diff --git a/containerz/containerz.pb.go b/containerz/containerz.pb.go
index 9a4425dc..95899cdf 100644
--- a/containerz/containerz.pb.go
+++ b/containerz/containerz.pb.go
@@ -126,7 +126,7 @@ func (x ListContainerResponse_Status) Number() protoreflect.EnumNumber {
 
 // Deprecated: Use ListContainerResponse_Status.Descriptor instead.
 func (ListContainerResponse_Status) EnumDescriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{14, 0}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{17, 0}
 }
 
 type Device_Permission int32
@@ -178,7 +178,7 @@ func (x Device_Permission) Number() protoreflect.EnumNumber {
 
 // Deprecated: Use Device_Permission.Descriptor instead.
 func (Device_Permission) EnumDescriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{16, 0}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{19, 0}
 }
 
 type StartContainerRequest_Location int32
@@ -230,7 +230,7 @@ func (x StartContainerRequest_Location) Number() protoreflect.EnumNumber {
 
 // Deprecated: Use StartContainerRequest_Location.Descriptor instead.
 func (StartContainerRequest_Location) EnumDescriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{17, 0}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{20, 0}
 }
 
 type StartContainerRequest_Restart_Policy int32
@@ -282,7 +282,7 @@ func (x StartContainerRequest_Restart_Policy) Number() protoreflect.EnumNumber {
 
 // Deprecated: Use StartContainerRequest_Restart_Policy.Descriptor instead.
 func (StartContainerRequest_Restart_Policy) EnumDescriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{17, 3, 0}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{20, 3, 0}
 }
 
 type LocalDriverOptions_Type int32
@@ -328,7 +328,7 @@ func (x LocalDriverOptions_Type) Number() protoreflect.EnumNumber {
 
 // Deprecated: Use LocalDriverOptions_Type.Descriptor instead.
 func (LocalDriverOptions_Type) EnumDescriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{29, 0}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{32, 0}
 }
 
 type DeployRequest struct {
@@ -338,6 +338,8 @@ type DeployRequest struct {
 	//	*DeployRequest_ImageTransfer
 	//	*DeployRequest_Content
 	//	*DeployRequest_ImageTransferEnd
+	//	*DeployRequest_SignedBundleContent
+	//	*DeployRequest_SignedBundleTransferEnd
 	Request       isDeployRequest_Request `protobuf_oneof:"request"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
@@ -407,6 +409,24 @@ func (x *DeployRequest) GetImageTransferEnd() *ImageTransferEnd {
 	return nil
 }
 
+func (x *DeployRequest) GetSignedBundleContent() []byte {
+	if x != nil {
+		if x, ok := x.Request.(*DeployRequest_SignedBundleContent); ok {
+			return x.SignedBundleContent
+		}
+	}
+	return nil
+}
+
+func (x *DeployRequest) GetSignedBundleTransferEnd() *SignedBundleTransferEnd {
+	if x != nil {
+		if x, ok := x.Request.(*DeployRequest_SignedBundleTransferEnd); ok {
+			return x.SignedBundleTransferEnd
+		}
+	}
+	return nil
+}
+
 type isDeployRequest_Request interface {
 	isDeployRequest_Request()
 }
@@ -423,21 +443,34 @@ type DeployRequest_ImageTransferEnd struct {
 	ImageTransferEnd *ImageTransferEnd `protobuf:"bytes,3,opt,name=image_transfer_end,json=imageTransferEnd,proto3,oneof"`
 }
 
+type DeployRequest_SignedBundleContent struct {
+	SignedBundleContent []byte `protobuf:"bytes,4,opt,name=signed_bundle_content,json=signedBundleContent,proto3,oneof"`
+}
+
+type DeployRequest_SignedBundleTransferEnd struct {
+	SignedBundleTransferEnd *SignedBundleTransferEnd `protobuf:"bytes,5,opt,name=signed_bundle_transfer_end,json=signedBundleTransferEnd,proto3,oneof"`
+}
+
 func (*DeployRequest_ImageTransfer) isDeployRequest_Request() {}
 
 func (*DeployRequest_Content) isDeployRequest_Request() {}
 
 func (*DeployRequest_ImageTransferEnd) isDeployRequest_Request() {}
 
+func (*DeployRequest_SignedBundleContent) isDeployRequest_Request() {}
+
+func (*DeployRequest_SignedBundleTransferEnd) isDeployRequest_Request() {}
+
 type ImageTransfer struct {
-	state          protoimpl.MessageState `protogen:"open.v1"`
-	Name           string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
-	Tag            string                 `protobuf:"bytes,2,opt,name=tag,proto3" json:"tag,omitempty"`
-	ImageSize      uint64                 `protobuf:"varint,3,opt,name=image_size,json=imageSize,proto3" json:"image_size,omitempty"`
-	RemoteDownload *common.RemoteDownload `protobuf:"bytes,4,opt,name=remote_download,json=remoteDownload,proto3" json:"remote_download,omitempty"`
-	IsPlugin       bool                   `protobuf:"varint,5,opt,name=is_plugin,json=isPlugin,proto3" json:"is_plugin,omitempty"`
-	unknownFields  protoimpl.UnknownFields
-	sizeCache      protoimpl.SizeCache
+	state            protoimpl.MessageState `protogen:"open.v1"`
+	Name             string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
+	Tag              string                 `protobuf:"bytes,2,opt,name=tag,proto3" json:"tag,omitempty"`
+	ImageSize        uint64                 `protobuf:"varint,3,opt,name=image_size,json=imageSize,proto3" json:"image_size,omitempty"`
+	RemoteDownload   *common.RemoteDownload `protobuf:"bytes,4,opt,name=remote_download,json=remoteDownload,proto3" json:"remote_download,omitempty"`
+	IsPlugin         bool                   `protobuf:"varint,5,opt,name=is_plugin,json=isPlugin,proto3" json:"is_plugin,omitempty"`
+	SignedBundleSize uint64                 `protobuf:"varint,6,opt,name=signed_bundle_size,json=signedBundleSize,proto3" json:"signed_bundle_size,omitempty"`
+	unknownFields    protoimpl.UnknownFields
+	sizeCache        protoimpl.SizeCache
 }
 
 func (x *ImageTransfer) Reset() {
@@ -505,6 +538,13 @@ func (x *ImageTransfer) GetIsPlugin() bool {
 	return false
 }
 
+func (x *ImageTransfer) GetSignedBundleSize() uint64 {
+	if x != nil {
+		return x.SignedBundleSize
+	}
+	return 0
+}
+
 type ImageTransferEnd struct {
 	state         protoimpl.MessageState `protogen:"open.v1"`
 	unknownFields protoimpl.UnknownFields
@@ -541,6 +581,42 @@ func (*ImageTransferEnd) Descriptor() ([]byte, []int) {
 	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{2}
 }
 
+type SignedBundleTransferEnd struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *SignedBundleTransferEnd) Reset() {
+	*x = SignedBundleTransferEnd{}
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *SignedBundleTransferEnd) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*SignedBundleTransferEnd) ProtoMessage() {}
+
+func (x *SignedBundleTransferEnd) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use SignedBundleTransferEnd.ProtoReflect.Descriptor instead.
+func (*SignedBundleTransferEnd) Descriptor() ([]byte, []int) {
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{3}
+}
+
 type DeployResponse struct {
 	state protoimpl.MessageState `protogen:"open.v1"`
 	// Types that are valid to be assigned to Response:
@@ -549,6 +625,8 @@ type DeployResponse struct {
 	//	*DeployResponse_ImageTransferProgress
 	//	*DeployResponse_ImageTransferSuccess
 	//	*DeployResponse_ImageTransferError
+	//	*DeployResponse_SignedBundleTransferReady
+	//	*DeployResponse_SignedBundleTransferProgress
 	Response      isDeployResponse_Response `protobuf_oneof:"response"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
@@ -556,7 +634,7 @@ type DeployResponse struct {
 
 func (x *DeployResponse) Reset() {
 	*x = DeployResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[3]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[4]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -568,7 +646,7 @@ func (x *DeployResponse) String() string {
 func (*DeployResponse) ProtoMessage() {}
 
 func (x *DeployResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[3]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[4]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -581,7 +659,7 @@ func (x *DeployResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use DeployResponse.ProtoReflect.Descriptor instead.
 func (*DeployResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{3}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{4}
 }
 
 func (x *DeployResponse) GetResponse() isDeployResponse_Response {
@@ -627,6 +705,24 @@ func (x *DeployResponse) GetImageTransferError() *status.Status {
 	return nil
 }
 
+func (x *DeployResponse) GetSignedBundleTransferReady() *SignedBundleTransferReady {
+	if x != nil {
+		if x, ok := x.Response.(*DeployResponse_SignedBundleTransferReady); ok {
+			return x.SignedBundleTransferReady
+		}
+	}
+	return nil
+}
+
+func (x *DeployResponse) GetSignedBundleTransferProgress() *SignedBundleTransferProgress {
+	if x != nil {
+		if x, ok := x.Response.(*DeployResponse_SignedBundleTransferProgress); ok {
+			return x.SignedBundleTransferProgress
+		}
+	}
+	return nil
+}
+
 type isDeployResponse_Response interface {
 	isDeployResponse_Response()
 }
@@ -647,6 +743,14 @@ type DeployResponse_ImageTransferError struct {
 	ImageTransferError *status.Status `protobuf:"bytes,4,opt,name=image_transfer_error,json=imageTransferError,proto3,oneof"`
 }
 
+type DeployResponse_SignedBundleTransferReady struct {
+	SignedBundleTransferReady *SignedBundleTransferReady `protobuf:"bytes,5,opt,name=signed_bundle_transfer_ready,json=signedBundleTransferReady,proto3,oneof"`
+}
+
+type DeployResponse_SignedBundleTransferProgress struct {
+	SignedBundleTransferProgress *SignedBundleTransferProgress `protobuf:"bytes,6,opt,name=signed_bundle_transfer_progress,json=signedBundleTransferProgress,proto3,oneof"`
+}
+
 func (*DeployResponse_ImageTransferReady) isDeployResponse_Response() {}
 
 func (*DeployResponse_ImageTransferProgress) isDeployResponse_Response() {}
@@ -655,6 +759,10 @@ func (*DeployResponse_ImageTransferSuccess) isDeployResponse_Response() {}
 
 func (*DeployResponse_ImageTransferError) isDeployResponse_Response() {}
 
+func (*DeployResponse_SignedBundleTransferReady) isDeployResponse_Response() {}
+
+func (*DeployResponse_SignedBundleTransferProgress) isDeployResponse_Response() {}
+
 type ImageTransferReady struct {
 	state         protoimpl.MessageState `protogen:"open.v1"`
 	ChunkSize     int32                  `protobuf:"varint,1,opt,name=chunk_size,json=chunkSize,proto3" json:"chunk_size,omitempty"`
@@ -664,7 +772,7 @@ type ImageTransferReady struct {
 
 func (x *ImageTransferReady) Reset() {
 	*x = ImageTransferReady{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[4]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[5]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -676,7 +784,7 @@ func (x *ImageTransferReady) String() string {
 func (*ImageTransferReady) ProtoMessage() {}
 
 func (x *ImageTransferReady) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[4]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[5]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -689,7 +797,7 @@ func (x *ImageTransferReady) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ImageTransferReady.ProtoReflect.Descriptor instead.
 func (*ImageTransferReady) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{4}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{5}
 }
 
 func (x *ImageTransferReady) GetChunkSize() int32 {
@@ -708,7 +816,7 @@ type ImageTransferProgress struct {
 
 func (x *ImageTransferProgress) Reset() {
 	*x = ImageTransferProgress{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[5]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[6]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -720,7 +828,7 @@ func (x *ImageTransferProgress) String() string {
 func (*ImageTransferProgress) ProtoMessage() {}
 
 func (x *ImageTransferProgress) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[5]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[6]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -733,7 +841,7 @@ func (x *ImageTransferProgress) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ImageTransferProgress.ProtoReflect.Descriptor instead.
 func (*ImageTransferProgress) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{5}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{6}
 }
 
 func (x *ImageTransferProgress) GetBytesReceived() uint64 {
@@ -743,6 +851,94 @@ func (x *ImageTransferProgress) GetBytesReceived() uint64 {
 	return 0
 }
 
