diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/ClientConfigureRequest.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/ClientConfigureRequest.ts
index 7f07e8966..4128fdda4 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/ClientConfigureRequest.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/ClientConfigureRequest.ts
@@ -5,7 +5,7 @@
  * Metadata to be attached for the given type of RPCs.
  */
 export interface _grpc_testing_ClientConfigureRequest_Metadata {
-  'type'?: (_grpc_testing_ClientConfigureRequest_RpcType | keyof typeof _grpc_testing_ClientConfigureRequest_RpcType);
+  'type'?: (_grpc_testing_ClientConfigureRequest_RpcType);
   'key'?: (string);
   'value'?: (string);
 }
@@ -14,7 +14,7 @@ export interface _grpc_testing_ClientConfigureRequest_Metadata {
  * Metadata to be attached for the given type of RPCs.
  */
 export interface _grpc_testing_ClientConfigureRequest_Metadata__Output {
-  'type': (keyof typeof _grpc_testing_ClientConfigureRequest_RpcType);
+  'type': (_grpc_testing_ClientConfigureRequest_RpcType__Output);
   'key': (string);
   'value': (string);
 }
@@ -24,10 +24,24 @@ export interface _grpc_testing_ClientConfigureRequest_Metadata__Output {
 /**
  * Type of RPCs to send.
  */
-export enum _grpc_testing_ClientConfigureRequest_RpcType {
-  EMPTY_CALL = 0,
-  UNARY_CALL = 1,
-}
+export const _grpc_testing_ClientConfigureRequest_RpcType = {
+  EMPTY_CALL: 'EMPTY_CALL',
+  UNARY_CALL: 'UNARY_CALL',
+} as const;
+
+/**
+ * Type of RPCs to send.
+ */
+export type _grpc_testing_ClientConfigureRequest_RpcType =
+  | 'EMPTY_CALL'
+  | 0
+  | 'UNARY_CALL'
+  | 1
+
+/**
+ * Type of RPCs to send.
+ */
+export type _grpc_testing_ClientConfigureRequest_RpcType__Output = typeof _grpc_testing_ClientConfigureRequest_RpcType[keyof typeof _grpc_testing_ClientConfigureRequest_RpcType]
 
