/master-standalone-strict/volumeattachmentlist-storage-v1.json
+++ b/master-standalone-strict/volumeattachmentlist-storage-v1.json
@@ -1876,6 +1876,14 @@
               "attachError": {
                 "description": "VolumeError captures an error encountered during a volume operation.",
                 "properties": {
+                  "errorCode": {
+                    "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+                    "format": "int32",
+                    "type": [
+                      "integer",
+                      "null"
+                    ]
+                  },
                   "message": {
                     "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
                     "type": [
@@ -1918,6 +1926,14 @@
               "detachError": {
                 "description": "VolumeError captures an error encountered during a volume operation.",
                 "properties": {
+                  "errorCode": {
+                    "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+                    "format": "int32",
+                    "type": [
+                      "integer",
+                      "null"
+                    ]
+                  },
                   "message": {
                     "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
                     "type": [
diff --git a/master-standalone-strict/volumeattachmentlist.json b/master-standalone-strict/volumeattachmentlist.json
index fa18766c28f190716bd0744d818c3f1455436789..12a11c1867118966776139065ef96dd0d94c2b30 100644
--- a/master-standalone-strict/volumeattachmentlist.json
+++ b/master-standalone-strict/volumeattachmentlist.json
@@ -1870,6 +1870,14 @@
               "attachError": {
                 "description": "VolumeError captures an error encountered during a volume operation.",
                 "properties": {
+                  "errorCode": {
+                    "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+                    "format": "int32",
+                    "type": [
+                      "integer",
+                      "null"
+                    ]
+                  },
                   "message": {
                     "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
                     "type": [
@@ -1912,6 +1920,14 @@
               "detachError": {
                 "description": "VolumeError captures an error encountered during a volume operation.",
                 "properties": {
+                  "errorCode": {
+                    "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+                    "format": "int32",
+                    "type": [
+                      "integer",
+                      "null"
+                    ]
+                  },
                   "message": {
                     "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
                     "type": [
diff --git a/master-standalone-strict/volumeattachmentstatus-storage-v1.json b/master-standalone-strict/volumeattachmentstatus-storage-v1.json
index a7940b67c5b13698995f6d8bda9357697391a483..6b081c25a82c8a5a964592c495efc7252f1a900d 100644
--- a/master-standalone-strict/volumeattachmentstatus-storage-v1.json
+++ b/master-standalone-strict/volumeattachmentstatus-storage-v1.json
@@ -4,6 +4,14 @@
     "attachError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": [
@@ -49,6 +57,14 @@
     "detachError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": [
diff --git a/master-standalone-strict/volumeattachmentstatus.json b/master-standalone-strict/volumeattachmentstatus.json
index a7940b67c5b13698995f6d8bda9357697391a483..6b081c25a82c8a5a964592c495efc7252f1a900d 100644
--- a/master-standalone-strict/volumeattachmentstatus.json
+++ b/master-standalone-strict/volumeattachmentstatus.json
@@ -4,6 +4,14 @@
     "attachError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": [
@@ -49,6 +57,14 @@
     "detachError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": [
diff --git a/master-standalone-strict/volumeerror-storage-v1.json b/master-standalone-strict/volumeerror-storage-v1.json
index c6c66d331de62bdebbe9bb01cd8351f3e42bffcb..b28b184a619c0cd52fecf568584f8fb2683baa2b 100644
--- a/master-standalone-strict/volumeerror-storage-v1.json
+++ b/master-standalone-strict/volumeerror-storage-v1.json
@@ -1,6 +1,14 @@
 {
   "description": "VolumeError captures an error encountered during a volume operation.",
   "properties": {
+    "errorCode": {
+      "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+      "format": "int32",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "message": {
       "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
       "type": [
diff --git a/master-standalone-strict/volumeerror.json b/master-standalone-strict/volumeerror.json
index c6c66d331de62bdebbe9bb01cd8351f3e42bffcb..b28b184a619c0cd52fecf568584f8fb2683baa2b 100644
--- a/master-standalone-strict/volumeerror.json
+++ b/master-standalone-strict/volumeerror.json
@@ -1,6 +1,14 @@
 {
   "description": "VolumeError captures an error encountered during a volume operation.",
   "properties": {
+    "errorCode": {
+      "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+      "format": "int32",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "message": {
       "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
       "type": [
diff --git a/master-standalone/_definitions.json b/master-standalone/_definitions.json
index 45efe750ad29e0b6fcf339916a38ba85405cc8f4..2b27b1bee1c0219d8585645139ec2b5012f2b346 100644
--- a/master-standalone/_definitions.json
+++ b/master-standalone/_definitions.json
@@ -931,7 +931,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
           },
@@ -939,7 +939,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": "string"
         },
         "namespaceSelector": {
@@ -948,10 +948,10 @@
         },
         "objectSelector": {
           "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector",
-          "description": "ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
+          "description": "ObjectSelector decides whether to run the policy based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the policy's expression (CEL), and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
           },
@@ -8952,6 +8952,17 @@
       },
       "type": "object"
     },
+    "io.k8s.api.core.v1.NodeSwapStatus": {
+      "description": "NodeSwapStatus represents swap memory information.",
+      "properties": {
+        "capacity": {
+          "description": "Total amount of swap memory in bytes.",
+          "format": "int64",
+          "type": "integer"
+        }
+      },
+      "type": "object"
+    },
     "io.k8s.api.core.v1.NodeSystemInfo": {
       "description": "NodeSystemInfo is a set of ids/uuids to uniquely identify the node.",
       "properties": {
@@ -8991,6 +9002,10 @@
           "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
           "type": "string"
         },
+        "swap": {
+          "$ref": "#/definitions/io.k8s.api.core.v1.NodeSwapStatus",
+          "description": "Swap Info reported by the node."