+type SignedBundleTransferReady struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	ChunkSize     int32                  `protobuf:"varint,1,opt,name=chunk_size,json=chunkSize,proto3" json:"chunk_size,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *SignedBundleTransferReady) Reset() {
+	*x = SignedBundleTransferReady{}
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *SignedBundleTransferReady) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*SignedBundleTransferReady) ProtoMessage() {}
+
+func (x *SignedBundleTransferReady) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[7]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use SignedBundleTransferReady.ProtoReflect.Descriptor instead.
+func (*SignedBundleTransferReady) Descriptor() ([]byte, []int) {
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *SignedBundleTransferReady) GetChunkSize() int32 {
+	if x != nil {
+		return x.ChunkSize
+	}
+	return 0
+}
+
+type SignedBundleTransferProgress struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	BytesReceived uint64                 `protobuf:"varint,1,opt,name=bytes_received,json=bytesReceived,proto3" json:"bytes_received,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *SignedBundleTransferProgress) Reset() {
+	*x = SignedBundleTransferProgress{}
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *SignedBundleTransferProgress) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*SignedBundleTransferProgress) ProtoMessage() {}
+
+func (x *SignedBundleTransferProgress) ProtoReflect() protoreflect.Message {
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[8]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use SignedBundleTransferProgress.ProtoReflect.Descriptor instead.
+func (*SignedBundleTransferProgress) Descriptor() ([]byte, []int) {
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *SignedBundleTransferProgress) GetBytesReceived() uint64 {
+	if x != nil {
+		return x.BytesReceived
+	}
+	return 0
+}
+
 type ImageTransferSuccess struct {
 	state         protoimpl.MessageState `protogen:"open.v1"`
 	Name          string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
@@ -754,7 +950,7 @@ type ImageTransferSuccess struct {
 
 func (x *ImageTransferSuccess) Reset() {
 	*x = ImageTransferSuccess{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[6]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[9]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -766,7 +962,7 @@ func (x *ImageTransferSuccess) String() string {
 func (*ImageTransferSuccess) ProtoMessage() {}
 
 func (x *ImageTransferSuccess) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[6]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[9]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -779,7 +975,7 @@ func (x *ImageTransferSuccess) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ImageTransferSuccess.ProtoReflect.Descriptor instead.
 func (*ImageTransferSuccess) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{6}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{9}
 }
 
 func (x *ImageTransferSuccess) GetName() string {
@@ -814,7 +1010,7 @@ type RemoveImageRequest struct {
 
 func (x *RemoveImageRequest) Reset() {
 	*x = RemoveImageRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[7]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[10]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -826,7 +1022,7 @@ func (x *RemoveImageRequest) String() string {
 func (*RemoveImageRequest) ProtoMessage() {}
 
 func (x *RemoveImageRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[7]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[10]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -839,7 +1035,7 @@ func (x *RemoveImageRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemoveImageRequest.ProtoReflect.Descriptor instead.
 func (*RemoveImageRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{7}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{10}
 }
 
 func (x *RemoveImageRequest) GetName() string {
@@ -871,7 +1067,7 @@ type RemoveImageResponse struct {
 
 func (x *RemoveImageResponse) Reset() {
 	*x = RemoveImageResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[8]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[11]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -883,7 +1079,7 @@ func (x *RemoveImageResponse) String() string {
 func (*RemoveImageResponse) ProtoMessage() {}
 
 func (x *RemoveImageResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[8]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[11]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -896,7 +1092,7 @@ func (x *RemoveImageResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemoveImageResponse.ProtoReflect.Descriptor instead.
 func (*RemoveImageResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{8}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{11}
 }
 
 type RemoveContainerRequest struct {
@@ -909,7 +1105,7 @@ type RemoveContainerRequest struct {
 
 func (x *RemoveContainerRequest) Reset() {
 	*x = RemoveContainerRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[9]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[12]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -921,7 +1117,7 @@ func (x *RemoveContainerRequest) String() string {
 func (*RemoveContainerRequest) ProtoMessage() {}
 
 func (x *RemoveContainerRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[9]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[12]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -934,7 +1130,7 @@ func (x *RemoveContainerRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemoveContainerRequest.ProtoReflect.Descriptor instead.
 func (*RemoveContainerRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{9}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{12}
 }
 
 func (x *RemoveContainerRequest) GetName() string {
@@ -959,7 +1155,7 @@ type RemoveContainerResponse struct {
 
 func (x *RemoveContainerResponse) Reset() {
 	*x = RemoveContainerResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[10]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[13]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -971,7 +1167,7 @@ func (x *RemoveContainerResponse) String() string {
 func (*RemoveContainerResponse) ProtoMessage() {}
 
 func (x *RemoveContainerResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[10]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[13]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -984,7 +1180,7 @@ func (x *RemoveContainerResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemoveContainerResponse.ProtoReflect.Descriptor instead.
 func (*RemoveContainerResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{10}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{13}
 }
 
 type ListImageRequest struct {
@@ -997,7 +1193,7 @@ type ListImageRequest struct {
 
 func (x *ListImageRequest) Reset() {
 	*x = ListImageRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[11]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[14]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1009,7 +1205,7 @@ func (x *ListImageRequest) String() string {
 func (*ListImageRequest) ProtoMessage() {}
 
 func (x *ListImageRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[11]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[14]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1022,7 +1218,7 @@ func (x *ListImageRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListImageRequest.ProtoReflect.Descriptor instead.
 func (*ListImageRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{11}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{14}
 }
 
 func (x *ListImageRequest) GetLimit() int32 {
@@ -1050,7 +1246,7 @@ type ListImageResponse struct {
 
 func (x *ListImageResponse) Reset() {
 	*x = ListImageResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[12]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[15]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1062,7 +1258,7 @@ func (x *ListImageResponse) String() string {
 func (*ListImageResponse) ProtoMessage() {}
 
 func (x *ListImageResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[12]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[15]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1075,7 +1271,7 @@ func (x *ListImageResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListImageResponse.ProtoReflect.Descriptor instead.
 func (*ListImageResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{12}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{15}
 }
 
 func (x *ListImageResponse) GetId() string {
@@ -1110,7 +1306,7 @@ type ListContainerRequest struct {
 
 func (x *ListContainerRequest) Reset() {
 	*x = ListContainerRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[13]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[16]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1122,7 +1318,7 @@ func (x *ListContainerRequest) String() string {
 func (*ListContainerRequest) ProtoMessage() {}
 
 func (x *ListContainerRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[13]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[16]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1135,7 +1331,7 @@ func (x *ListContainerRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListContainerRequest.ProtoReflect.Descriptor instead.
 func (*ListContainerRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{13}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{16}
 }
 
 func (x *ListContainerRequest) GetAll() bool {
@@ -1173,7 +1369,7 @@ type ListContainerResponse struct {
 
 func (x *ListContainerResponse) Reset() {
 	*x = ListContainerResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[14]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[17]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1185,7 +1381,7 @@ func (x *ListContainerResponse) String() string {
 func (*ListContainerResponse) ProtoMessage() {}
 
 func (x *ListContainerResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[14]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[17]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1198,7 +1394,7 @@ func (x *ListContainerResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListContainerResponse.ProtoReflect.Descriptor instead.
 func (*ListContainerResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{14}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{17}
 }
 
 func (x *ListContainerResponse) GetId() string {
@@ -1254,7 +1450,7 @@ type Volume struct {
 
 func (x *Volume) Reset() {
 	*x = Volume{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[15]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[18]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1266,7 +1462,7 @@ func (x *Volume) String() string {
 func (*Volume) ProtoMessage() {}
 
 func (x *Volume) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[15]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[18]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1279,7 +1475,7 @@ func (x *Volume) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Volume.ProtoReflect.Descriptor instead.
 func (*Volume) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{15}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{18}
 }
 
 func (x *Volume) GetName() string {
@@ -1314,7 +1510,7 @@ type Device struct {
 
 func (x *Device) Reset() {
 	*x = Device{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[16]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[19]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1326,7 +1522,7 @@ func (x *Device) String() string {
 func (*Device) ProtoMessage() {}
 
 func (x *Device) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[16]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[19]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1339,7 +1535,7 @@ func (x *Device) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Device.ProtoReflect.Descriptor instead.
 func (*Device) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{16}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{19}
 }
 
 func (x *Device) GetSrcPath() string {
@@ -1386,7 +1582,7 @@ type StartContainerRequest struct {
 
 func (x *StartContainerRequest) Reset() {
 	*x = StartContainerRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[17]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[20]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1398,7 +1594,7 @@ func (x *StartContainerRequest) String() string {
 func (*StartContainerRequest) ProtoMessage() {}
 
 func (x *StartContainerRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[17]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[20]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1411,7 +1607,7 @@ func (x *StartContainerRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartContainerRequest.ProtoReflect.Descriptor instead.
 func (*StartContainerRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{17}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{20}
 }
 
 func (x *StartContainerRequest) GetImageName() string {
@@ -1532,7 +1728,7 @@ type StartContainerResponse struct {
 
 func (x *StartContainerResponse) Reset() {
 	*x = StartContainerResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[18]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[21]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1544,7 +1740,7 @@ func (x *StartContainerResponse) String() string {
 func (*StartContainerResponse) ProtoMessage() {}
 
 func (x *StartContainerResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[18]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[21]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1557,7 +1753,7 @@ func (x *StartContainerResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartContainerResponse.ProtoReflect.Descriptor instead.
 func (*StartContainerResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{18}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{21}
 }
 
 func (x *StartContainerResponse) GetResponse() isStartContainerResponse_Response {
@@ -1610,7 +1806,7 @@ type StartOK struct {
 
 func (x *StartOK) Reset() {
 	*x = StartOK{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[19]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[22]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1622,7 +1818,7 @@ func (x *StartOK) String() string {
 func (*StartOK) ProtoMessage() {}
 
 func (x *StartOK) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[19]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[22]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1635,7 +1831,7 @@ func (x *StartOK) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartOK.ProtoReflect.Descriptor instead.
 func (*StartOK) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{19}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{22}
 }
 
 func (x *StartOK) GetInstanceName() string {
@@ -1653,7 +1849,7 @@ type StartError struct {
 
 func (x *StartError) Reset() {
 	*x = StartError{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[20]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[23]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1665,7 +1861,7 @@ func (x *StartError) String() string {
 func (*StartError) ProtoMessage() {}
 
 func (x *StartError) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[20]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[23]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1678,7 +1874,7 @@ func (x *StartError) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartError.ProtoReflect.Descriptor instead.
 func (*StartError) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{20}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{23}
 }
 
 type StopContainerRequest struct {
@@ -1692,7 +1888,7 @@ type StopContainerRequest struct {
 
 func (x *StopContainerRequest) Reset() {
 	*x = StopContainerRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[21]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[24]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1704,7 +1900,7 @@ func (x *StopContainerRequest) String() string {
 func (*StopContainerRequest) ProtoMessage() {}
 
 func (x *StopContainerRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[21]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[24]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1717,7 +1913,7 @@ func (x *StopContainerRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StopContainerRequest.ProtoReflect.Descriptor instead.
 func (*StopContainerRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{21}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{24}
 }
 
