diff --git a/clients/gke_hub/README.md b/clients/gke_hub/README.md
index 48243fcac6..56e6bc417f 100644
--- a/clients/gke_hub/README.md
+++ b/clients/gke_hub/README.md
@@ -11,7 +11,7 @@ Install this package from [Hex](https://hex.pm) by adding
 
 ```elixir
 def deps do
-  [{:google_api_gke_hub, "~> 0.16"}]
+  [{:google_api_gke_hub, "~> 0.17"}]
 end
 ```
 
diff --git a/clients/gke_hub/lib/google_api/gke_hub/v1/metadata.ex b/clients/gke_hub/lib/google_api/gke_hub/v1/metadata.ex
index 86a01c80d0..a768ab90f0 100644
--- a/clients/gke_hub/lib/google_api/gke_hub/v1/metadata.ex
+++ b/clients/gke_hub/lib/google_api/gke_hub/v1/metadata.ex
@@ -20,7 +20,7 @@ defmodule GoogleApi.GKEHub.V1 do
   API client metadata for GoogleApi.GKEHub.V1.
   """
 
-  @discovery_revision "20241025"
+  @discovery_revision "20241108"
 
   def discovery_revision(), do: @discovery_revision
 end
diff --git a/clients/gke_hub/lib/google_api/gke_hub/v1/model/authority.ex b/clients/gke_hub/lib/google_api/gke_hub/v1/model/authority.ex
index c3c0adf446..b05a2254af 100644
--- a/clients/gke_hub/lib/google_api/gke_hub/v1/model/authority.ex
+++ b/clients/gke_hub/lib/google_api/gke_hub/v1/model/authority.ex
@@ -24,6 +24,8 @@ defmodule GoogleApi.GKEHub.V1.Model.Authority do
   *   `identityProvider` (*type:* `String.t`, *default:* `nil`) - Output only. An identity provider that reflects the `issuer` in the workload identity pool.
   *   `issuer` (*type:* `String.t`, *default:* `nil`) - Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and be a valid URL with length <2000 characters, it must use `location` rather than `zone` for GKE clusters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing `issuer` disables Workload Identity. `issuer` cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).
   *   `oidcJwks` (*type:* `String.t`, *default:* `nil`) - Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517). When this field is set, OIDC discovery will NOT be performed on `issuer`, and instead OIDC tokens will be validated using this field.
+  *   `scopeTenancyIdentityProvider` (*type:* `String.t`, *default:* `nil`) - Optional. Output only. The identity provider for the scope-tenancy workload identity pool.
+  *   `scopeTenancyWorkloadIdentityPool` (*type:* `String.t`, *default:* `nil`) - Optional. Output only. The name of the scope-tenancy workload identity pool. This pool is set in the fleet-level feature.
   *   `workloadIdentityPool` (*type:* `String.t`, *default:* `nil`) - Output only. The name of the workload identity pool in which `issuer` will be recognized. There is a single Workload Identity Pool per Hub that is shared between all Memberships that belong to that Hub. For a Hub hosted in {PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`, although this is subject to change in newer versions of this API.
   """
 
@@ -33,12 +35,16 @@ defmodule GoogleApi.GKEHub.V1.Model.Authority do
           :identityProvider => String.t() | nil,
           :issuer => String.t() | nil,
           :oidcJwks => String.t() | nil,
+          :scopeTenancyIdentityProvider => String.t() | nil,
+          :scopeTenancyWorkloadIdentityPool => String.t() | nil,
           :workloadIdentityPool => String.t() | nil
         }
 
   field(:identityProvider)
   field(:issuer)
   field(:oidcJwks)
+  field(:scopeTenancyIdentityProvider)
+  field(:scopeTenancyWorkloadIdentityPool)
   field(:workloadIdentityPool)
 end
 
diff --git a/clients/gke_hub/mix.exs b/clients/gke_hub/mix.exs
index da61936191..6e528927a1 100644
--- a/clients/gke_hub/mix.exs
+++ b/clients/gke_hub/mix.exs
@@ -18,7 +18,7 @@
 defmodule GoogleApi.GKEHub.Mixfile do
   use Mix.Project
 
-  @version "0.16.0"
+  @version "0.17.0"
 
   def project() do
     [