+        },
         "systemUUID": {
           "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
           "type": "string"
@@ -10339,7 +10354,7 @@
           "type": "string"
         },
         "resize": {
-          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
           "type": "string"
         },
         "resourceClaimStatuses": {
@@ -17226,6 +17241,11 @@
           "description": "fsGroupPolicy defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.\n\nDefaults to ReadWriteOnceWithFSType, which will examine each volume to determine if Kubernetes should modify ownership and permissions of the volume. With the default policy the defined fsGroup will only be applied if a fstype is defined and the volume's access mode contains ReadWriteOnce.",
           "type": "string"
         },
+        "nodeAllocatableUpdatePeriodSeconds": {
+          "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+          "format": "int64",
+          "type": "integer"
+        },
         "podInfoOnMount": {
           "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
           "type": "boolean"
@@ -17742,6 +17762,11 @@
     "io.k8s.api.storage.v1.VolumeError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": "integer"
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": "string"
diff --git a/master-standalone/all.json b/master-standalone/all.json
index bfabd71e7a0c63836e625cdf2d4888550b854e38..c50db642e6305c6118911194d81373c41773467d 100644
--- a/master-standalone/all.json
+++ b/master-standalone/all.json
@@ -891,6 +891,9 @@
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeStatus"
     },
+    {
+      "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeSwapStatus"
+    },
     {
       "$ref": "_definitions.json#/definitions/io.k8s.api.core.v1.NodeSystemInfo"
     },
diff --git a/master-standalone/csidriver-storage-v1.json b/master-standalone/csidriver-storage-v1.json
index a9233c2825f637e1d9d4e37ab617a9cd4564dc04..34dffc56a7f2718d89199be0a08e3fb4578beb7a 100644
--- a/master-standalone/csidriver-storage-v1.json
+++ b/master-standalone/csidriver-storage-v1.json
@@ -288,6 +288,14 @@
             "null"
           ]
         },
+        "nodeAllocatableUpdatePeriodSeconds": {
+          "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+          "format": "int64",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "podInfoOnMount": {
           "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
           "type": [
diff --git a/master-standalone/csidriver.json b/master-standalone/csidriver.json
index facf01560ea62a94c2d179d2a7e44d0dbc2cc0d5..9b9b4d3c0ccb0d26f14e87a5b7f64c91a4c7f6c7 100644
--- a/master-standalone/csidriver.json
+++ b/master-standalone/csidriver.json
@@ -285,6 +285,14 @@
             "null"
           ]
         },
+        "nodeAllocatableUpdatePeriodSeconds": {
+          "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+          "format": "int64",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "podInfoOnMount": {
           "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
           "type": [
diff --git a/master-standalone/csidriverlist-storage-v1.json b/master-standalone/csidriverlist-storage-v1.json
index 84a41dde8e12495dc09587250f805a7a43fb073c..bb2068aa93e2505808561a892f69ced623e0e455 100644
--- a/master-standalone/csidriverlist-storage-v1.json
+++ b/master-standalone/csidriverlist-storage-v1.json
@@ -303,6 +303,14 @@
                   "null"
                 ]
               },
+              "nodeAllocatableUpdatePeriodSeconds": {
+                "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+                "format": "int64",
+                "type": [
+                  "integer",
+                  "null"
+                ]
+              },
               "podInfoOnMount": {
                 "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
                 "type": [
diff --git a/master-standalone/csidriverlist.json b/master-standalone/csidriverlist.json
index 41e8a637a8f8f41b5a80b63d5a0f63be3ebf0e0c..c541d22dbccf30055ef56d42c34d879ecce7449e 100644
--- a/master-standalone/csidriverlist.json
+++ b/master-standalone/csidriverlist.json
@@ -297,6 +297,14 @@
                   "null"
                 ]
               },
+              "nodeAllocatableUpdatePeriodSeconds": {
+                "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+                "format": "int64",
+                "type": [
+                  "integer",
+                  "null"
+                ]
+              },
               "podInfoOnMount": {
                 "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
                 "type": [
diff --git a/master-standalone/csidriverspec-storage-v1.json b/master-standalone/csidriverspec-storage-v1.json
index c5064e3b33c75f50239a48f833bfc4446a4f154c..17596f6609c8cd71d272603f24dd08bd4e0e373f 100644
--- a/master-standalone/csidriverspec-storage-v1.json
+++ b/master-standalone/csidriverspec-storage-v1.json
@@ -15,6 +15,14 @@
         "null"
       ]
     },
+    "nodeAllocatableUpdatePeriodSeconds": {
+      "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "podInfoOnMount": {
       "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
       "type": [
diff --git a/master-standalone/csidriverspec.json b/master-standalone/csidriverspec.json
index c5064e3b33c75f50239a48f833bfc4446a4f154c..17596f6609c8cd71d272603f24dd08bd4e0e373f 100644
--- a/master-standalone/csidriverspec.json
+++ b/master-standalone/csidriverspec.json
@@ -15,6 +15,14 @@
         "null"
       ]
     },
+    "nodeAllocatableUpdatePeriodSeconds": {
+      "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "podInfoOnMount": {
       "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
       "type": [
diff --git a/master-standalone/matchresources-admissionregistration-v1alpha1.json b/master-standalone/matchresources-admissionregistration-v1alpha1.json
index f5aae8b276b89e68eecd5d17b97e656436c36655..da0a5162525ee5a76881f9ea4d91bedf15106a96 100644
--- a/master-standalone/matchresources-admissionregistration-v1alpha1.json
+++ b/master-standalone/matchresources-admissionregistration-v1alpha1.json
@@ -2,7 +2,7 @@
   "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
   "properties": {
     "excludeResourceRules": {
-      "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+      "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "items": {
         "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
         "properties": {
@@ -97,7 +97,7 @@
       "x-kubernetes-list-type": "atomic"
     },
     "matchPolicy": {
-      "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+      "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
       "type": [
         "string",
         "null"
@@ -236,7 +236,7 @@
       "x-kubernetes-map-type": "atomic"
     },
     "resourceRules": {
-      "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+      "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
       "items": {
         "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
         "properties": {
diff --git a/master-standalone/mutatingadmissionpolicy-admissionregistration-v1alpha1.json b/master-standalone/mutatingadmissionpolicy-admissionregistration-v1alpha1.json
index 4eac2f99e0a9fe1803b54c9fed4758984f5cc76c..f7c3b9e0b678ae000ba23f81abbd2d42270068be 100644
--- a/master-standalone/mutatingadmissionpolicy-admissionregistration-v1alpha1.json
+++ b/master-standalone/mutatingadmissionpolicy-admissionregistration-v1alpha1.json
@@ -318,7 +318,7 @@
           "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "properties": {
             "excludeResourceRules": {
-              "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+              "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
@@ -413,7 +413,7 @@
               "x-kubernetes-list-type": "atomic"
             },
             "matchPolicy": {
-              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
               "type": [
                 "string",
                 "null"
@@ -552,7 +552,7 @@
               "x-kubernetes-map-type": "atomic"
             },
             "resourceRules": {
-              "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+              "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
diff --git a/master-standalone/mutatingadmissionpolicy.json b/master-standalone/mutatingadmissionpolicy.json
index 0550d223a07b108c972b5e7af0ef663417e55428..04b595a750b8f8d810d0aaae435960a7aa350ae4 100644
--- a/master-standalone/mutatingadmissionpolicy.json