 func (x *StopContainerRequest) GetInstanceName() string {
@@ -1749,7 +1945,7 @@ type StopContainerResponse struct {
 
 func (x *StopContainerResponse) Reset() {
 	*x = StopContainerResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[22]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[25]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1761,7 +1957,7 @@ func (x *StopContainerResponse) String() string {
 func (*StopContainerResponse) ProtoMessage() {}
 
 func (x *StopContainerResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[22]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[25]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1774,7 +1970,7 @@ func (x *StopContainerResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StopContainerResponse.ProtoReflect.Descriptor instead.
 func (*StopContainerResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{22}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{25}
 }
 
 type UpdateContainerRequest struct {
@@ -1790,7 +1986,7 @@ type UpdateContainerRequest struct {
 
 func (x *UpdateContainerRequest) Reset() {
 	*x = UpdateContainerRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[23]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[26]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1802,7 +1998,7 @@ func (x *UpdateContainerRequest) String() string {
 func (*UpdateContainerRequest) ProtoMessage() {}
 
 func (x *UpdateContainerRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[23]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[26]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1815,7 +2011,7 @@ func (x *UpdateContainerRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UpdateContainerRequest.ProtoReflect.Descriptor instead.
 func (*UpdateContainerRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{23}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{26}
 }
 
 func (x *UpdateContainerRequest) GetInstanceName() string {
@@ -1866,7 +2062,7 @@ type UpdateContainerResponse struct {
 
 func (x *UpdateContainerResponse) Reset() {
 	*x = UpdateContainerResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[24]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[27]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1878,7 +2074,7 @@ func (x *UpdateContainerResponse) String() string {
 func (*UpdateContainerResponse) ProtoMessage() {}
 
 func (x *UpdateContainerResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[24]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[27]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1891,7 +2087,7 @@ func (x *UpdateContainerResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UpdateContainerResponse.ProtoReflect.Descriptor instead.
 func (*UpdateContainerResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{24}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{27}
 }
 
 func (x *UpdateContainerResponse) GetResponse() isUpdateContainerResponse_Response {
@@ -1945,7 +2141,7 @@ type UpdateOK struct {
 
 func (x *UpdateOK) Reset() {
 	*x = UpdateOK{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[25]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[28]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1957,7 +2153,7 @@ func (x *UpdateOK) String() string {
 func (*UpdateOK) ProtoMessage() {}
 
 func (x *UpdateOK) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[25]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[28]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1970,7 +2166,7 @@ func (x *UpdateOK) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UpdateOK.ProtoReflect.Descriptor instead.
 func (*UpdateOK) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{25}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{28}
 }
 
 func (x *UpdateOK) GetInstanceName() string {
@@ -1995,7 +2191,7 @@ type UpdateError struct {
 
 func (x *UpdateError) Reset() {
 	*x = UpdateError{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[26]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[29]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2007,7 +2203,7 @@ func (x *UpdateError) String() string {
 func (*UpdateError) ProtoMessage() {}
 
 func (x *UpdateError) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[26]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[29]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2020,7 +2216,7 @@ func (x *UpdateError) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use UpdateError.ProtoReflect.Descriptor instead.
 func (*UpdateError) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{26}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{29}
 }
 
 type LogRequest struct {
@@ -2033,7 +2229,7 @@ type LogRequest struct {
 
 func (x *LogRequest) Reset() {
 	*x = LogRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[27]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[30]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2045,7 +2241,7 @@ func (x *LogRequest) String() string {
 func (*LogRequest) ProtoMessage() {}
 
 func (x *LogRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[27]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[30]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2058,7 +2254,7 @@ func (x *LogRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use LogRequest.ProtoReflect.Descriptor instead.
 func (*LogRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{27}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{30}
 }
 
 func (x *LogRequest) GetInstanceName() string {
@@ -2084,7 +2280,7 @@ type LogResponse struct {
 
 func (x *LogResponse) Reset() {
 	*x = LogResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[28]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[31]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2096,7 +2292,7 @@ func (x *LogResponse) String() string {
 func (*LogResponse) ProtoMessage() {}
 
 func (x *LogResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[28]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[31]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2109,7 +2305,7 @@ func (x *LogResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use LogResponse.ProtoReflect.Descriptor instead.
 func (*LogResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{28}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{31}
 }
 
 func (x *LogResponse) GetMsg() string {
@@ -2130,7 +2326,7 @@ type LocalDriverOptions struct {
 
 func (x *LocalDriverOptions) Reset() {
 	*x = LocalDriverOptions{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[29]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[32]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2142,7 +2338,7 @@ func (x *LocalDriverOptions) String() string {
 func (*LocalDriverOptions) ProtoMessage() {}
 
 func (x *LocalDriverOptions) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[29]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[32]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2155,7 +2351,7 @@ func (x *LocalDriverOptions) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use LocalDriverOptions.ProtoReflect.Descriptor instead.
 func (*LocalDriverOptions) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{29}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{32}
 }
 
 func (x *LocalDriverOptions) GetType() LocalDriverOptions_Type {
@@ -2188,7 +2384,7 @@ type CustomOptions struct {
 
 func (x *CustomOptions) Reset() {
 	*x = CustomOptions{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[30]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[33]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2200,7 +2396,7 @@ func (x *CustomOptions) String() string {
 func (*CustomOptions) ProtoMessage() {}
 
 func (x *CustomOptions) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[30]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[33]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2213,7 +2409,7 @@ func (x *CustomOptions) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use CustomOptions.ProtoReflect.Descriptor instead.
 func (*CustomOptions) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{30}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{33}
 }
 
 func (x *CustomOptions) GetOptions() map[string]string {
@@ -2239,7 +2435,7 @@ type CreateVolumeRequest struct {
 
 func (x *CreateVolumeRequest) Reset() {
 	*x = CreateVolumeRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[31]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[34]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2251,7 +2447,7 @@ func (x *CreateVolumeRequest) String() string {
 func (*CreateVolumeRequest) ProtoMessage() {}
 
 func (x *CreateVolumeRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[31]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[34]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2264,7 +2460,7 @@ func (x *CreateVolumeRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use CreateVolumeRequest.ProtoReflect.Descriptor instead.
 func (*CreateVolumeRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{31}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{34}
 }
 
 func (x *CreateVolumeRequest) GetName() string {
@@ -2338,7 +2534,7 @@ type CreateVolumeResponse struct {
 
 func (x *CreateVolumeResponse) Reset() {
 	*x = CreateVolumeResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[32]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[35]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2350,7 +2546,7 @@ func (x *CreateVolumeResponse) String() string {
 func (*CreateVolumeResponse) ProtoMessage() {}
 
 func (x *CreateVolumeResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[32]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[35]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2363,7 +2559,7 @@ func (x *CreateVolumeResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use CreateVolumeResponse.ProtoReflect.Descriptor instead.
 func (*CreateVolumeResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{32}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{35}
 }
 
 func (x *CreateVolumeResponse) GetName() string {
@@ -2383,7 +2579,7 @@ type RemoveVolumeRequest struct {
 
 func (x *RemoveVolumeRequest) Reset() {
 	*x = RemoveVolumeRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[33]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[36]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2395,7 +2591,7 @@ func (x *RemoveVolumeRequest) String() string {
 func (*RemoveVolumeRequest) ProtoMessage() {}
 
 func (x *RemoveVolumeRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[33]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[36]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2408,7 +2604,7 @@ func (x *RemoveVolumeRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemoveVolumeRequest.ProtoReflect.Descriptor instead.
 func (*RemoveVolumeRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{33}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{36}
 }
 
 func (x *RemoveVolumeRequest) GetName() string {
@@ -2433,7 +2629,7 @@ type RemoveVolumeResponse struct {
 
 func (x *RemoveVolumeResponse) Reset() {
 	*x = RemoveVolumeResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[34]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[37]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2445,7 +2641,7 @@ func (x *RemoveVolumeResponse) String() string {
 func (*RemoveVolumeResponse) ProtoMessage() {}
 
 func (x *RemoveVolumeResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[34]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[37]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2458,7 +2654,7 @@ func (x *RemoveVolumeResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemoveVolumeResponse.ProtoReflect.Descriptor instead.
 func (*RemoveVolumeResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{34}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{37}
 }
 
 type ListVolumeRequest struct {
@@ -2470,7 +2666,7 @@ type ListVolumeRequest struct {
 
 func (x *ListVolumeRequest) Reset() {
 	*x = ListVolumeRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[35]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[38]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2482,7 +2678,7 @@ func (x *ListVolumeRequest) String() string {
 func (*ListVolumeRequest) ProtoMessage() {}
 
 func (x *ListVolumeRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[35]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[38]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2495,7 +2691,7 @@ func (x *ListVolumeRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListVolumeRequest.ProtoReflect.Descriptor instead.
 func (*ListVolumeRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{35}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{38}
 }
 
 func (x *ListVolumeRequest) GetFilter() []*ListVolumeRequest_Filter {
@@ -2518,7 +2714,7 @@ type ListVolumeResponse struct {
 
 func (x *ListVolumeResponse) Reset() {
 	*x = ListVolumeResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[36]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[39]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2530,7 +2726,7 @@ func (x *ListVolumeResponse) String() string {
 func (*ListVolumeResponse) ProtoMessage() {}
 
 func (x *ListVolumeResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[36]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[39]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2543,7 +2739,7 @@ func (x *ListVolumeResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListVolumeResponse.ProtoReflect.Descriptor instead.
 func (*ListVolumeResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{36}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{39}
 }
 
 func (x *ListVolumeResponse) GetName() string {
@@ -2592,7 +2788,7 @@ type StartPluginRequest struct {
 
 func (x *StartPluginRequest) Reset() {
 	*x = StartPluginRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[37]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[40]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2604,7 +2800,7 @@ func (x *StartPluginRequest) String() string {
 func (*StartPluginRequest) ProtoMessage() {}
 
 func (x *StartPluginRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[37]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[40]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2617,7 +2813,7 @@ func (x *StartPluginRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartPluginRequest.ProtoReflect.Descriptor instead.
 func (*StartPluginRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{37}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{40}
 }
 
 func (x *StartPluginRequest) GetName() string {
@@ -2650,7 +2846,7 @@ type StartPluginResponse struct {
 
 func (x *StartPluginResponse) Reset() {
 	*x = StartPluginResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[38]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[41]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2662,7 +2858,7 @@ func (x *StartPluginResponse) String() string {
 func (*StartPluginResponse) ProtoMessage() {}
 
 func (x *StartPluginResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[38]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[41]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2675,7 +2871,7 @@ func (x *StartPluginResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartPluginResponse.ProtoReflect.Descriptor instead.
 func (*StartPluginResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{38}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{41}
 }
 
 func (x *StartPluginResponse) GetInstanceName() string {
@@ -2694,7 +2890,7 @@ type StopPluginRequest struct {
 
 func (x *StopPluginRequest) Reset() {
 	*x = StopPluginRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[39]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[42]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2706,7 +2902,7 @@ func (x *StopPluginRequest) String() string {
 func (*StopPluginRequest) ProtoMessage() {}
 
 func (x *StopPluginRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[39]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[42]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2719,7 +2915,7 @@ func (x *StopPluginRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StopPluginRequest.ProtoReflect.Descriptor instead.
 func (*StopPluginRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{39}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{42}
 }
 
 func (x *StopPluginRequest) GetInstanceName() string {
@@ -2737,7 +2933,7 @@ type StopPluginResponse struct {
 
 func (x *StopPluginResponse) Reset() {
 	*x = StopPluginResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[40]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[43]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2749,7 +2945,7 @@ func (x *StopPluginResponse) String() string {
 func (*StopPluginResponse) ProtoMessage() {}
 