 /**
  * Configurations for a test client.
@@ -36,7 +50,7 @@ export interface ClientConfigureRequest {
   /**
    * The types of RPCs the client sends.
    */
-  'types'?: (_grpc_testing_ClientConfigureRequest_RpcType | keyof typeof _grpc_testing_ClientConfigureRequest_RpcType)[];
+  'types'?: (_grpc_testing_ClientConfigureRequest_RpcType)[];
   /**
    * The collection of custom metadata to be attached to RPCs sent by the client.
    */
@@ -55,7 +69,7 @@ export interface ClientConfigureRequest__Output {
   /**
    * The types of RPCs the client sends.
    */
-  'types': (keyof typeof _grpc_testing_ClientConfigureRequest_RpcType)[];
+  'types': (_grpc_testing_ClientConfigureRequest_RpcType__Output)[];
   /**
    * The collection of custom metadata to be attached to RPCs sent by the client.
    */
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/GrpclbRouteType.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/GrpclbRouteType.ts
index 8ab0146b7..667442b41 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/GrpclbRouteType.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/GrpclbRouteType.ts
@@ -8,17 +8,52 @@
  * the address of this server from the gRPCLB server BalanceLoad RPC). Exactly
  * how this detection is done is context and server dependent.
  */
-export enum GrpclbRouteType {
+export const GrpclbRouteType = {
   /**
    * Server didn't detect the route that a client took to reach it.
    */
-  GRPCLB_ROUTE_TYPE_UNKNOWN = 0,
+  GRPCLB_ROUTE_TYPE_UNKNOWN: 'GRPCLB_ROUTE_TYPE_UNKNOWN',
   /**
    * Indicates that a client reached a server via gRPCLB fallback.
    */
-  GRPCLB_ROUTE_TYPE_FALLBACK = 1,
+  GRPCLB_ROUTE_TYPE_FALLBACK: 'GRPCLB_ROUTE_TYPE_FALLBACK',
   /**
    * Indicates that a client reached a server as a gRPCLB-given backend.
    */
-  GRPCLB_ROUTE_TYPE_BACKEND = 2,
-}
+  GRPCLB_ROUTE_TYPE_BACKEND: 'GRPCLB_ROUTE_TYPE_BACKEND',
+} as const;
+
+/**
+ * The type of route that a client took to reach a server w.r.t. gRPCLB.
+ * The server must fill in "fallback" if it detects that the RPC reached
+ * the server via the "gRPCLB fallback" path, and "backend" if it detects
+ * that the RPC reached the server via "gRPCLB backend" path (i.e. if it got
+ * the address of this server from the gRPCLB server BalanceLoad RPC). Exactly
+ * how this detection is done is context and server dependent.
+ */
+export type GrpclbRouteType =
+  /**
+   * Server didn't detect the route that a client took to reach it.
+   */
+  | 'GRPCLB_ROUTE_TYPE_UNKNOWN'
+  | 0
+  /**
+   * Indicates that a client reached a server via gRPCLB fallback.
+   */
+  | 'GRPCLB_ROUTE_TYPE_FALLBACK'
+  | 1
+  /**
+   * Indicates that a client reached a server as a gRPCLB-given backend.
+   */
+  | 'GRPCLB_ROUTE_TYPE_BACKEND'
+  | 2
+
+/**
+ * The type of route that a client took to reach a server w.r.t. gRPCLB.
+ * The server must fill in "fallback" if it detects that the RPC reached
+ * the server via the "gRPCLB fallback" path, and "backend" if it detects
+ * that the RPC reached the server via "gRPCLB backend" path (i.e. if it got
+ * the address of this server from the gRPCLB server BalanceLoad RPC). Exactly
+ * how this detection is done is context and server dependent.
+ */
+export type GrpclbRouteType__Output = typeof GrpclbRouteType[keyof typeof GrpclbRouteType]
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerAccumulatedStatsResponse.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerAccumulatedStatsResponse.ts
index 91157ac4e..000ef9ecf 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerAccumulatedStatsResponse.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerAccumulatedStatsResponse.ts
@@ -32,16 +32,19 @@ export interface LoadBalancerAccumulatedStatsResponse {
   /**
    * The total number of RPCs have ever issued for each type.
    * Deprecated: use stats_per_method.rpcs_started instead.
+   * @deprecated
    */
   'num_rpcs_started_by_method'?: ({[key: string]: number});
   /**
    * The total number of RPCs have ever completed successfully for each type.
    * Deprecated: use stats_per_method.result instead.
+   * @deprecated
    */
   'num_rpcs_succeeded_by_method'?: ({[key: string]: number});
   /**
    * The total number of RPCs have ever failed for each type.
    * Deprecated: use stats_per_method.result instead.
+   * @deprecated
    */
   'num_rpcs_failed_by_method'?: ({[key: string]: number});
   /**
@@ -58,21 +61,24 @@ export interface LoadBalancerAccumulatedStatsResponse__Output {
   /**
    * The total number of RPCs have ever issued for each type.
    * Deprecated: use stats_per_method.rpcs_started instead.
+   * @deprecated
    */
   'num_rpcs_started_by_method': ({[key: string]: number});
   /**
    * The total number of RPCs have ever completed successfully for each type.
    * Deprecated: use stats_per_method.result instead.
+   * @deprecated
    */
   'num_rpcs_succeeded_by_method': ({[key: string]: number});
   /**
    * The total number of RPCs have ever failed for each type.
    * Deprecated: use stats_per_method.result instead.
+   * @deprecated
    */
   'num_rpcs_failed_by_method': ({[key: string]: number});
   /**
    * Per-method RPC statistics.  The key is the RpcType in string form; e.g.
    * 'EMPTY_CALL' or 'UNARY_CALL'
    */
-  'stats_per_method'?: ({[key: string]: _grpc_testing_LoadBalancerAccumulatedStatsResponse_MethodStats__Output});
+  'stats_per_method': ({[key: string]: _grpc_testing_LoadBalancerAccumulatedStatsResponse_MethodStats__Output});
 }
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerStatsResponse.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerStatsResponse.ts
index 184a6e258..ab33612c3 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerStatsResponse.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerStatsResponse.ts
@@ -36,5 +36,5 @@ export interface LoadBalancerStatsResponse__Output {
    * The number of RPCs that failed to record a remote peer.
    */
   'num_failures': (number);
-  'rpcs_by_method'?: ({[key: string]: _grpc_testing_LoadBalancerStatsResponse_RpcsByPeer__Output});
+  'rpcs_by_method': ({[key: string]: _grpc_testing_LoadBalancerStatsResponse_RpcsByPeer__Output});
 }
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerStatsService.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerStatsService.ts
index 26cfee9d7..9d11d9418 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerStatsService.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/LoadBalancerStatsService.ts
@@ -1,6 +1,7 @@
 // Original file: proto/grpc/testing/test.proto
 