+++ b/master-standalone/mutatingadmissionpolicy.json
@@ -315,7 +315,7 @@
           "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "properties": {
             "excludeResourceRules": {
-              "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+              "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
@@ -410,7 +410,7 @@
               "x-kubernetes-list-type": "atomic"
             },
             "matchPolicy": {
-              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
               "type": [
                 "string",
                 "null"
@@ -549,7 +549,7 @@
               "x-kubernetes-map-type": "atomic"
             },
             "resourceRules": {
-              "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+              "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
diff --git a/master-standalone/mutatingadmissionpolicybinding-admissionregistration-v1alpha1.json b/master-standalone/mutatingadmissionpolicybinding-admissionregistration-v1alpha1.json
index 92c3116ea45a513bab4309c406979609b0f5741b..0be1da286c25a5ccda92820f14760e1d85f71561 100644
--- a/master-standalone/mutatingadmissionpolicybinding-admissionregistration-v1alpha1.json
+++ b/master-standalone/mutatingadmissionpolicybinding-admissionregistration-v1alpha1.json
@@ -278,7 +278,7 @@
           "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "properties": {
             "excludeResourceRules": {
-              "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+              "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
@@ -373,7 +373,7 @@
               "x-kubernetes-list-type": "atomic"
             },
             "matchPolicy": {
-              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
               "type": [
                 "string",
                 "null"
@@ -512,7 +512,7 @@
               "x-kubernetes-map-type": "atomic"
             },
             "resourceRules": {
-              "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+              "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
diff --git a/master-standalone/mutatingadmissionpolicybinding.json b/master-standalone/mutatingadmissionpolicybinding.json
index 5152337763e851d71f761b84aeaaf31f1ad6ee53..6a509e28d5b5d4e3ed0ca98fd5812a3cb7226026 100644
--- a/master-standalone/mutatingadmissionpolicybinding.json
+++ b/master-standalone/mutatingadmissionpolicybinding.json
@@ -275,7 +275,7 @@
           "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "properties": {
             "excludeResourceRules": {
-              "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+              "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
@@ -370,7 +370,7 @@
               "x-kubernetes-list-type": "atomic"
             },
             "matchPolicy": {
-              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+              "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
               "type": [
                 "string",
                 "null"
@@ -509,7 +509,7 @@
               "x-kubernetes-map-type": "atomic"
             },
             "resourceRules": {
-              "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+              "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
               "items": {
                 "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                 "properties": {
diff --git a/master-standalone/mutatingadmissionpolicybindinglist-admissionregistration-v1alpha1.json b/master-standalone/mutatingadmissionpolicybindinglist-admissionregistration-v1alpha1.json
index 6283669132718130be6c860d285d516df597884d..7ec1c867fcefaf20115757248ba267aeb5ff683b 100644
--- a/master-standalone/mutatingadmissionpolicybindinglist-admissionregistration-v1alpha1.json
+++ b/master-standalone/mutatingadmissionpolicybindinglist-admissionregistration-v1alpha1.json
@@ -293,7 +293,7 @@
                 "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                 "properties": {
                   "excludeResourceRules": {
-                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
@@ -388,7 +388,7 @@
                     "x-kubernetes-list-type": "atomic"
                   },
                   "matchPolicy": {
-                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
                     "type": [
                       "string",
                       "null"
@@ -527,7 +527,7 @@
                     "x-kubernetes-map-type": "atomic"
                   },
                   "resourceRules": {
-                    "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+                    "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
diff --git a/master-standalone/mutatingadmissionpolicybindinglist.json b/master-standalone/mutatingadmissionpolicybindinglist.json
index a98638f6ddcbb2e2da1aac6684e77187a5c36abe..077a982e247b94d60e31f7b326fe5542f56c4b37 100644
--- a/master-standalone/mutatingadmissionpolicybindinglist.json
+++ b/master-standalone/mutatingadmissionpolicybindinglist.json
@@ -287,7 +287,7 @@
                 "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                 "properties": {
                   "excludeResourceRules": {
-                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
@@ -382,7 +382,7 @@
                     "x-kubernetes-list-type": "atomic"
                   },
                   "matchPolicy": {
-                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
                     "type": [
                       "string",
                       "null"
@@ -521,7 +521,7 @@
                     "x-kubernetes-map-type": "atomic"
                   },
                   "resourceRules": {
-                    "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+                    "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
diff --git a/master-standalone/mutatingadmissionpolicybindingspec-admissionregistration-v1alpha1.json b/master-standalone/mutatingadmissionpolicybindingspec-admissionregistration-v1alpha1.json
index d0fb8c97507845e2233f3b53dd627288ca045f85..d14d670ae9422e88f7dc11d65a130eab2b197b58 100644
--- a/master-standalone/mutatingadmissionpolicybindingspec-admissionregistration-v1alpha1.json
+++ b/master-standalone/mutatingadmissionpolicybindingspec-admissionregistration-v1alpha1.json
@@ -5,7 +5,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
@@ -100,7 +100,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": [
             "string",
             "null"
@@ -239,7 +239,7 @@
           "x-kubernetes-map-type": "atomic"
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
diff --git a/master-standalone/mutatingadmissionpolicybindingspec.json b/master-standalone/mutatingadmissionpolicybindingspec.json
index d0fb8c97507845e2233f3b53dd627288ca045f85..d14d670ae9422e88f7dc11d65a130eab2b197b58 100644
--- a/master-standalone/mutatingadmissionpolicybindingspec.json
+++ b/master-standalone/mutatingadmissionpolicybindingspec.json
@@ -5,7 +5,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
@@ -100,7 +100,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": [
             "string",
             "null"
@@ -239,7 +239,7 @@
           "x-kubernetes-map-type": "atomic"
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
diff --git a/master-standalone/mutatingadmissionpolicylist-admissionregistration-v1alpha1.json b/master-standalone/mutatingadmissionpolicylist-admissionregistration-v1alpha1.json
index d9c8ce9529679439f6349fc8dd521ac80d2e50a2..83ca4c1302da13da027ed0376e0c00f86fadd49c 100644
--- a/master-standalone/mutatingadmissionpolicylist-admissionregistration-v1alpha1.json
+++ b/master-standalone/mutatingadmissionpolicylist-admissionregistration-v1alpha1.json
@@ -333,7 +333,7 @@
                 "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                 "properties": {
                   "excludeResourceRules": {
-                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
@@ -428,7 +428,7 @@
                     "x-kubernetes-list-type": "atomic"
                   },
                   "matchPolicy": {
-                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
                     "type": [
                       "string",
                       "null"
@@ -567,7 +567,7 @@
                     "x-kubernetes-map-type": "atomic"
                   },
                   "resourceRules": {
-                    "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+                    "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