 func (x *StopPluginResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[40]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[43]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2762,7 +2958,7 @@ func (x *StopPluginResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StopPluginResponse.ProtoReflect.Descriptor instead.
 func (*StopPluginResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{40}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{43}
 }
 
 type ListPluginsRequest struct {
@@ -2774,7 +2970,7 @@ type ListPluginsRequest struct {
 
 func (x *ListPluginsRequest) Reset() {
 	*x = ListPluginsRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[41]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[44]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2786,7 +2982,7 @@ func (x *ListPluginsRequest) String() string {
 func (*ListPluginsRequest) ProtoMessage() {}
 
 func (x *ListPluginsRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[41]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[44]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2799,7 +2995,7 @@ func (x *ListPluginsRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListPluginsRequest.ProtoReflect.Descriptor instead.
 func (*ListPluginsRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{41}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{44}
 }
 
 func (x *ListPluginsRequest) GetInstanceName() string {
@@ -2821,7 +3017,7 @@ type Plugin struct {
 
 func (x *Plugin) Reset() {
 	*x = Plugin{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[42]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[45]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2833,7 +3029,7 @@ func (x *Plugin) String() string {
 func (*Plugin) ProtoMessage() {}
 
 func (x *Plugin) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[42]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[45]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2846,7 +3042,7 @@ func (x *Plugin) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Plugin.ProtoReflect.Descriptor instead.
 func (*Plugin) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{42}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{45}
 }
 
 func (x *Plugin) GetId() string {
@@ -2886,7 +3082,7 @@ type ListPluginsResponse struct {
 
 func (x *ListPluginsResponse) Reset() {
 	*x = ListPluginsResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[43]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[46]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2898,7 +3094,7 @@ func (x *ListPluginsResponse) String() string {
 func (*ListPluginsResponse) ProtoMessage() {}
 
 func (x *ListPluginsResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[43]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[46]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2911,7 +3107,7 @@ func (x *ListPluginsResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListPluginsResponse.ProtoReflect.Descriptor instead.
 func (*ListPluginsResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{43}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{46}
 }
 
 func (x *ListPluginsResponse) GetPlugins() []*Plugin {
@@ -2930,7 +3126,7 @@ type RemovePluginRequest struct {
 
 func (x *RemovePluginRequest) Reset() {
 	*x = RemovePluginRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[44]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[47]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2942,7 +3138,7 @@ func (x *RemovePluginRequest) String() string {
 func (*RemovePluginRequest) ProtoMessage() {}
 
 func (x *RemovePluginRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[44]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[47]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2955,7 +3151,7 @@ func (x *RemovePluginRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemovePluginRequest.ProtoReflect.Descriptor instead.
 func (*RemovePluginRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{44}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{47}
 }
 
 func (x *RemovePluginRequest) GetInstanceName() string {
@@ -2973,7 +3169,7 @@ type RemovePluginResponse struct {
 
 func (x *RemovePluginResponse) Reset() {
 	*x = RemovePluginResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[45]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[48]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2985,7 +3181,7 @@ func (x *RemovePluginResponse) String() string {
 func (*RemovePluginResponse) ProtoMessage() {}
 
 func (x *RemovePluginResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[45]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[48]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2998,7 +3194,7 @@ func (x *RemovePluginResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemovePluginResponse.ProtoReflect.Descriptor instead.
 func (*RemovePluginResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{45}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{48}
 }
 
 type RemovePluginTarRequest struct {
@@ -3010,7 +3206,7 @@ type RemovePluginTarRequest struct {
 
 func (x *RemovePluginTarRequest) Reset() {
 	*x = RemovePluginTarRequest{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[46]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[49]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -3022,7 +3218,7 @@ func (x *RemovePluginTarRequest) String() string {
 func (*RemovePluginTarRequest) ProtoMessage() {}
 
 func (x *RemovePluginTarRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[46]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[49]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3035,7 +3231,7 @@ func (x *RemovePluginTarRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemovePluginTarRequest.ProtoReflect.Descriptor instead.
 func (*RemovePluginTarRequest) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{46}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{49}
 }
 
 func (x *RemovePluginTarRequest) GetName() string {
@@ -3053,7 +3249,7 @@ type RemovePluginTarResponse struct {
 
 func (x *RemovePluginTarResponse) Reset() {
 	*x = RemovePluginTarResponse{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[47]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[50]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -3065,7 +3261,7 @@ func (x *RemovePluginTarResponse) String() string {
 func (*RemovePluginTarResponse) ProtoMessage() {}
 
 func (x *RemovePluginTarResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[47]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[50]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3078,7 +3274,7 @@ func (x *RemovePluginTarResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use RemovePluginTarResponse.ProtoReflect.Descriptor instead.
 func (*RemovePluginTarResponse) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{47}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{50}
 }
 
 type ListImageRequest_Filter struct {
@@ -3091,7 +3287,7 @@ type ListImageRequest_Filter struct {
 
 func (x *ListImageRequest_Filter) Reset() {
 	*x = ListImageRequest_Filter{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[48]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[51]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -3103,7 +3299,7 @@ func (x *ListImageRequest_Filter) String() string {
 func (*ListImageRequest_Filter) ProtoMessage() {}
 
 func (x *ListImageRequest_Filter) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[48]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[51]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3116,7 +3312,7 @@ func (x *ListImageRequest_Filter) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListImageRequest_Filter.ProtoReflect.Descriptor instead.
 func (*ListImageRequest_Filter) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{11, 0}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{14, 0}
 }
 
 func (x *ListImageRequest_Filter) GetKey() string {
@@ -3143,7 +3339,7 @@ type ListContainerRequest_Filter struct {
 
 func (x *ListContainerRequest_Filter) Reset() {
 	*x = ListContainerRequest_Filter{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[49]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[52]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -3155,7 +3351,7 @@ func (x *ListContainerRequest_Filter) String() string {
 func (*ListContainerRequest_Filter) ProtoMessage() {}
 
 func (x *ListContainerRequest_Filter) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[49]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[52]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3168,7 +3364,7 @@ func (x *ListContainerRequest_Filter) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListContainerRequest_Filter.ProtoReflect.Descriptor instead.
 func (*ListContainerRequest_Filter) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{13, 0}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{16, 0}
 }
 
 func (x *ListContainerRequest_Filter) GetKey() string {
@@ -3195,7 +3391,7 @@ type StartContainerRequest_Port struct {
 
 func (x *StartContainerRequest_Port) Reset() {
 	*x = StartContainerRequest_Port{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[51]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[54]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -3207,7 +3403,7 @@ func (x *StartContainerRequest_Port) String() string {
 func (*StartContainerRequest_Port) ProtoMessage() {}
 
 func (x *StartContainerRequest_Port) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[51]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[54]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3220,7 +3416,7 @@ func (x *StartContainerRequest_Port) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartContainerRequest_Port.ProtoReflect.Descriptor instead.
 func (*StartContainerRequest_Port) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{17, 0}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{20, 0}
 }
 
 func (x *StartContainerRequest_Port) GetInternal() uint32 {
@@ -3247,7 +3443,7 @@ type StartContainerRequest_Capabilities struct {
 
 func (x *StartContainerRequest_Capabilities) Reset() {
 	*x = StartContainerRequest_Capabilities{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[53]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[56]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -3259,7 +3455,7 @@ func (x *StartContainerRequest_Capabilities) String() string {
 func (*StartContainerRequest_Capabilities) ProtoMessage() {}
 
 func (x *StartContainerRequest_Capabilities) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[53]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[56]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3272,7 +3468,7 @@ func (x *StartContainerRequest_Capabilities) ProtoReflect() protoreflect.Message
 
 // Deprecated: Use StartContainerRequest_Capabilities.ProtoReflect.Descriptor instead.
 func (*StartContainerRequest_Capabilities) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{17, 2}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{20, 2}
 }
 
 func (x *StartContainerRequest_Capabilities) GetAdd() []string {
@@ -3299,7 +3495,7 @@ type StartContainerRequest_Restart struct {
 
 func (x *StartContainerRequest_Restart) Reset() {
 	*x = StartContainerRequest_Restart{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[54]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[57]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -3311,7 +3507,7 @@ func (x *StartContainerRequest_Restart) String() string {
 func (*StartContainerRequest_Restart) ProtoMessage() {}
 
 func (x *StartContainerRequest_Restart) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[54]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[57]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3324,7 +3520,7 @@ func (x *StartContainerRequest_Restart) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartContainerRequest_Restart.ProtoReflect.Descriptor instead.
 func (*StartContainerRequest_Restart) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{17, 3}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{20, 3}
 }
 
 func (x *StartContainerRequest_Restart) GetPolicy() StartContainerRequest_Restart_Policy {
@@ -3351,7 +3547,7 @@ type StartContainerRequest_RunAs struct {
 
 func (x *StartContainerRequest_RunAs) Reset() {
 	*x = StartContainerRequest_RunAs{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[55]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[58]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -3363,7 +3559,7 @@ func (x *StartContainerRequest_RunAs) String() string {
 func (*StartContainerRequest_RunAs) ProtoMessage() {}
 
 func (x *StartContainerRequest_RunAs) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[55]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[58]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3376,7 +3572,7 @@ func (x *StartContainerRequest_RunAs) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartContainerRequest_RunAs.ProtoReflect.Descriptor instead.
 func (*StartContainerRequest_RunAs) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{17, 4}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{20, 4}
 }
 
 func (x *StartContainerRequest_RunAs) GetUser() string {
@@ -3404,7 +3600,7 @@ type StartContainerRequest_Limits struct {
 
 func (x *StartContainerRequest_Limits) Reset() {
 	*x = StartContainerRequest_Limits{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[57]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[60]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -3416,7 +3612,7 @@ func (x *StartContainerRequest_Limits) String() string {
 func (*StartContainerRequest_Limits) ProtoMessage() {}
 
 func (x *StartContainerRequest_Limits) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[57]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[60]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3429,7 +3625,7 @@ func (x *StartContainerRequest_Limits) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use StartContainerRequest_Limits.ProtoReflect.Descriptor instead.
 func (*StartContainerRequest_Limits) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{17, 6}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{20, 6}
 }
 
 func (x *StartContainerRequest_Limits) GetMaxCpu() float64 {
@@ -3463,7 +3659,7 @@ type ListVolumeRequest_Filter struct {
 
 func (x *ListVolumeRequest_Filter) Reset() {
 	*x = ListVolumeRequest_Filter{}
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[60]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[63]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -3475,7 +3671,7 @@ func (x *ListVolumeRequest_Filter) String() string {
 func (*ListVolumeRequest_Filter) ProtoMessage() {}
 
 func (x *ListVolumeRequest_Filter) ProtoReflect() protoreflect.Message {
-	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[60]
+	mi := &file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[63]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -3488,7 +3684,7 @@ func (x *ListVolumeRequest_Filter) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListVolumeRequest_Filter.ProtoReflect.Descriptor instead.
 func (*ListVolumeRequest_Filter) Descriptor() ([]byte, []int) {
-	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{35, 0}
+	return file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP(), []int{38, 0}
 }
 
 func (x *ListVolumeRequest_Filter) GetKey() string {
@@ -3509,31 +3705,42 @@ var File_github_com_openconfig_gnoi_containerz_containerz_proto protoreflect.Fil
 
