diff --git a/api-specs/Konnect/control-planes-config/control-planes-config.yaml b/api-specs/Konnect/control-planes-config/control-planes-config.yaml
index 1471d242949..6aedac93d1c 100644
--- a/api-specs/Konnect/control-planes-config/control-planes-config.yaml
+++ b/api-specs/Konnect/control-planes-config/control-planes-config.yaml
@@ -3943,6 +3943,14 @@ components:
     ACLWithoutParents:
       type: object
       properties:
+        consumer:
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
         created_at:
           description: Unix epoch when the resource was created.
           type: integer
@@ -4001,6 +4009,14 @@ components:
     BasicAuthWithoutParents:
       type: object
       properties:
+        consumer:
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
         created_at:
           description: Unix epoch when the resource was created.
           type: integer
@@ -4259,6 +4275,14 @@ components:
     HMACAuthWithoutParents:
       type: object
       properties:
+        consumer:
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
         created_at:
           description: Unix epoch when the resource was created.
           type: integer
@@ -4360,6 +4384,14 @@ components:
             - PS512
             - EdDSA
           nullable: true
+        consumer:
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
         created_at:
           description: Unix epoch when the resource was created.
           type: integer
@@ -4483,6 +4515,14 @@ components:
     KeyAuthWithoutParents:
       type: object
       properties:
+        consumer:
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
         created_at:
           description: Unix epoch when the resource was created.
           type: integer
@@ -4642,6 +4682,14 @@ components:
             id:
               type: string
           x-foreign: true
+        consumer:
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
         created_at:
           description: Unix epoch when the resource was created.
           type: integer
@@ -4809,6 +4857,23 @@ components:
           description: 'The configuration properties for the Plugin which can be found on the plugins documentation page in the [Kong Hub](https://docs.konghq.com/hub/).'
           type: object
           additionalProperties: true
+        consumer:
+          description: 'If set, the plugin will activate only for requests where the specified has been authenticated. (Note that some plugins can not be restricted to consumers this way.). Leave unset for the plugin to activate regardless of the authenticated Consumer.'
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
+        consumer_group:
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
         created_at:
           description: Unix epoch when the resource was created.
           type: integer
@@ -4867,6 +4932,24 @@ components:
             - http
             - https
           nullable: true
+        route:
+          description: 'If set, the plugin will only activate when receiving requests via the specified route. Leave unset for the plugin to activate regardless of the Route being used.'
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
+        service:
+          description: 'If set, the plugin will only activate when receiving requests via one of the routes belonging to the specified Service. Leave unset for the plugin to activate regardless of the Service being matched.'
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
         tags:
           description: An optional set of strings associated with the Plugin for grouping and filtering.
           type: array
@@ -5172,6 +5255,15 @@ components:
           type: boolean
           default: true
           nullable: true
+        service:
+          description: The Service this Route is associated to. This is where the Route proxies traffic to.
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
         snis:
           description: A list of SNIs that match this Route when using stream routing.
           type: array
@@ -5257,6 +5349,14 @@ components:
       description: 'An SNI object represents a many-to-one mapping of hostnames to a certificate. That is, a certificate object can have many hostnames associated with it; when Kong receives an SSL request, it uses the SNI field in the Client Hello to lookup the certificate object based on the SNI associated with the certificate.'
       type: object
       properties:
+        certificate:
+          description: The id (a UUID) of the certificate with which to associate the SNI hostname. The Certificate must have a valid private key associated with it to be used by the SNI object.
+          type: object
+          additionalProperties: false
+          properties:
+            id:
+              type: string
+          x-foreign: true
         created_at:
           description: Unix epoch when the resource was created.
           type: integer
@@ -5464,6 +5564,14 @@ components:
           description: Unix epoch when the resource was last updated.
           type: number
           readOnly: true
+        upstream:
+          type: object
+          additionalProperties: false
+          nullable: true
+          properties:
+            id:
+              type: string
+          x-foreign: true
         weight:
           description: 'The weight this target gets within the upstream loadbalancer (`0`-`65535`). If the hostname resolves to an SRV record, the `weight` value will be overridden by the value from the DNS record.'
           type: integer