diff --git a/master-standalone/mutatingadmissionpolicylist.json b/master-standalone/mutatingadmissionpolicylist.json
index ab49c299f04165f05150e55c23599ce9ddea0c9f..ade835ce58e941324bc07ac34a8d2f9430555fd6 100644
--- a/master-standalone/mutatingadmissionpolicylist.json
+++ b/master-standalone/mutatingadmissionpolicylist.json
@@ -327,7 +327,7 @@
                 "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                 "properties": {
                   "excludeResourceRules": {
-                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+                    "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
@@ -422,7 +422,7 @@
                     "x-kubernetes-list-type": "atomic"
                   },
                   "matchPolicy": {
-                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+                    "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
                     "type": [
                       "string",
                       "null"
@@ -561,7 +561,7 @@
                     "x-kubernetes-map-type": "atomic"
                   },
                   "resourceRules": {
-                    "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+                    "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
                     "items": {
                       "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
                       "properties": {
diff --git a/master-standalone/mutatingadmissionpolicyspec-admissionregistration-v1alpha1.json b/master-standalone/mutatingadmissionpolicyspec-admissionregistration-v1alpha1.json
index 91238b5caf52aa68ed5983c12492950e8e7dd9bb..392591c46554c0aeba86f787d1a166162425d017 100644
--- a/master-standalone/mutatingadmissionpolicyspec-admissionregistration-v1alpha1.json
+++ b/master-standalone/mutatingadmissionpolicyspec-admissionregistration-v1alpha1.json
@@ -45,7 +45,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
@@ -140,7 +140,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": [
             "string",
             "null"
@@ -279,7 +279,7 @@
           "x-kubernetes-map-type": "atomic"
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
diff --git a/master-standalone/mutatingadmissionpolicyspec.json b/master-standalone/mutatingadmissionpolicyspec.json
index 91238b5caf52aa68ed5983c12492950e8e7dd9bb..392591c46554c0aeba86f787d1a166162425d017 100644
--- a/master-standalone/mutatingadmissionpolicyspec.json
+++ b/master-standalone/mutatingadmissionpolicyspec.json
@@ -45,7 +45,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
@@ -140,7 +140,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": [
             "string",
             "null"
@@ -279,7 +279,7 @@
           "x-kubernetes-map-type": "atomic"
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "description": "NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.",
             "properties": {
diff --git a/master-standalone/node-v1.json b/master-standalone/node-v1.json
index 62103a0e4817a04d57e15a17b5e74e9236f577d1..bbd2dc29104ef07bfe80080c7a9d675d10ba26b2 100644
--- a/master-standalone/node-v1.json
+++ b/master-standalone/node-v1.json
@@ -846,6 +846,23 @@
               "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
               "type": "string"
             },
+            "swap": {
+              "description": "NodeSwapStatus represents swap memory information.",
+              "properties": {
+                "capacity": {
+                  "description": "Total amount of swap memory in bytes.",
+                  "format": "int64",
+                  "type": [
+                    "integer",
+                    "null"
+                  ]
+                }
+              },
+              "type": [
+                "object",
+                "null"
+              ]
+            },
             "systemUUID": {
               "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
               "type": "string"
diff --git a/master-standalone/node.json b/master-standalone/node.json
index c58fabed35047557716311c7a9fdd710c52ea1e1..69b1031214d2396fa33daf51bcb5b7d691ecaf9d 100644
--- a/master-standalone/node.json
+++ b/master-standalone/node.json
@@ -843,6 +843,23 @@
               "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
               "type": "string"
             },
+            "swap": {
+              "description": "NodeSwapStatus represents swap memory information.",
+              "properties": {
+                "capacity": {
+                  "description": "Total amount of swap memory in bytes.",
+                  "format": "int64",
+                  "type": [
+                    "integer",
+                    "null"
+                  ]
+                }
+              },
+              "type": [
+                "object",
+                "null"
+              ]
+            },
             "systemUUID": {
               "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
               "type": "string"
diff --git a/master-standalone/nodelist-v1.json b/master-standalone/nodelist-v1.json
index fbaa22c383bc491e107540ddda6ee8f14834fd2e..3cae7480b0f188074ba3600d4715a5356fb7e70c 100644
--- a/master-standalone/nodelist-v1.json
+++ b/master-standalone/nodelist-v1.json
@@ -861,6 +861,23 @@
                     "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
                     "type": "string"
                   },
+                  "swap": {
+                    "description": "NodeSwapStatus represents swap memory information.",
+                    "properties": {
+                      "capacity": {
+                        "description": "Total amount of swap memory in bytes.",
+                        "format": "int64",
+                        "type": [
+                          "integer",
+                          "null"
+                        ]
+                      }
+                    },
+                    "type": [
+                      "object",
+                      "null"
+                    ]
+                  },
                   "systemUUID": {
                     "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
                     "type": "string"
diff --git a/master-standalone/nodelist.json b/master-standalone/nodelist.json
index 0296359bcb541d116a06a0f5c94ed0bb350f3894..99fd291ac245b1b9a9d07f1d925a92da23fededa 100644
--- a/master-standalone/nodelist.json
+++ b/master-standalone/nodelist.json
@@ -855,6 +855,23 @@
                     "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
                     "type": "string"
                   },
+                  "swap": {
+                    "description": "NodeSwapStatus represents swap memory information.",
+                    "properties": {
+                      "capacity": {
+                        "description": "Total amount of swap memory in bytes.",
+                        "format": "int64",
+                        "type": [
+                          "integer",
+                          "null"
+                        ]
+                      }
+                    },
+                    "type": [
+                      "object",
+                      "null"
+                    ]
+                  },
                   "systemUUID": {
                     "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
                     "type": "string"
diff --git a/master-standalone/nodestatus-v1.json b/master-standalone/nodestatus-v1.json
index 9737f260482de6e61dd7d3e4b50c407c3e77de04..1134c35a5b1be9a7cedf69e9540ada9a70a8cb1a 100644
--- a/master-standalone/nodestatus-v1.json
+++ b/master-standalone/nodestatus-v1.json
@@ -428,6 +428,23 @@
           "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
           "type": "string"
         },
+        "swap": {
+          "description": "NodeSwapStatus represents swap memory information.",
+          "properties": {
+            "capacity": {
+              "description": "Total amount of swap memory in bytes.",
+              "format": "int64",
+              "type": [
+                "integer",
+                "null"
+              ]
+            }
+          },
+          "type": [
+            "object",
+            "null"
+          ]
+        },
         "systemUUID": {
           "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
           "type": "string"
diff --git a/master-standalone/nodestatus.json b/master-standalone/nodestatus.json
index 9737f260482de6e61dd7d3e4b50c407c3e77de04..1134c35a5b1be9a7cedf69e9540ada9a70a8cb1a 100644
--- a/master-standalone/nodestatus.json
+++ b/master-standalone/nodestatus.json
@@ -428,6 +428,23 @@