 const file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDesc = "" +
 	"\n" +
-	"6github.com/openconfig/gnoi/containerz/containerz.proto\x12\x0fgnoi.containerz\x1a.github.com/openconfig/gnoi/common/common.proto\x1a,github.com/openconfig/gnoi/types/types.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17google/rpc/status.proto\"\xd2\x01\n" +
+	"6github.com/openconfig/gnoi/containerz/containerz.proto\x12\x0fgnoi.containerz\x1a.github.com/openconfig/gnoi/common/common.proto\x1a,github.com/openconfig/gnoi/types/types.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17google/rpc/status.proto\"\xf1\x02\n" +
 	"\rDeployRequest\x12G\n" +
 	"\x0eimage_transfer\x18\x01 \x01(\v2\x1e.gnoi.containerz.ImageTransferH\x00R\rimageTransfer\x12\x1a\n" +
 	"\acontent\x18\x02 \x01(\fH\x00R\acontent\x12Q\n" +
-	"\x12image_transfer_end\x18\x03 \x01(\v2!.gnoi.containerz.ImageTransferEndH\x00R\x10imageTransferEndB\t\n" +
-	"\arequest\"\xb7\x01\n" +
+	"\x12image_transfer_end\x18\x03 \x01(\v2!.gnoi.containerz.ImageTransferEndH\x00R\x10imageTransferEnd\x124\n" +
+	"\x15signed_bundle_content\x18\x04 \x01(\fH\x00R\x13signedBundleContent\x12g\n" +
+	"\x1asigned_bundle_transfer_end\x18\x05 \x01(\v2(.gnoi.containerz.SignedBundleTransferEndH\x00R\x17signedBundleTransferEndB\t\n" +
+	"\arequest\"\xe5\x01\n" +
 	"\rImageTransfer\x12\x12\n" +
 	"\x04name\x18\x01 \x01(\tR\x04name\x12\x10\n" +
 	"\x03tag\x18\x02 \x01(\tR\x03tag\x12\x1d\n" +
 	"\n" +
 	"image_size\x18\x03 \x01(\x04R\timageSize\x12D\n" +
 	"\x0fremote_download\x18\x04 \x01(\v2\x1b.gnoi.common.RemoteDownloadR\x0eremoteDownload\x12\x1b\n" +
-	"\tis_plugin\x18\x05 \x01(\bR\bisPlugin\"\x12\n" +
-	"\x10ImageTransferEnd\"\xfe\x02\n" +
+	"\tis_plugin\x18\x05 \x01(\bR\bisPlugin\x12,\n" +
+	"\x12signed_bundle_size\x18\x06 \x01(\x04R\x10signedBundleSize\"\x12\n" +
+	"\x10ImageTransferEnd\"\x19\n" +
+	"\x17SignedBundleTransferEnd\"\xe5\x04\n" +
 	"\x0eDeployResponse\x12W\n" +
 	"\x14image_transfer_ready\x18\x01 \x01(\v2#.gnoi.containerz.ImageTransferReadyH\x00R\x12imageTransferReady\x12`\n" +
 	"\x17image_transfer_progress\x18\x02 \x01(\v2&.gnoi.containerz.ImageTransferProgressH\x00R\x15imageTransferProgress\x12]\n" +
 	"\x16image_transfer_success\x18\x03 \x01(\v2%.gnoi.containerz.ImageTransferSuccessH\x00R\x14imageTransferSuccess\x12F\n" +
-	"\x14image_transfer_error\x18\x04 \x01(\v2\x12.google.rpc.StatusH\x00R\x12imageTransferErrorB\n" +
+	"\x14image_transfer_error\x18\x04 \x01(\v2\x12.google.rpc.StatusH\x00R\x12imageTransferError\x12m\n" +
+	"\x1csigned_bundle_transfer_ready\x18\x05 \x01(\v2*.gnoi.containerz.SignedBundleTransferReadyH\x00R\x19signedBundleTransferReady\x12v\n" +
+	"\x1fsigned_bundle_transfer_progress\x18\x06 \x01(\v2-.gnoi.containerz.SignedBundleTransferProgressH\x00R\x1csignedBundleTransferProgressB\n" +
 	"\n" +
 	"\bresponse\"3\n" +
 	"\x12ImageTransferReady\x12\x1d\n" +
 	"\n" +
 	"chunk_size\x18\x01 \x01(\x05R\tchunkSize\">\n" +
 	"\x15ImageTransferProgress\x12%\n" +
+	"\x0ebytes_received\x18\x01 \x01(\x04R\rbytesReceived\":\n" +
+	"\x19SignedBundleTransferReady\x12\x1d\n" +
+	"\n" +
+	"chunk_size\x18\x01 \x01(\x05R\tchunkSize\"E\n" +
+	"\x1cSignedBundleTransferProgress\x12%\n" +
 	"\x0ebytes_received\x18\x01 \x01(\x04R\rbytesReceived\"[\n" +
 	"\x14ImageTransferSuccess\x12\x12\n" +
 	"\x04name\x18\x01 \x01(\tR\x04name\x12\x10\n" +
@@ -3783,7 +3990,7 @@ const file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDesc = "" +
 	"StopPlugin\x12\".gnoi.containerz.StopPluginRequest\x1a#.gnoi.containerz.StopPluginResponse\"\x00\x12Z\n" +
 	"\vListPlugins\x12#.gnoi.containerz.ListPluginsRequest\x1a$.gnoi.containerz.ListPluginsResponse\"\x00\x12]\n" +
 	"\fRemovePlugin\x12$.gnoi.containerz.RemovePluginRequest\x1a%.gnoi.containerz.RemovePluginResponse\"\x00\x12f\n" +
-	"\x0fRemovePluginTar\x12'.gnoi.containerz.RemovePluginTarRequest\x1a(.gnoi.containerz.RemovePluginTarResponse\"\x00B/\xd2>\x050.2.0Z%github.com/openconfig/gnoi/containerzb\x06proto3"
+	"\x0fRemovePluginTar\x12'.gnoi.containerz.RemovePluginTarRequest\x1a(.gnoi.containerz.RemovePluginTarResponse\"\x00B/\xd2>\x050.3.0Z%github.com/openconfig/gnoi/containerzb\x06proto3"
 
 var (
 	file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescOnce sync.Once
@@ -3798,7 +4005,7 @@ func file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDescGZIP() [
 }
 