 import type * as grpc from '@grpc/grpc-js'
+import type { MethodDefinition } from '@grpc/proto-loader'
 import type { LoadBalancerAccumulatedStatsRequest as _grpc_testing_LoadBalancerAccumulatedStatsRequest, LoadBalancerAccumulatedStatsRequest__Output as _grpc_testing_LoadBalancerAccumulatedStatsRequest__Output } from '../../grpc/testing/LoadBalancerAccumulatedStatsRequest';
 import type { LoadBalancerAccumulatedStatsResponse as _grpc_testing_LoadBalancerAccumulatedStatsResponse, LoadBalancerAccumulatedStatsResponse__Output as _grpc_testing_LoadBalancerAccumulatedStatsResponse__Output } from '../../grpc/testing/LoadBalancerAccumulatedStatsResponse';
 import type { LoadBalancerStatsRequest as _grpc_testing_LoadBalancerStatsRequest, LoadBalancerStatsRequest__Output as _grpc_testing_LoadBalancerStatsRequest__Output } from '../../grpc/testing/LoadBalancerStatsRequest';
@@ -13,32 +14,32 @@ export interface LoadBalancerStatsServiceClient extends grpc.Client {
   /**
    * Gets the accumulated stats for RPCs sent by a test client.
    */
-  GetClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerAccumulatedStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  GetClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerAccumulatedStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  GetClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerAccumulatedStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  GetClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerAccumulatedStatsResponse__Output) => void): grpc.ClientUnaryCall;
+  GetClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_LoadBalancerAccumulatedStatsResponse__Output>): grpc.ClientUnaryCall;
+  GetClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_LoadBalancerAccumulatedStatsResponse__Output>): grpc.ClientUnaryCall;
+  GetClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_LoadBalancerAccumulatedStatsResponse__Output>): grpc.ClientUnaryCall;
+  GetClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, callback: grpc.requestCallback<_grpc_testing_LoadBalancerAccumulatedStatsResponse__Output>): grpc.ClientUnaryCall;
   /**
    * Gets the accumulated stats for RPCs sent by a test client.
    */
-  getClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerAccumulatedStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  getClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerAccumulatedStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  getClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerAccumulatedStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  getClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerAccumulatedStatsResponse__Output) => void): grpc.ClientUnaryCall;
+  getClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_LoadBalancerAccumulatedStatsResponse__Output>): grpc.ClientUnaryCall;
+  getClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_LoadBalancerAccumulatedStatsResponse__Output>): grpc.ClientUnaryCall;
+  getClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_LoadBalancerAccumulatedStatsResponse__Output>): grpc.ClientUnaryCall;
+  getClientAccumulatedStats(argument: _grpc_testing_LoadBalancerAccumulatedStatsRequest, callback: grpc.requestCallback<_grpc_testing_LoadBalancerAccumulatedStatsResponse__Output>): grpc.ClientUnaryCall;
   