           "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
           "type": "string"
         },
+        "swap": {
+          "description": "NodeSwapStatus represents swap memory information.",
+          "properties": {
+            "capacity": {
+              "description": "Total amount of swap memory in bytes.",
+              "format": "int64",
+              "type": [
+                "integer",
+                "null"
+              ]
+            }
+          },
+          "type": [
+            "object",
+            "null"
+          ]
+        },
         "systemUUID": {
           "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
           "type": "string"
diff --git a/master-standalone/nodeswapstatus-v1.json b/master-standalone/nodeswapstatus-v1.json
new file mode 100644
index 0000000000000000000000000000000000000000..dbf8c04ebc3f36b20337692a888378d3c2007a6e
--- /dev/null
+++ b/master-standalone/nodeswapstatus-v1.json
@@ -0,0 +1,15 @@
+{
+  "description": "NodeSwapStatus represents swap memory information.",
+  "properties": {
+    "capacity": {
+      "description": "Total amount of swap memory in bytes.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    }
+  },
+  "type": "object",
+  "$schema": "http://json-schema.org/schema#"
+}
\ No newline at end of file
diff --git a/master-standalone/nodeswapstatus.json b/master-standalone/nodeswapstatus.json
new file mode 100644
index 0000000000000000000000000000000000000000..dbf8c04ebc3f36b20337692a888378d3c2007a6e
--- /dev/null
+++ b/master-standalone/nodeswapstatus.json
@@ -0,0 +1,15 @@
+{
+  "description": "NodeSwapStatus represents swap memory information.",
+  "properties": {
+    "capacity": {
+      "description": "Total amount of swap memory in bytes.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    }
+  },
+  "type": "object",
+  "$schema": "http://json-schema.org/schema#"
+}
\ No newline at end of file
diff --git a/master-standalone/nodesysteminfo-v1.json b/master-standalone/nodesysteminfo-v1.json
index 2b8bb78400d91f0011b7ca80d30a85c4047ae5c1..66aa0998edc322adf24239133283cbbe1ccb375a 100644
--- a/master-standalone/nodesysteminfo-v1.json
+++ b/master-standalone/nodesysteminfo-v1.json
@@ -64,6 +64,23 @@
         "null"
       ]
     },
+    "swap": {
+      "description": "NodeSwapStatus represents swap memory information.",
+      "properties": {
+        "capacity": {
+          "description": "Total amount of swap memory in bytes.",
+          "format": "int64",
+          "type": [
+            "integer",
+            "null"
+          ]
+        }
+      },
+      "type": [
+        "object",
+        "null"
+      ]
+    },
     "systemUUID": {
       "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
       "type": [
diff --git a/master-standalone/nodesysteminfo.json b/master-standalone/nodesysteminfo.json
index 2b8bb78400d91f0011b7ca80d30a85c4047ae5c1..66aa0998edc322adf24239133283cbbe1ccb375a 100644
--- a/master-standalone/nodesysteminfo.json
+++ b/master-standalone/nodesysteminfo.json
@@ -64,6 +64,23 @@
         "null"
       ]
     },
+    "swap": {
+      "description": "NodeSwapStatus represents swap memory information.",
+      "properties": {
+        "capacity": {
+          "description": "Total amount of swap memory in bytes.",
+          "format": "int64",
+          "type": [
+            "integer",
+            "null"
+          ]
+        }
+      },
+      "type": [
+        "object",
+        "null"
+      ]
+    },
     "systemUUID": {
       "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
       "type": [
diff --git a/master-standalone/pod-v1.json b/master-standalone/pod-v1.json
index 8e856fc2f65403e1edc22454704620d38715170a..b93e6446dc0777b049152deb58fd7b88d71b01e4 100644
--- a/master-standalone/pod-v1.json
+++ b/master-standalone/pod-v1.json
@@ -12059,7 +12059,7 @@
           ]
         },
         "resize": {
-          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
           "type": [
             "string",
             "null"
diff --git a/master-standalone/pod.json b/master-standalone/pod.json
index 0a60f0227579d6319fb929db9dfc9bbe5d8ff3f4..0ce347e37b295a262fcc6df105c0da6216a03be1 100644
--- a/master-standalone/pod.json
+++ b/master-standalone/pod.json
@@ -12056,7 +12056,7 @@
           ]
         },
         "resize": {
-          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
           "type": [
             "string",
             "null"
diff --git a/master-standalone/podlist-v1.json b/master-standalone/podlist-v1.json
index cc6c117c6eadfecafa08716ef2e5f64654fb249d..bd5b0244401a24c9bc60187412615e69a79bf273 100644
--- a/master-standalone/podlist-v1.json
+++ b/master-standalone/podlist-v1.json
@@ -12074,7 +12074,7 @@
                 ]
               },
               "resize": {
-                "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+                "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
                 "type": [
                   "string",
                   "null"
diff --git a/master-standalone/podlist.json b/master-standalone/podlist.json
index 25abb606fe7ccf9421b55c74c8c39a7180918f31..7901491f2e300e83c88ef18de85f6ab4a1d358ce 100644
--- a/master-standalone/podlist.json
+++ b/master-standalone/podlist.json
@@ -12068,7 +12068,7 @@
                 ]
               },
               "resize": {
-                "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+                "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
                 "type": [
                   "string",
                   "null"
diff --git a/master-standalone/podstatus-v1.json b/master-standalone/podstatus-v1.json
index ab49a4dd2ce936435a72ee546e267809316e29fb..85db0ccfc776024e79dcb5e71d9c3a1e3bf5feb0 100644
--- a/master-standalone/podstatus-v1.json
+++ b/master-standalone/podstatus-v1.json
@@ -1839,7 +1839,7 @@
       ]
     },
     "resize": {
-      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
       "type": [
         "string",
         "null"
diff --git a/master-standalone/podstatus.json b/master-standalone/podstatus.json
index ab49a4dd2ce936435a72ee546e267809316e29fb..85db0ccfc776024e79dcb5e71d9c3a1e3bf5feb0 100644
--- a/master-standalone/podstatus.json
+++ b/master-standalone/podstatus.json
@@ -1839,7 +1839,7 @@
       ]
     },
     "resize": {
-      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
       "type": [
         "string",
         "null"
diff --git a/master-standalone/volumeattachment-storage-v1.json b/master-standalone/volumeattachment-storage-v1.json
index 5ac4c11d529cd01584558ec8992b7b650e4f640d..c7b118b83dbfa21e5f348c97378218612d755eea 100644
--- a/master-standalone/volumeattachment-storage-v1.json
+++ b/master-standalone/volumeattachment-storage-v1.json
@@ -1818,6 +1818,14 @@
         "attachError": {
           "description": "VolumeError captures an error encountered during a volume operation.",
           "properties": {
+            "errorCode": {
+              "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+              "format": "int32",
+              "type": [
+                "integer",
+                "null"
+              ]
+            },
             "message": {
               "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
               "type": [
@@ -1859,6 +1867,14 @@
         "detachError": {
           "description": "VolumeError captures an error encountered during a volume operation.",
           "properties": {
+            "errorCode": {
+              "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+              "format": "int32",
+              "type": [
+                "integer",
+                "null"
+              ]
+            },
             "message": {
               "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
               "type": [
diff --git a/master-standalone/volumeattachment.json b/master-standalone/volumeattachment.json
index cf49d794fefeb10b7350196e0a208005f55678f9..d652469eb1c1d8d7e82c3f85ad03f9398426cf95 100644
--- a/master-standalone/volumeattachment.json
+++ b/master-standalone/volumeattachment.json
@@ -1815,6 +1815,14 @@
         "attachError": {
           "description": "VolumeError captures an error encountered during a volume operation.",
           "properties": {
+            "errorCode": {
+              "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+              "format": "int32",
+              "type": [
+                "integer",
+                "null"
+              ]
+            },
             "message": {
               "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