 var file_github_com_openconfig_gnoi_containerz_containerz_proto_enumTypes = make([]protoimpl.EnumInfo, 6)
-var file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes = make([]protoimpl.MessageInfo, 63)
+var file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes = make([]protoimpl.MessageInfo, 66)
 var file_github_com_openconfig_gnoi_containerz_containerz_proto_goTypes = []any{
 	(Driver)(0),                                // 0: gnoi.containerz.Driver
 	(ListContainerResponse_Status)(0),          // 1: gnoi.containerz.ListContainerResponse.Status
@@ -3809,152 +4016,158 @@ var file_github_com_openconfig_gnoi_containerz_containerz_proto_goTypes = []any{
 	(*DeployRequest)(nil),                      // 6: gnoi.containerz.DeployRequest
 	(*ImageTransfer)(nil),                      // 7: gnoi.containerz.ImageTransfer
 	(*ImageTransferEnd)(nil),                   // 8: gnoi.containerz.ImageTransferEnd
-	(*DeployResponse)(nil),                     // 9: gnoi.containerz.DeployResponse
-	(*ImageTransferReady)(nil),                 // 10: gnoi.containerz.ImageTransferReady
-	(*ImageTransferProgress)(nil),              // 11: gnoi.containerz.ImageTransferProgress
-	(*ImageTransferSuccess)(nil),               // 12: gnoi.containerz.ImageTransferSuccess
-	(*RemoveImageRequest)(nil),                 // 13: gnoi.containerz.RemoveImageRequest
-	(*RemoveImageResponse)(nil),                // 14: gnoi.containerz.RemoveImageResponse
-	(*RemoveContainerRequest)(nil),             // 15: gnoi.containerz.RemoveContainerRequest
-	(*RemoveContainerResponse)(nil),            // 16: gnoi.containerz.RemoveContainerResponse
-	(*ListImageRequest)(nil),                   // 17: gnoi.containerz.ListImageRequest
-	(*ListImageResponse)(nil),                  // 18: gnoi.containerz.ListImageResponse
-	(*ListContainerRequest)(nil),               // 19: gnoi.containerz.ListContainerRequest
-	(*ListContainerResponse)(nil),              // 20: gnoi.containerz.ListContainerResponse
-	(*Volume)(nil),                             // 21: gnoi.containerz.Volume
-	(*Device)(nil),                             // 22: gnoi.containerz.Device
-	(*StartContainerRequest)(nil),              // 23: gnoi.containerz.StartContainerRequest
-	(*StartContainerResponse)(nil),             // 24: gnoi.containerz.StartContainerResponse
-	(*StartOK)(nil),                            // 25: gnoi.containerz.StartOK
-	(*StartError)(nil),                         // 26: gnoi.containerz.StartError
-	(*StopContainerRequest)(nil),               // 27: gnoi.containerz.StopContainerRequest
-	(*StopContainerResponse)(nil),              // 28: gnoi.containerz.StopContainerResponse
-	(*UpdateContainerRequest)(nil),             // 29: gnoi.containerz.UpdateContainerRequest
-	(*UpdateContainerResponse)(nil),            // 30: gnoi.containerz.UpdateContainerResponse
-	(*UpdateOK)(nil),                           // 31: gnoi.containerz.UpdateOK
-	(*UpdateError)(nil),                        // 32: gnoi.containerz.UpdateError
-	(*LogRequest)(nil),                         // 33: gnoi.containerz.LogRequest
-	(*LogResponse)(nil),                        // 34: gnoi.containerz.LogResponse
-	(*LocalDriverOptions)(nil),                 // 35: gnoi.containerz.LocalDriverOptions
-	(*CustomOptions)(nil),                      // 36: gnoi.containerz.CustomOptions
-	(*CreateVolumeRequest)(nil),                // 37: gnoi.containerz.CreateVolumeRequest
-	(*CreateVolumeResponse)(nil),               // 38: gnoi.containerz.CreateVolumeResponse
-	(*RemoveVolumeRequest)(nil),                // 39: gnoi.containerz.RemoveVolumeRequest
-	(*RemoveVolumeResponse)(nil),               // 40: gnoi.containerz.RemoveVolumeResponse
-	(*ListVolumeRequest)(nil),                  // 41: gnoi.containerz.ListVolumeRequest
-	(*ListVolumeResponse)(nil),                 // 42: gnoi.containerz.ListVolumeResponse
-	(*StartPluginRequest)(nil),                 // 43: gnoi.containerz.StartPluginRequest
-	(*StartPluginResponse)(nil),                // 44: gnoi.containerz.StartPluginResponse
-	(*StopPluginRequest)(nil),                  // 45: gnoi.containerz.StopPluginRequest
-	(*StopPluginResponse)(nil),                 // 46: gnoi.containerz.StopPluginResponse
-	(*ListPluginsRequest)(nil),                 // 47: gnoi.containerz.ListPluginsRequest
-	(*Plugin)(nil),                             // 48: gnoi.containerz.Plugin
-	(*ListPluginsResponse)(nil),                // 49: gnoi.containerz.ListPluginsResponse
-	(*RemovePluginRequest)(nil),                // 50: gnoi.containerz.RemovePluginRequest
-	(*RemovePluginResponse)(nil),               // 51: gnoi.containerz.RemovePluginResponse
-	(*RemovePluginTarRequest)(nil),             // 52: gnoi.containerz.RemovePluginTarRequest
-	(*RemovePluginTarResponse)(nil),            // 53: gnoi.containerz.RemovePluginTarResponse
-	(*ListImageRequest_Filter)(nil),            // 54: gnoi.containerz.ListImageRequest.Filter
-	(*ListContainerRequest_Filter)(nil),        // 55: gnoi.containerz.ListContainerRequest.Filter
-	nil,                                        // 56: gnoi.containerz.ListContainerResponse.LabelsEntry
-	(*StartContainerRequest_Port)(nil),         // 57: gnoi.containerz.StartContainerRequest.Port
-	nil,                                        // 58: gnoi.containerz.StartContainerRequest.EnvironmentEntry
-	(*StartContainerRequest_Capabilities)(nil), // 59: gnoi.containerz.StartContainerRequest.Capabilities
-	(*StartContainerRequest_Restart)(nil),      // 60: gnoi.containerz.StartContainerRequest.Restart
-	(*StartContainerRequest_RunAs)(nil),        // 61: gnoi.containerz.StartContainerRequest.RunAs
-	nil,                                        // 62: gnoi.containerz.StartContainerRequest.LabelsEntry
-	(*StartContainerRequest_Limits)(nil),       // 63: gnoi.containerz.StartContainerRequest.Limits
-	nil,                                        // 64: gnoi.containerz.CustomOptions.OptionsEntry
-	nil,                                        // 65: gnoi.containerz.CreateVolumeRequest.LabelsEntry
-	(*ListVolumeRequest_Filter)(nil),           // 66: gnoi.containerz.ListVolumeRequest.Filter
-	nil,                                        // 67: gnoi.containerz.ListVolumeResponse.OptionsEntry
-	nil,                                        // 68: gnoi.containerz.ListVolumeResponse.LabelsEntry
-	(*common.RemoteDownload)(nil),              // 69: gnoi.common.RemoteDownload
-	(*status.Status)(nil),                      // 70: google.rpc.Status
-	(*types.HashType)(nil),                     // 71: gnoi.types.HashType
-	(*timestamppb.Timestamp)(nil),              // 72: google.protobuf.Timestamp
+	(*SignedBundleTransferEnd)(nil),            // 9: gnoi.containerz.SignedBundleTransferEnd
+	(*DeployResponse)(nil),                     // 10: gnoi.containerz.DeployResponse
+	(*ImageTransferReady)(nil),                 // 11: gnoi.containerz.ImageTransferReady
+	(*ImageTransferProgress)(nil),              // 12: gnoi.containerz.ImageTransferProgress
+	(*SignedBundleTransferReady)(nil),          // 13: gnoi.containerz.SignedBundleTransferReady
+	(*SignedBundleTransferProgress)(nil),       // 14: gnoi.containerz.SignedBundleTransferProgress
+	(*ImageTransferSuccess)(nil),               // 15: gnoi.containerz.ImageTransferSuccess
+	(*RemoveImageRequest)(nil),                 // 16: gnoi.containerz.RemoveImageRequest
+	(*RemoveImageResponse)(nil),                // 17: gnoi.containerz.RemoveImageResponse
+	(*RemoveContainerRequest)(nil),             // 18: gnoi.containerz.RemoveContainerRequest
+	(*RemoveContainerResponse)(nil),            // 19: gnoi.containerz.RemoveContainerResponse
+	(*ListImageRequest)(nil),                   // 20: gnoi.containerz.ListImageRequest
+	(*ListImageResponse)(nil),                  // 21: gnoi.containerz.ListImageResponse
+	(*ListContainerRequest)(nil),               // 22: gnoi.containerz.ListContainerRequest
+	(*ListContainerResponse)(nil),              // 23: gnoi.containerz.ListContainerResponse
+	(*Volume)(nil),                             // 24: gnoi.containerz.Volume
+	(*Device)(nil),                             // 25: gnoi.containerz.Device
+	(*StartContainerRequest)(nil),              // 26: gnoi.containerz.StartContainerRequest
+	(*StartContainerResponse)(nil),             // 27: gnoi.containerz.StartContainerResponse
+	(*StartOK)(nil),                            // 28: gnoi.containerz.StartOK
+	(*StartError)(nil),                         // 29: gnoi.containerz.StartError
+	(*StopContainerRequest)(nil),               // 30: gnoi.containerz.StopContainerRequest
+	(*StopContainerResponse)(nil),              // 31: gnoi.containerz.StopContainerResponse
+	(*UpdateContainerRequest)(nil),             // 32: gnoi.containerz.UpdateContainerRequest
+	(*UpdateContainerResponse)(nil),            // 33: gnoi.containerz.UpdateContainerResponse
+	(*UpdateOK)(nil),                           // 34: gnoi.containerz.UpdateOK
+	(*UpdateError)(nil),                        // 35: gnoi.containerz.UpdateError
+	(*LogRequest)(nil),                         // 36: gnoi.containerz.LogRequest
+	(*LogResponse)(nil),                        // 37: gnoi.containerz.LogResponse
+	(*LocalDriverOptions)(nil),                 // 38: gnoi.containerz.LocalDriverOptions
+	(*CustomOptions)(nil),                      // 39: gnoi.containerz.CustomOptions
+	(*CreateVolumeRequest)(nil),                // 40: gnoi.containerz.CreateVolumeRequest
+	(*CreateVolumeResponse)(nil),               // 41: gnoi.containerz.CreateVolumeResponse
+	(*RemoveVolumeRequest)(nil),                // 42: gnoi.containerz.RemoveVolumeRequest
+	(*RemoveVolumeResponse)(nil),               // 43: gnoi.containerz.RemoveVolumeResponse
+	(*ListVolumeRequest)(nil),                  // 44: gnoi.containerz.ListVolumeRequest
+	(*ListVolumeResponse)(nil),                 // 45: gnoi.containerz.ListVolumeResponse
+	(*StartPluginRequest)(nil),                 // 46: gnoi.containerz.StartPluginRequest
+	(*StartPluginResponse)(nil),                // 47: gnoi.containerz.StartPluginResponse
+	(*StopPluginRequest)(nil),                  // 48: gnoi.containerz.StopPluginRequest
+	(*StopPluginResponse)(nil),                 // 49: gnoi.containerz.StopPluginResponse
+	(*ListPluginsRequest)(nil),                 // 50: gnoi.containerz.ListPluginsRequest
+	(*Plugin)(nil),                             // 51: gnoi.containerz.Plugin
+	(*ListPluginsResponse)(nil),                // 52: gnoi.containerz.ListPluginsResponse
+	(*RemovePluginRequest)(nil),                // 53: gnoi.containerz.RemovePluginRequest
+	(*RemovePluginResponse)(nil),               // 54: gnoi.containerz.RemovePluginResponse
+	(*RemovePluginTarRequest)(nil),             // 55: gnoi.containerz.RemovePluginTarRequest
+	(*RemovePluginTarResponse)(nil),            // 56: gnoi.containerz.RemovePluginTarResponse
+	(*ListImageRequest_Filter)(nil),            // 57: gnoi.containerz.ListImageRequest.Filter
+	(*ListContainerRequest_Filter)(nil),        // 58: gnoi.containerz.ListContainerRequest.Filter
+	nil,                                        // 59: gnoi.containerz.ListContainerResponse.LabelsEntry
+	(*StartContainerRequest_Port)(nil),         // 60: gnoi.containerz.StartContainerRequest.Port
+	nil,                                        // 61: gnoi.containerz.StartContainerRequest.EnvironmentEntry
+	(*StartContainerRequest_Capabilities)(nil), // 62: gnoi.containerz.StartContainerRequest.Capabilities
+	(*StartContainerRequest_Restart)(nil),      // 63: gnoi.containerz.StartContainerRequest.Restart
+	(*StartContainerRequest_RunAs)(nil),        // 64: gnoi.containerz.StartContainerRequest.RunAs
+	nil,                                        // 65: gnoi.containerz.StartContainerRequest.LabelsEntry
+	(*StartContainerRequest_Limits)(nil),       // 66: gnoi.containerz.StartContainerRequest.Limits
+	nil,                                        // 67: gnoi.containerz.CustomOptions.OptionsEntry
+	nil,                                        // 68: gnoi.containerz.CreateVolumeRequest.LabelsEntry
+	(*ListVolumeRequest_Filter)(nil),           // 69: gnoi.containerz.ListVolumeRequest.Filter
+	nil,                                        // 70: gnoi.containerz.ListVolumeResponse.OptionsEntry
+	nil,                                        // 71: gnoi.containerz.ListVolumeResponse.LabelsEntry
+	(*common.RemoteDownload)(nil),              // 72: gnoi.common.RemoteDownload
+	(*status.Status)(nil),                      // 73: google.rpc.Status
+	(*types.HashType)(nil),                     // 74: gnoi.types.HashType
+	(*timestamppb.Timestamp)(nil),              // 75: google.protobuf.Timestamp
 }
 var file_github_com_openconfig_gnoi_containerz_containerz_proto_depIdxs = []int32{
 	7,  // 0: gnoi.containerz.DeployRequest.image_transfer:type_name -> gnoi.containerz.ImageTransfer
 	8,  // 1: gnoi.containerz.DeployRequest.image_transfer_end:type_name -> gnoi.containerz.ImageTransferEnd
-	69, // 2: gnoi.containerz.ImageTransfer.remote_download:type_name -> gnoi.common.RemoteDownload
-	10, // 3: gnoi.containerz.DeployResponse.image_transfer_ready:type_name -> gnoi.containerz.ImageTransferReady
-	11, // 4: gnoi.containerz.DeployResponse.image_transfer_progress:type_name -> gnoi.containerz.ImageTransferProgress
-	12, // 5: gnoi.containerz.DeployResponse.image_transfer_success:type_name -> gnoi.containerz.ImageTransferSuccess
-	70, // 6: gnoi.containerz.DeployResponse.image_transfer_error:type_name -> google.rpc.Status
-	54, // 7: gnoi.containerz.ListImageRequest.filter:type_name -> gnoi.containerz.ListImageRequest.Filter
-	55, // 8: gnoi.containerz.ListContainerRequest.filter:type_name -> gnoi.containerz.ListContainerRequest.Filter
-	1,  // 9: gnoi.containerz.ListContainerResponse.status:type_name -> gnoi.containerz.ListContainerResponse.Status
-	56, // 10: gnoi.containerz.ListContainerResponse.labels:type_name -> gnoi.containerz.ListContainerResponse.LabelsEntry
-	71, // 11: gnoi.containerz.ListContainerResponse.hash:type_name -> gnoi.types.HashType
-	2,  // 12: gnoi.containerz.Device.permissions:type_name -> gnoi.containerz.Device.Permission
-	57, // 13: gnoi.containerz.StartContainerRequest.ports:type_name -> gnoi.containerz.StartContainerRequest.Port
-	58, // 14: gnoi.containerz.StartContainerRequest.environment:type_name -> gnoi.containerz.StartContainerRequest.EnvironmentEntry
-	21, // 15: gnoi.containerz.StartContainerRequest.volumes:type_name -> gnoi.containerz.Volume
-	59, // 16: gnoi.containerz.StartContainerRequest.cap:type_name -> gnoi.containerz.StartContainerRequest.Capabilities
-	60, // 17: gnoi.containerz.StartContainerRequest.restart:type_name -> gnoi.containerz.StartContainerRequest.Restart
-	61, // 18: gnoi.containerz.StartContainerRequest.run_as:type_name -> gnoi.containerz.StartContainerRequest.RunAs
-	62, // 19: gnoi.containerz.StartContainerRequest.labels:type_name -> gnoi.containerz.StartContainerRequest.LabelsEntry
-	63, // 20: gnoi.containerz.StartContainerRequest.limits:type_name -> gnoi.containerz.StartContainerRequest.Limits
-	22, // 21: gnoi.containerz.StartContainerRequest.devices:type_name -> gnoi.containerz.Device
-	3,  // 22: gnoi.containerz.StartContainerRequest.location:type_name -> gnoi.containerz.StartContainerRequest.Location
-	25, // 23: gnoi.containerz.StartContainerResponse.start_ok:type_name -> gnoi.containerz.StartOK
-	26, // 24: gnoi.containerz.StartContainerResponse.start_error:type_name -> gnoi.containerz.StartError
-	23, // 25: gnoi.containerz.UpdateContainerRequest.params:type_name -> gnoi.containerz.StartContainerRequest
-	31, // 26: gnoi.containerz.UpdateContainerResponse.update_ok:type_name -> gnoi.containerz.UpdateOK
-	32, // 27: gnoi.containerz.UpdateContainerResponse.update_error:type_name -> gnoi.containerz.UpdateError
-	5,  // 28: gnoi.containerz.LocalDriverOptions.type:type_name -> gnoi.containerz.LocalDriverOptions.Type
-	64, // 29: gnoi.containerz.CustomOptions.options:type_name -> gnoi.containerz.CustomOptions.OptionsEntry
-	0,  // 30: gnoi.containerz.CreateVolumeRequest.driver:type_name -> gnoi.containerz.Driver
-	65, // 31: gnoi.containerz.CreateVolumeRequest.labels:type_name -> gnoi.containerz.CreateVolumeRequest.LabelsEntry
-	35, // 32: gnoi.containerz.CreateVolumeRequest.local_mount_options:type_name -> gnoi.containerz.LocalDriverOptions
-	36, // 33: gnoi.containerz.CreateVolumeRequest.custom_options:type_name -> gnoi.containerz.CustomOptions
-	66, // 34: gnoi.containerz.ListVolumeRequest.filter:type_name -> gnoi.containerz.ListVolumeRequest.Filter
-	72, // 35: gnoi.containerz.ListVolumeResponse.created:type_name -> google.protobuf.Timestamp
-	67, // 36: gnoi.containerz.ListVolumeResponse.options:type_name -> gnoi.containerz.ListVolumeResponse.OptionsEntry
-	68, // 37: gnoi.containerz.ListVolumeResponse.labels:type_name -> gnoi.containerz.ListVolumeResponse.LabelsEntry
-	71, // 38: gnoi.containerz.Plugin.hash:type_name -> gnoi.types.HashType
-	48, // 39: gnoi.containerz.ListPluginsResponse.plugins:type_name -> gnoi.containerz.Plugin
-	4,  // 40: gnoi.containerz.StartContainerRequest.Restart.policy:type_name -> gnoi.containerz.StartContainerRequest.Restart.Policy
-	6,  // 41: gnoi.containerz.Containerz.Deploy:input_type -> gnoi.containerz.DeployRequest
-	17, // 42: gnoi.containerz.Containerz.ListImage:input_type -> gnoi.containerz.ListImageRequest
-	13, // 43: gnoi.containerz.Containerz.RemoveImage:input_type -> gnoi.containerz.RemoveImageRequest
-	15, // 44: gnoi.containerz.Containerz.RemoveContainer:input_type -> gnoi.containerz.RemoveContainerRequest
-	19, // 45: gnoi.containerz.Containerz.ListContainer:input_type -> gnoi.containerz.ListContainerRequest
-	23, // 46: gnoi.containerz.Containerz.StartContainer:input_type -> gnoi.containerz.StartContainerRequest
-	27, // 47: gnoi.containerz.Containerz.StopContainer:input_type -> gnoi.containerz.StopContainerRequest
-	29, // 48: gnoi.containerz.Containerz.UpdateContainer:input_type -> gnoi.containerz.UpdateContainerRequest
-	33, // 49: gnoi.containerz.Containerz.Log:input_type -> gnoi.containerz.LogRequest
-	37, // 50: gnoi.containerz.Containerz.CreateVolume:input_type -> gnoi.containerz.CreateVolumeRequest
-	39, // 51: gnoi.containerz.Containerz.RemoveVolume:input_type -> gnoi.containerz.RemoveVolumeRequest
-	41, // 52: gnoi.containerz.Containerz.ListVolume:input_type -> gnoi.containerz.ListVolumeRequest
-	43, // 53: gnoi.containerz.Containerz.StartPlugin:input_type -> gnoi.containerz.StartPluginRequest
-	45, // 54: gnoi.containerz.Containerz.StopPlugin:input_type -> gnoi.containerz.StopPluginRequest
-	47, // 55: gnoi.containerz.Containerz.ListPlugins:input_type -> gnoi.containerz.ListPluginsRequest
-	50, // 56: gnoi.containerz.Containerz.RemovePlugin:input_type -> gnoi.containerz.RemovePluginRequest
-	52, // 57: gnoi.containerz.Containerz.RemovePluginTar:input_type -> gnoi.containerz.RemovePluginTarRequest
-	9,  // 58: gnoi.containerz.Containerz.Deploy:output_type -> gnoi.containerz.DeployResponse
-	18, // 59: gnoi.containerz.Containerz.ListImage:output_type -> gnoi.containerz.ListImageResponse
-	14, // 60: gnoi.containerz.Containerz.RemoveImage:output_type -> gnoi.containerz.RemoveImageResponse
-	16, // 61: gnoi.containerz.Containerz.RemoveContainer:output_type -> gnoi.containerz.RemoveContainerResponse
-	20, // 62: gnoi.containerz.Containerz.ListContainer:output_type -> gnoi.containerz.ListContainerResponse
-	24, // 63: gnoi.containerz.Containerz.StartContainer:output_type -> gnoi.containerz.StartContainerResponse
-	28, // 64: gnoi.containerz.Containerz.StopContainer:output_type -> gnoi.containerz.StopContainerResponse
-	30, // 65: gnoi.containerz.Containerz.UpdateContainer:output_type -> gnoi.containerz.UpdateContainerResponse
-	34, // 66: gnoi.containerz.Containerz.Log:output_type -> gnoi.containerz.LogResponse
-	38, // 67: gnoi.containerz.Containerz.CreateVolume:output_type -> gnoi.containerz.CreateVolumeResponse
-	40, // 68: gnoi.containerz.Containerz.RemoveVolume:output_type -> gnoi.containerz.RemoveVolumeResponse
-	42, // 69: gnoi.containerz.Containerz.ListVolume:output_type -> gnoi.containerz.ListVolumeResponse
-	44, // 70: gnoi.containerz.Containerz.StartPlugin:output_type -> gnoi.containerz.StartPluginResponse
-	46, // 71: gnoi.containerz.Containerz.StopPlugin:output_type -> gnoi.containerz.StopPluginResponse
-	49, // 72: gnoi.containerz.Containerz.ListPlugins:output_type -> gnoi.containerz.ListPluginsResponse
-	51, // 73: gnoi.containerz.Containerz.RemovePlugin:output_type -> gnoi.containerz.RemovePluginResponse
-	53, // 74: gnoi.containerz.Containerz.RemovePluginTar:output_type -> gnoi.containerz.RemovePluginTarResponse
-	58, // [58:75] is the sub-list for method output_type
-	41, // [41:58] is the sub-list for method input_type
-	41, // [41:41] is the sub-list for extension type_name
-	41, // [41:41] is the sub-list for extension extendee
-	0,  // [0:41] is the sub-list for field type_name
+	9,  // 2: gnoi.containerz.DeployRequest.signed_bundle_transfer_end:type_name -> gnoi.containerz.SignedBundleTransferEnd
+	72, // 3: gnoi.containerz.ImageTransfer.remote_download:type_name -> gnoi.common.RemoteDownload
+	11, // 4: gnoi.containerz.DeployResponse.image_transfer_ready:type_name -> gnoi.containerz.ImageTransferReady
+	12, // 5: gnoi.containerz.DeployResponse.image_transfer_progress:type_name -> gnoi.containerz.ImageTransferProgress
+	15, // 6: gnoi.containerz.DeployResponse.image_transfer_success:type_name -> gnoi.containerz.ImageTransferSuccess
+	73, // 7: gnoi.containerz.DeployResponse.image_transfer_error:type_name -> google.rpc.Status
+	13, // 8: gnoi.containerz.DeployResponse.signed_bundle_transfer_ready:type_name -> gnoi.containerz.SignedBundleTransferReady
+	14, // 9: gnoi.containerz.DeployResponse.signed_bundle_transfer_progress:type_name -> gnoi.containerz.SignedBundleTransferProgress
+	57, // 10: gnoi.containerz.ListImageRequest.filter:type_name -> gnoi.containerz.ListImageRequest.Filter
+	58, // 11: gnoi.containerz.ListContainerRequest.filter:type_name -> gnoi.containerz.ListContainerRequest.Filter
+	1,  // 12: gnoi.containerz.ListContainerResponse.status:type_name -> gnoi.containerz.ListContainerResponse.Status
+	59, // 13: gnoi.containerz.ListContainerResponse.labels:type_name -> gnoi.containerz.ListContainerResponse.LabelsEntry
+	74, // 14: gnoi.containerz.ListContainerResponse.hash:type_name -> gnoi.types.HashType
+	2,  // 15: gnoi.containerz.Device.permissions:type_name -> gnoi.containerz.Device.Permission
+	60, // 16: gnoi.containerz.StartContainerRequest.ports:type_name -> gnoi.containerz.StartContainerRequest.Port
+	61, // 17: gnoi.containerz.StartContainerRequest.environment:type_name -> gnoi.containerz.StartContainerRequest.EnvironmentEntry
+	24, // 18: gnoi.containerz.StartContainerRequest.volumes:type_name -> gnoi.containerz.Volume
+	62, // 19: gnoi.containerz.StartContainerRequest.cap:type_name -> gnoi.containerz.StartContainerRequest.Capabilities
+	63, // 20: gnoi.containerz.StartContainerRequest.restart:type_name -> gnoi.containerz.StartContainerRequest.Restart
+	64, // 21: gnoi.containerz.StartContainerRequest.run_as:type_name -> gnoi.containerz.StartContainerRequest.RunAs
+	65, // 22: gnoi.containerz.StartContainerRequest.labels:type_name -> gnoi.containerz.StartContainerRequest.LabelsEntry
+	66, // 23: gnoi.containerz.StartContainerRequest.limits:type_name -> gnoi.containerz.StartContainerRequest.Limits
+	25, // 24: gnoi.containerz.StartContainerRequest.devices:type_name -> gnoi.containerz.Device
+	3,  // 25: gnoi.containerz.StartContainerRequest.location:type_name -> gnoi.containerz.StartContainerRequest.Location
+	28, // 26: gnoi.containerz.StartContainerResponse.start_ok:type_name -> gnoi.containerz.StartOK
+	29, // 27: gnoi.containerz.StartContainerResponse.start_error:type_name -> gnoi.containerz.StartError
+	26, // 28: gnoi.containerz.UpdateContainerRequest.params:type_name -> gnoi.containerz.StartContainerRequest
+	34, // 29: gnoi.containerz.UpdateContainerResponse.update_ok:type_name -> gnoi.containerz.UpdateOK
+	35, // 30: gnoi.containerz.UpdateContainerResponse.update_error:type_name -> gnoi.containerz.UpdateError
+	5,  // 31: gnoi.containerz.LocalDriverOptions.type:type_name -> gnoi.containerz.LocalDriverOptions.Type
+	67, // 32: gnoi.containerz.CustomOptions.options:type_name -> gnoi.containerz.CustomOptions.OptionsEntry
+	0,  // 33: gnoi.containerz.CreateVolumeRequest.driver:type_name -> gnoi.containerz.Driver
+	68, // 34: gnoi.containerz.CreateVolumeRequest.labels:type_name -> gnoi.containerz.CreateVolumeRequest.LabelsEntry
+	38, // 35: gnoi.containerz.CreateVolumeRequest.local_mount_options:type_name -> gnoi.containerz.LocalDriverOptions
+	39, // 36: gnoi.containerz.CreateVolumeRequest.custom_options:type_name -> gnoi.containerz.CustomOptions
+	69, // 37: gnoi.containerz.ListVolumeRequest.filter:type_name -> gnoi.containerz.ListVolumeRequest.Filter
+	75, // 38: gnoi.containerz.ListVolumeResponse.created:type_name -> google.protobuf.Timestamp
+	70, // 39: gnoi.containerz.ListVolumeResponse.options:type_name -> gnoi.containerz.ListVolumeResponse.OptionsEntry
+	71, // 40: gnoi.containerz.ListVolumeResponse.labels:type_name -> gnoi.containerz.ListVolumeResponse.LabelsEntry
+	74, // 41: gnoi.containerz.Plugin.hash:type_name -> gnoi.types.HashType
+	51, // 42: gnoi.containerz.ListPluginsResponse.plugins:type_name -> gnoi.containerz.Plugin
+	4,  // 43: gnoi.containerz.StartContainerRequest.Restart.policy:type_name -> gnoi.containerz.StartContainerRequest.Restart.Policy
+	6,  // 44: gnoi.containerz.Containerz.Deploy:input_type -> gnoi.containerz.DeployRequest
+	20, // 45: gnoi.containerz.Containerz.ListImage:input_type -> gnoi.containerz.ListImageRequest
+	16, // 46: gnoi.containerz.Containerz.RemoveImage:input_type -> gnoi.containerz.RemoveImageRequest
+	18, // 47: gnoi.containerz.Containerz.RemoveContainer:input_type -> gnoi.containerz.RemoveContainerRequest
+	22, // 48: gnoi.containerz.Containerz.ListContainer:input_type -> gnoi.containerz.ListContainerRequest
+	26, // 49: gnoi.containerz.Containerz.StartContainer:input_type -> gnoi.containerz.StartContainerRequest
+	30, // 50: gnoi.containerz.Containerz.StopContainer:input_type -> gnoi.containerz.StopContainerRequest
+	32, // 51: gnoi.containerz.Containerz.UpdateContainer:input_type -> gnoi.containerz.UpdateContainerRequest
+	36, // 52: gnoi.containerz.Containerz.Log:input_type -> gnoi.containerz.LogRequest
+	40, // 53: gnoi.containerz.Containerz.CreateVolume:input_type -> gnoi.containerz.CreateVolumeRequest
+	42, // 54: gnoi.containerz.Containerz.RemoveVolume:input_type -> gnoi.containerz.RemoveVolumeRequest
+	44, // 55: gnoi.containerz.Containerz.ListVolume:input_type -> gnoi.containerz.ListVolumeRequest
+	46, // 56: gnoi.containerz.Containerz.StartPlugin:input_type -> gnoi.containerz.StartPluginRequest
+	48, // 57: gnoi.containerz.Containerz.StopPlugin:input_type -> gnoi.containerz.StopPluginRequest
+	50, // 58: gnoi.containerz.Containerz.ListPlugins:input_type -> gnoi.containerz.ListPluginsRequest
+	53, // 59: gnoi.containerz.Containerz.RemovePlugin:input_type -> gnoi.containerz.RemovePluginRequest
+	55, // 60: gnoi.containerz.Containerz.RemovePluginTar:input_type -> gnoi.containerz.RemovePluginTarRequest
+	10, // 61: gnoi.containerz.Containerz.Deploy:output_type -> gnoi.containerz.DeployResponse
+	21, // 62: gnoi.containerz.Containerz.ListImage:output_type -> gnoi.containerz.ListImageResponse
+	17, // 63: gnoi.containerz.Containerz.RemoveImage:output_type -> gnoi.containerz.RemoveImageResponse
+	19, // 64: gnoi.containerz.Containerz.RemoveContainer:output_type -> gnoi.containerz.RemoveContainerResponse
+	23, // 65: gnoi.containerz.Containerz.ListContainer:output_type -> gnoi.containerz.ListContainerResponse
+	27, // 66: gnoi.containerz.Containerz.StartContainer:output_type -> gnoi.containerz.StartContainerResponse
+	31, // 67: gnoi.containerz.Containerz.StopContainer:output_type -> gnoi.containerz.StopContainerResponse
+	33, // 68: gnoi.containerz.Containerz.UpdateContainer:output_type -> gnoi.containerz.UpdateContainerResponse
+	37, // 69: gnoi.containerz.Containerz.Log:output_type -> gnoi.containerz.LogResponse
+	41, // 70: gnoi.containerz.Containerz.CreateVolume:output_type -> gnoi.containerz.CreateVolumeResponse
+	43, // 71: gnoi.containerz.Containerz.RemoveVolume:output_type -> gnoi.containerz.RemoveVolumeResponse
+	45, // 72: gnoi.containerz.Containerz.ListVolume:output_type -> gnoi.containerz.ListVolumeResponse
+	47, // 73: gnoi.containerz.Containerz.StartPlugin:output_type -> gnoi.containerz.StartPluginResponse
+	49, // 74: gnoi.containerz.Containerz.StopPlugin:output_type -> gnoi.containerz.StopPluginResponse
+	52, // 75: gnoi.containerz.Containerz.ListPlugins:output_type -> gnoi.containerz.ListPluginsResponse
+	54, // 76: gnoi.containerz.Containerz.RemovePlugin:output_type -> gnoi.containerz.RemovePluginResponse
+	56, // 77: gnoi.containerz.Containerz.RemovePluginTar:output_type -> gnoi.containerz.RemovePluginTarResponse
+	61, // [61:78] is the sub-list for method output_type
+	44, // [44:61] is the sub-list for method input_type
+	44, // [44:44] is the sub-list for extension type_name
+	44, // [44:44] is the sub-list for extension extendee
+	0,  // [0:44] is the sub-list for field type_name
 }
 