   /**
    * Gets the backend distribution for RPCs sent by a test client.
    */
-  GetClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  GetClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  GetClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  GetClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerStatsResponse__Output) => void): grpc.ClientUnaryCall;
+  GetClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_LoadBalancerStatsResponse__Output>): grpc.ClientUnaryCall;
+  GetClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_LoadBalancerStatsResponse__Output>): grpc.ClientUnaryCall;
+  GetClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_LoadBalancerStatsResponse__Output>): grpc.ClientUnaryCall;
+  GetClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, callback: grpc.requestCallback<_grpc_testing_LoadBalancerStatsResponse__Output>): grpc.ClientUnaryCall;
   /**
    * Gets the backend distribution for RPCs sent by a test client.
    */
-  getClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  getClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  getClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerStatsResponse__Output) => void): grpc.ClientUnaryCall;
-  getClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, callback: (error?: grpc.ServiceError, result?: _grpc_testing_LoadBalancerStatsResponse__Output) => void): grpc.ClientUnaryCall;
+  getClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_LoadBalancerStatsResponse__Output>): grpc.ClientUnaryCall;
+  getClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_LoadBalancerStatsResponse__Output>): grpc.ClientUnaryCall;
+  getClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_LoadBalancerStatsResponse__Output>): grpc.ClientUnaryCall;
+  getClientStats(argument: _grpc_testing_LoadBalancerStatsRequest, callback: grpc.requestCallback<_grpc_testing_LoadBalancerStatsResponse__Output>): grpc.ClientUnaryCall;
   
 }
 
@@ -57,3 +58,8 @@ export interface LoadBalancerStatsServiceHandlers extends grpc.UntypedServiceImp
   GetClientStats: grpc.handleUnaryCall<_grpc_testing_LoadBalancerStatsRequest__Output, _grpc_testing_LoadBalancerStatsResponse>;
   
 }
+
+export interface LoadBalancerStatsServiceDefinition extends grpc.ServiceDefinition {
+  GetClientAccumulatedStats: MethodDefinition<_grpc_testing_LoadBalancerAccumulatedStatsRequest, _grpc_testing_LoadBalancerAccumulatedStatsResponse, _grpc_testing_LoadBalancerAccumulatedStatsRequest__Output, _grpc_testing_LoadBalancerAccumulatedStatsResponse__Output>
+  GetClientStats: MethodDefinition<_grpc_testing_LoadBalancerStatsRequest, _grpc_testing_LoadBalancerStatsResponse, _grpc_testing_LoadBalancerStatsRequest__Output, _grpc_testing_LoadBalancerStatsResponse__Output>
+}
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/Payload.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/Payload.ts
index 79102d2bf..17eb9e60a 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/Payload.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/Payload.ts
@@ -1,6 +1,6 @@
 // Original file: proto/grpc/testing/messages.proto
 
-import type { PayloadType as _grpc_testing_PayloadType } from '../../grpc/testing/PayloadType';
+import type { PayloadType as _grpc_testing_PayloadType, PayloadType__Output as _grpc_testing_PayloadType__Output } from '../../grpc/testing/PayloadType';
 
 /**
  * A block of data, to simply increase gRPC message size.
@@ -9,7 +9,7 @@ export interface Payload {
   /**
    * The type of data in body.
    */
-  'type'?: (_grpc_testing_PayloadType | keyof typeof _grpc_testing_PayloadType);
+  'type'?: (_grpc_testing_PayloadType);
   /**
    * Primary contents of payload.
    */
@@ -23,7 +23,7 @@ export interface Payload__Output {
   /**
    * The type of data in body.
    */
-  'type': (keyof typeof _grpc_testing_PayloadType);
+  'type': (_grpc_testing_PayloadType__Output);
   /**
    * Primary contents of payload.
    */
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/PayloadType.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/PayloadType.ts
index 3cf9d375a..64e526090 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/PayloadType.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/PayloadType.ts
@@ -3,9 +3,24 @@
 /**
  * The type of payload that should be returned.
  */
-export enum PayloadType {
+export const PayloadType = {
   /**
    * Compressable text format.
    */
-  COMPRESSABLE = 0,
-}
+  COMPRESSABLE: 'COMPRESSABLE',
+} as const;
+
+/**
+ * The type of payload that should be returned.
+ */
+export type PayloadType =
+  /**
+   * Compressable text format.
+   */
+  | 'COMPRESSABLE'
+  | 0
+
+/**
+ * The type of payload that should be returned.
+ */
+export type PayloadType__Output = typeof PayloadType[keyof typeof PayloadType]
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/ReconnectService.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/ReconnectService.ts
index e489e2849..2e3f25680 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/ReconnectService.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/ReconnectService.ts
@@ -1,6 +1,7 @@
 // Original file: proto/grpc/testing/test.proto
 