               "type": [
@@ -1856,6 +1864,14 @@
         "detachError": {
           "description": "VolumeError captures an error encountered during a volume operation.",
           "properties": {
+            "errorCode": {
+              "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+              "format": "int32",
+              "type": [
+                "integer",
+                "null"
+              ]
+            },
             "message": {
               "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
               "type": [
diff --git a/master-standalone/volumeattachmentlist-storage-v1.json b/master-standalone/volumeattachmentlist-storage-v1.json
index 4ffc2df64b8535b7d91c085924960b227c7883b2..8285c31702e95a0433129487fbdb8a6e2630b96c 100644
--- a/master-standalone/volumeattachmentlist-storage-v1.json
+++ b/master-standalone/volumeattachmentlist-storage-v1.json
@@ -1830,6 +1830,14 @@
               "attachError": {
                 "description": "VolumeError captures an error encountered during a volume operation.",
                 "properties": {
+                  "errorCode": {
+                    "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+                    "format": "int32",
+                    "type": [
+                      "integer",
+                      "null"
+                    ]
+                  },
                   "message": {
                     "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
                     "type": [
@@ -1871,6 +1879,14 @@
               "detachError": {
                 "description": "VolumeError captures an error encountered during a volume operation.",
                 "properties": {
+                  "errorCode": {
+                    "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+                    "format": "int32",
+                    "type": [
+                      "integer",
+                      "null"
+                    ]
+                  },
                   "message": {
                     "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
                     "type": [
diff --git a/master-standalone/volumeattachmentlist.json b/master-standalone/volumeattachmentlist.json
index f899ef2fa1adf65d6c851438718057514e685662..79d6a7a6b6c06b8da5d73196d3b9ff6a1cecdbd0 100644
--- a/master-standalone/volumeattachmentlist.json
+++ b/master-standalone/volumeattachmentlist.json
@@ -1824,6 +1824,14 @@
               "attachError": {
                 "description": "VolumeError captures an error encountered during a volume operation.",
                 "properties": {
+                  "errorCode": {
+                    "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+                    "format": "int32",
+                    "type": [
+                      "integer",
+                      "null"
+                    ]
+                  },
                   "message": {
                     "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
                     "type": [
@@ -1865,6 +1873,14 @@
               "detachError": {
                 "description": "VolumeError captures an error encountered during a volume operation.",
                 "properties": {
+                  "errorCode": {
+                    "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+                    "format": "int32",
+                    "type": [
+                      "integer",
+                      "null"
+                    ]
+                  },
                   "message": {
                     "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
                     "type": [
diff --git a/master-standalone/volumeattachmentstatus-storage-v1.json b/master-standalone/volumeattachmentstatus-storage-v1.json
index 20746e6c88e92e4f3493dba59317a3f40b601228..a1249bf9151403a97ae44f12b51e41199c418264 100644
--- a/master-standalone/volumeattachmentstatus-storage-v1.json
+++ b/master-standalone/volumeattachmentstatus-storage-v1.json
@@ -4,6 +4,14 @@
     "attachError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": [
@@ -48,6 +56,14 @@
     "detachError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": [
diff --git a/master-standalone/volumeattachmentstatus.json b/master-standalone/volumeattachmentstatus.json
index 20746e6c88e92e4f3493dba59317a3f40b601228..a1249bf9151403a97ae44f12b51e41199c418264 100644
--- a/master-standalone/volumeattachmentstatus.json
+++ b/master-standalone/volumeattachmentstatus.json
@@ -4,6 +4,14 @@
     "attachError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": [
@@ -48,6 +56,14 @@
     "detachError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": [
+            "integer",
+            "null"
+          ]
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": [
diff --git a/master-standalone/volumeerror-storage-v1.json b/master-standalone/volumeerror-storage-v1.json
index 3c45e32003d80b2fc7d2bee406eb332521b3b71e..49498cf22f72b0e04898fb1253f3b27f4db5c28a 100644
--- a/master-standalone/volumeerror-storage-v1.json
+++ b/master-standalone/volumeerror-storage-v1.json
@@ -1,6 +1,14 @@
 {
   "description": "VolumeError captures an error encountered during a volume operation.",
   "properties": {
+    "errorCode": {
+      "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+      "format": "int32",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "message": {
       "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
       "type": [
diff --git a/master-standalone/volumeerror.json b/master-standalone/volumeerror.json
index 3c45e32003d80b2fc7d2bee406eb332521b3b71e..49498cf22f72b0e04898fb1253f3b27f4db5c28a 100644
--- a/master-standalone/volumeerror.json
+++ b/master-standalone/volumeerror.json
@@ -1,6 +1,14 @@
 {
   "description": "VolumeError captures an error encountered during a volume operation.",
   "properties": {
+    "errorCode": {
+      "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+      "format": "int32",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "message": {
       "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
       "type": [
diff --git a/master/_definitions.json b/master/_definitions.json
index 45efe750ad29e0b6fcf339916a38ba85405cc8f4..2b27b1bee1c0219d8585645139ec2b5012f2b346 100644
--- a/master/_definitions.json
+++ b/master/_definitions.json
@@ -931,7 +931,7 @@
       "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "properties": {
         "excludeResourceRules": {
-          "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+          "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
           "items": {
             "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
           },
@@ -939,7 +939,7 @@
           "x-kubernetes-list-type": "atomic"
         },
         "matchPolicy": {
-          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+          "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
           "type": "string"
         },
         "namespaceSelector": {
@@ -948,10 +948,10 @@
         },
         "objectSelector": {
           "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector",
-          "description": "ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
+          "description": "ObjectSelector decides whether to run the policy based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the policy's expression (CEL), and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
         },
         "resourceRules": {
-          "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+          "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
           "items": {
             "$ref": "#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
           },
@@ -8952,6 +8952,17 @@
       },
       "type": "object"
     },
+    "io.k8s.api.core.v1.NodeSwapStatus": {
+      "description": "NodeSwapStatus represents swap memory information.",
+      "properties": {
+        "capacity": {
+          "description": "Total amount of swap memory in bytes.",
+          "format": "int64",
+          "type": "integer"
+        }
+      },
+      "type": "object"
+    },
     "io.k8s.api.core.v1.NodeSystemInfo": {
       "description": "NodeSystemInfo is a set of ids/uuids to uniquely identify the node.",
       "properties": {
@@ -8991,6 +9002,10 @@
           "description": "OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).",
           "type": "string"
         },
+        "swap": {
+          "$ref": "#/definitions/io.k8s.api.core.v1.NodeSwapStatus",
+          "description": "Swap Info reported by the node."