 func init() { file_github_com_openconfig_gnoi_containerz_containerz_proto_init() }
@@ -3966,22 +4179,26 @@ func file_github_com_openconfig_gnoi_containerz_containerz_proto_init() {
 		(*DeployRequest_ImageTransfer)(nil),
 		(*DeployRequest_Content)(nil),
 		(*DeployRequest_ImageTransferEnd)(nil),
+		(*DeployRequest_SignedBundleContent)(nil),
+		(*DeployRequest_SignedBundleTransferEnd)(nil),
 	}
-	file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[3].OneofWrappers = []any{
+	file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[4].OneofWrappers = []any{
 		(*DeployResponse_ImageTransferReady)(nil),
 		(*DeployResponse_ImageTransferProgress)(nil),
 		(*DeployResponse_ImageTransferSuccess)(nil),
 		(*DeployResponse_ImageTransferError)(nil),
+		(*DeployResponse_SignedBundleTransferReady)(nil),
+		(*DeployResponse_SignedBundleTransferProgress)(nil),
 	}
-	file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[18].OneofWrappers = []any{
+	file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[21].OneofWrappers = []any{
 		(*StartContainerResponse_StartOk)(nil),
 		(*StartContainerResponse_StartError)(nil),
 	}
-	file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[24].OneofWrappers = []any{
+	file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[27].OneofWrappers = []any{
 		(*UpdateContainerResponse_UpdateOk)(nil),
 		(*UpdateContainerResponse_UpdateError)(nil),
 	}
-	file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[31].OneofWrappers = []any{
+	file_github_com_openconfig_gnoi_containerz_containerz_proto_msgTypes[34].OneofWrappers = []any{
 		(*CreateVolumeRequest_LocalMountOptions)(nil),
 		(*CreateVolumeRequest_CustomOptions)(nil),
 	}
@@ -3991,7 +4208,7 @@ func file_github_com_openconfig_gnoi_containerz_containerz_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDesc), len(file_github_com_openconfig_gnoi_containerz_containerz_proto_rawDesc)),
 			NumEnums:      6,
-			NumMessages:   63,
+			NumMessages:   66,
 			NumExtensions: 0,
 			NumServices:   1,
 		},
diff --git a/containerz/containerz.proto b/containerz/containerz.proto
index 25b04b23..dd168449 100644
--- a/containerz/containerz.proto
+++ b/containerz/containerz.proto
@@ -33,7 +33,7 @@ import "google/protobuf/timestamp.proto";
 import "google/rpc/status.proto";
 