+        },
         "systemUUID": {
           "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
           "type": "string"
@@ -10339,7 +10354,7 @@
           "type": "string"
         },
         "resize": {
-          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+          "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
           "type": "string"
         },
         "resourceClaimStatuses": {
@@ -17226,6 +17241,11 @@
           "description": "fsGroupPolicy defines if the underlying volume supports changing ownership and permission of the volume before being mounted. Refer to the specific FSGroupPolicy values for additional details.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.\n\nDefaults to ReadWriteOnceWithFSType, which will examine each volume to determine if Kubernetes should modify ownership and permissions of the volume. With the default policy the defined fsGroup will only be applied if a fstype is defined and the volume's access mode contains ReadWriteOnce.",
           "type": "string"
         },
+        "nodeAllocatableUpdatePeriodSeconds": {
+          "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+          "format": "int64",
+          "type": "integer"
+        },
         "podInfoOnMount": {
           "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
           "type": "boolean"
@@ -17742,6 +17762,11 @@
     "io.k8s.api.storage.v1.VolumeError": {
       "description": "VolumeError captures an error encountered during a volume operation.",
       "properties": {
+        "errorCode": {
+          "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+          "format": "int32",
+          "type": "integer"
+        },
         "message": {
           "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
           "type": "string"
diff --git a/master/all.json b/master/all.json
index 465cf420c3f1847a4cca5033f25deee3eba6c0a3..2b6e0fc32648ccbbe65b6a9960b72602798ad768 100644
--- a/master/all.json
+++ b/master/all.json
@@ -891,6 +891,9 @@
     {
       "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/master/_definitions.json#/definitions/io.k8s.api.core.v1.NodeStatus"
     },
+    {
+      "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/master/_definitions.json#/definitions/io.k8s.api.core.v1.NodeSwapStatus"
+    },
     {
       "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/master/_definitions.json#/definitions/io.k8s.api.core.v1.NodeSystemInfo"
     },
diff --git a/master/csidriverspec-storage-v1.json b/master/csidriverspec-storage-v1.json
index a36b952e772f99f358f221c3479b61bcb34ecdca..688b7fb5cb57284029508b36d21b7d7aa954fcdf 100644
--- a/master/csidriverspec-storage-v1.json
+++ b/master/csidriverspec-storage-v1.json
@@ -15,6 +15,14 @@
         "null"
       ]
     },
+    "nodeAllocatableUpdatePeriodSeconds": {
+      "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "podInfoOnMount": {
       "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
       "type": [
diff --git a/master/csidriverspec.json b/master/csidriverspec.json
index a36b952e772f99f358f221c3479b61bcb34ecdca..688b7fb5cb57284029508b36d21b7d7aa954fcdf 100644
--- a/master/csidriverspec.json
+++ b/master/csidriverspec.json
@@ -15,6 +15,14 @@
         "null"
       ]
     },
+    "nodeAllocatableUpdatePeriodSeconds": {
+      "description": "nodeAllocatableUpdatePeriodSeconds specifies the interval between periodic updates of the CSINode allocatable capacity for this driver. When set, both periodic updates and updates triggered by capacity-related failures are enabled. If not set, no updates occur (neither periodic nor upon detecting capacity-related failures), and the allocatable.count remains static. The minimum allowed value for this field is 10 seconds.\n\nThis is an alpha feature and requires the MutableCSINodeAllocatableCount feature gate to be enabled.\n\nThis field is mutable.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "podInfoOnMount": {
       "description": "podInfoOnMount indicates this CSI volume driver requires additional pod information (like podName, podUID, etc.) during mount operations, if set to true. If set to false, pod information will not be passed on mount. Default is false.\n\nThe CSI driver specifies podInfoOnMount as part of driver deployment. If true, Kubelet will pass pod information as VolumeContext in the CSI NodePublishVolume() calls. The CSI driver is responsible for parsing and validating the information passed in as VolumeContext.\n\nThe following VolumeContext will be passed if podInfoOnMount is set to true. This list might grow, but the prefix will be used. \"csi.storage.k8s.io/pod.name\": pod.Name \"csi.storage.k8s.io/pod.namespace\": pod.Namespace \"csi.storage.k8s.io/pod.uid\": string(pod.UID) \"csi.storage.k8s.io/ephemeral\": \"true\" if the volume is an ephemeral inline volume\n                                defined by a CSIVolumeSource, otherwise \"false\"\n\n\"csi.storage.k8s.io/ephemeral\" is a new feature in Kubernetes 1.16. It is only required for drivers which support both the \"Persistent\" and \"Ephemeral\" VolumeLifecycleMode. Other drivers can leave pod info disabled and/or ignore this field. As Kubernetes 1.15 doesn't support this field, drivers can only support one mode when deployed on such a cluster and the deployment determines which mode that is, for example via a command line parameter of the driver.\n\nThis field was immutable in Kubernetes < 1.29 and now is mutable.",
       "type": [
diff --git a/master/matchresources-admissionregistration-v1alpha1.json b/master/matchresources-admissionregistration-v1alpha1.json
index 7e558fd5e4294333d151401b04c06702a7af829a..b0bca15b4ae2466125bda299c5f6216b35b27321 100644
--- a/master/matchresources-admissionregistration-v1alpha1.json
+++ b/master/matchresources-admissionregistration-v1alpha1.json
@@ -2,7 +2,7 @@
   "description": "MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
   "properties": {
     "excludeResourceRules": {
-      "description": "ExcludeResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
+      "description": "ExcludeResourceRules describes what operations on what resources/subresources the policy should not care about. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)",
       "items": {
         "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/master/_definitions.json#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
       },
@@ -13,7 +13,7 @@
       "x-kubernetes-list-type": "atomic"
     },
     "matchPolicy": {
-      "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.\n\nDefaults to \"Equivalent\"",
+      "description": "matchPolicy defines how the \"MatchResources\" list is used to match incoming requests. Allowed values are \"Exact\" or \"Equivalent\".\n\n- Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups.\n\n- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and \"rules\" only included `apiGroups:[\"apps\"], apiVersions:[\"v1\"], resources: [\"deployments\"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary.\n\nDefaults to \"Equivalent\"",
       "type": [
         "string",
         "null"
@@ -25,10 +25,10 @@
     },
     "objectSelector": {
       "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/master/_definitions.json#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.LabelSelector",
-      "description": "ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
+      "description": "ObjectSelector decides whether to run the policy based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the policy's expression (CEL), and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything."
     },
     "resourceRules": {
-      "description": "ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.",
+      "description": "ResourceRules describes what operations on what resources/subresources the admission policy matches. The policy cares about an operation if it matches _any_ Rule.",
       "items": {
         "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/master/_definitions.json#/definitions/io.k8s.api.admissionregistration.v1alpha1.NamedRuleWithOperations"
       },
diff --git a/master/nodeswapstatus-v1.json b/master/nodeswapstatus-v1.json
new file mode 100644
index 0000000000000000000000000000000000000000..dbf8c04ebc3f36b20337692a888378d3c2007a6e
--- /dev/null
+++ b/master/nodeswapstatus-v1.json
@@ -0,0 +1,15 @@
+{
+  "description": "NodeSwapStatus represents swap memory information.",
+  "properties": {
+    "capacity": {
+      "description": "Total amount of swap memory in bytes.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    }
+  },
+  "type": "object",
+  "$schema": "http://json-schema.org/schema#"
+}
\ No newline at end of file
diff --git a/master/nodeswapstatus.json b/master/nodeswapstatus.json
new file mode 100644
index 0000000000000000000000000000000000000000..dbf8c04ebc3f36b20337692a888378d3c2007a6e
--- /dev/null
+++ b/master/nodeswapstatus.json
@@ -0,0 +1,15 @@
+{
+  "description": "NodeSwapStatus represents swap memory information.",
+  "properties": {
+    "capacity": {
+      "description": "Total amount of swap memory in bytes.",
+      "format": "int64",
+      "type": [
+        "integer",
+        "null"
+      ]
+    }
+  },
+  "type": "object",
+  "$schema": "http://json-schema.org/schema#"
+}
\ No newline at end of file
diff --git a/master/nodesysteminfo-v1.json b/master/nodesysteminfo-v1.json
index 2b8bb78400d91f0011b7ca80d30a85c4047ae5c1..db20ffd578c566a45cd81f265fcbae21d197c4d2 100644
--- a/master/nodesysteminfo-v1.json
+++ b/master/nodesysteminfo-v1.json
@@ -64,6 +64,10 @@
         "null"
       ]
     },
+    "swap": {
+      "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/master/_definitions.json#/definitions/io.k8s.api.core.v1.NodeSwapStatus",
+      "description": "Swap Info reported by the node."
+    },
     "systemUUID": {
       "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
       "type": [
diff --git a/master/nodesysteminfo.json b/master/nodesysteminfo.json
index 2b8bb78400d91f0011b7ca80d30a85c4047ae5c1..db20ffd578c566a45cd81f265fcbae21d197c4d2 100644
--- a/master/nodesysteminfo.json
+++ b/master/nodesysteminfo.json
@@ -64,6 +64,10 @@
         "null"
       ]
     },
+    "swap": {
+      "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/master/_definitions.json#/definitions/io.k8s.api.core.v1.NodeSwapStatus",
+      "description": "Swap Info reported by the node."
+    },
     "systemUUID": {
       "description": "SystemUUID reported by the node. For unique machine identification MachineID is preferred. This field is specific to Red Hat hosts https://access.redhat.com/documentation/en-us/red_hat_subscription_management/1/html/rhsm/uuid",
       "type": [
diff --git a/master/podstatus-v1.json b/master/podstatus-v1.json
index 8badf0bcb8506b2acd159eb2ed991ca392a5592c..a50cf410d10f33aa3805bf6d6f6c23a0c8113117 100644
--- a/master/podstatus-v1.json
+++ b/master/podstatus-v1.json
@@ -137,7 +137,7 @@
       ]
     },
     "resize": {
-      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
       "type": [
         "string",
         "null"
diff --git a/master/podstatus.json b/master/podstatus.json
index 8badf0bcb8506b2acd159eb2ed991ca392a5592c..a50cf410d10f33aa3805bf6d6f6c23a0c8113117 100644
--- a/master/podstatus.json
+++ b/master/podstatus.json
@@ -137,7 +137,7 @@
       ]
     },
     "resize": {
-      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\"",
+      "description": "Status of resources resize desired for pod's containers. It is empty if no resources resize is pending. Any changes to container resources will automatically set this to \"Proposed\" Deprecated: Resize status is moved to two pod conditions PodResizePending and PodResizeInProgress. PodResizePending will track states where the spec has been resized, but the Kubelet has not yet allocated the resources. PodResizeInProgress will track in-progress resizes, and should be present whenever allocated resources != acknowledged resources.",
       "type": [
         "string",
         "null"
diff --git a/master/volumeerror-storage-v1.json b/master/volumeerror-storage-v1.json
index 3ec6ef3d744d846a70eb4c107f79569f8d4b613c..9328de55e21743b8e7779ef0a87a70e46b3b8618 100644
--- a/master/volumeerror-storage-v1.json
+++ b/master/volumeerror-storage-v1.json
@@ -1,6 +1,14 @@
 {
   "description": "VolumeError captures an error encountered during a volume operation.",
   "properties": {
+    "errorCode": {
+      "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+      "format": "int32",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "message": {
       "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
       "type": [
diff --git a/master/volumeerror.json b/master/volumeerror.json
index 3ec6ef3d744d846a70eb4c107f79569f8d4b613c..9328de55e21743b8e7779ef0a87a70e46b3b8618 100644
--- a/master/volumeerror.json
+++ b/master/volumeerror.json
@@ -1,6 +1,14 @@
 {
   "description": "VolumeError captures an error encountered during a volume operation.",
   "properties": {
+    "errorCode": {
+      "description": "errorCode is a numeric gRPC code representing the error encountered during Attach or Detach operations.\n\nThis is an optional, alpha field that requires the MutableCSINodeAllocatableCount feature gate being enabled to be set.",
+      "format": "int32",
+      "type": [
+        "integer",
+        "null"
+      ]
+    },
     "message": {
       "description": "message represents the error encountered during Attach or Detach operation. This string may be logged, so it should not contain sensitive information.",
       "type": [