 option go_package = "github.com/openconfig/gnoi/containerz";
-option (types.gnoi_version) = "0.2.0";
+option (types.gnoi_version) = "0.3.0";
 
 service Containerz {
   // Deploy sets a container image on the target. The container is sent as
@@ -43,6 +43,11 @@ service Containerz {
   // plugin, the target must save the file until StartPlugin is called. Whether
   // the registry is local or remote is target and deployment specific. A valid
   // container is one that has passed its checksum.
+  //
+  // When ImageTransfer.signed_bundle_size is non-zero, the client must stream
+  // a signed bundle after ImageTransferEnd and before the target completes
+  // integrity verification and loads the image. The bundle format and signing
+  // mechanism are implementation-specific and opaque to this RPC.
   // This RPC will return the following error codes in case of error:
   //    - ResourceExhausted if there isn't enough disk space to save the image.
   //    - InvalidArgument sends more data than was advertised or if there is
@@ -191,6 +196,8 @@ message DeployRequest {
     ImageTransfer image_transfer = 1;
     bytes content = 2;
     ImageTransferEnd image_transfer_end = 3;
+    bytes signed_bundle_content = 4;
+    SignedBundleTransferEnd signed_bundle_transfer_end = 5;
   }
 }
 
@@ -215,21 +222,37 @@ message ImageTransfer {
 
   // Indicates that the file to be transferred is a plugin.
   bool is_plugin = 5;
+
+  // Optional size (in bytes) of a signed bundle transferred alongside the
+  // container image. When non-zero, the client must stream signed bundle bytes
+  // after ImageTransferEnd using signed_bundle_content messages and terminate
+  // the bundle transfer with SignedBundleTransferEnd. The bundle contents and
+  // signing scheme are opaque to this RPC.
+  uint64 signed_bundle_size = 6;
 }
 
 // ImageTransferEnd indicates to the target that the client is finished sending
-// and therefore no more content will be sent. Any content sent after this
-// message should be discarded. This message serves as a signal to the target
-// to begin integrity verifications on the received data.
+// image content. If ImageTransfer.signed_bundle_size is zero, no more content
+// will be sent and the target may begin integrity verification on the received
+// image data. If signed_bundle_size is non-zero, the client must stream the
+// signed bundle before verification completes.
 message ImageTransferEnd {
 }
 
+// SignedBundleTransferEnd indicates to the target that the client is finished
+// sending signed bundle content. The target may begin integrity verification
+// on the received image and bundle data.
+message SignedBundleTransferEnd {
+}
+
 message DeployResponse {
   oneof response {
     ImageTransferReady image_transfer_ready = 1;
     ImageTransferProgress image_transfer_progress = 2;
     ImageTransferSuccess image_transfer_success = 3;
     google.rpc.Status image_transfer_error = 4;
+    SignedBundleTransferReady signed_bundle_transfer_ready = 5;
+    SignedBundleTransferProgress signed_bundle_transfer_progress = 6;
   }
 }
 
@@ -247,6 +270,21 @@ message ImageTransferProgress {
   uint64 bytes_received = 1;
 }
 
+// SignedBundleTransferReady indicates to the client that the target is ready
+// to receive signed bundle content after the image transfer completes.
+message SignedBundleTransferReady {
+  // Indicates the size of the chunks that the client should break the bundle
+  // into as it is transferred.
+  int32 chunk_size = 1;
+}
+
+// SignedBundleTransferProgress is sent periodically to the client during the
+// signed bundle transfer.
+message SignedBundleTransferProgress {
+  // The number of signed bundle bytes transferred so far.
+  uint64 bytes_received = 1;
+}
+
 // ImageTransferSuccess indicates to the client that the container image
 // transfer was successful.
 message ImageTransferSuccess {