 import type * as grpc from '@grpc/grpc-js'
+import type { MethodDefinition } from '@grpc/proto-loader'
 import type { Empty as _grpc_testing_Empty, Empty__Output as _grpc_testing_Empty__Output } from '../../grpc/testing/Empty';
 import type { ReconnectInfo as _grpc_testing_ReconnectInfo, ReconnectInfo__Output as _grpc_testing_ReconnectInfo__Output } from '../../grpc/testing/ReconnectInfo';
 import type { ReconnectParams as _grpc_testing_ReconnectParams, ReconnectParams__Output as _grpc_testing_ReconnectParams__Output } from '../../grpc/testing/ReconnectParams';
@@ -9,23 +10,23 @@ import type { ReconnectParams as _grpc_testing_ReconnectParams, ReconnectParams_
  * A service used to control reconnect server.
  */
 export interface ReconnectServiceClient extends grpc.Client {
-  Start(argument: _grpc_testing_ReconnectParams, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  Start(argument: _grpc_testing_ReconnectParams, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  Start(argument: _grpc_testing_ReconnectParams, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  Start(argument: _grpc_testing_ReconnectParams, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  start(argument: _grpc_testing_ReconnectParams, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  start(argument: _grpc_testing_ReconnectParams, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  start(argument: _grpc_testing_ReconnectParams, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  start(argument: _grpc_testing_ReconnectParams, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
+  Start(argument: _grpc_testing_ReconnectParams, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  Start(argument: _grpc_testing_ReconnectParams, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  Start(argument: _grpc_testing_ReconnectParams, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  Start(argument: _grpc_testing_ReconnectParams, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  start(argument: _grpc_testing_ReconnectParams, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  start(argument: _grpc_testing_ReconnectParams, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  start(argument: _grpc_testing_ReconnectParams, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  start(argument: _grpc_testing_ReconnectParams, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
   
-  Stop(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ReconnectInfo__Output) => void): grpc.ClientUnaryCall;
-  Stop(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ReconnectInfo__Output) => void): grpc.ClientUnaryCall;
-  Stop(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ReconnectInfo__Output) => void): grpc.ClientUnaryCall;
-  Stop(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ReconnectInfo__Output) => void): grpc.ClientUnaryCall;
-  stop(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ReconnectInfo__Output) => void): grpc.ClientUnaryCall;
-  stop(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ReconnectInfo__Output) => void): grpc.ClientUnaryCall;
-  stop(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ReconnectInfo__Output) => void): grpc.ClientUnaryCall;
-  stop(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ReconnectInfo__Output) => void): grpc.ClientUnaryCall;
+  Stop(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_ReconnectInfo__Output>): grpc.ClientUnaryCall;
+  Stop(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_ReconnectInfo__Output>): grpc.ClientUnaryCall;
+  Stop(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_ReconnectInfo__Output>): grpc.ClientUnaryCall;
+  Stop(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_ReconnectInfo__Output>): grpc.ClientUnaryCall;
+  stop(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_ReconnectInfo__Output>): grpc.ClientUnaryCall;
+  stop(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_ReconnectInfo__Output>): grpc.ClientUnaryCall;
+  stop(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_ReconnectInfo__Output>): grpc.ClientUnaryCall;
+  stop(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_ReconnectInfo__Output>): grpc.ClientUnaryCall;
   
 }
 
@@ -38,3 +39,8 @@ export interface ReconnectServiceHandlers extends grpc.UntypedServiceImplementat
   Stop: grpc.handleUnaryCall<_grpc_testing_Empty__Output, _grpc_testing_ReconnectInfo>;
   
 }
+
+export interface ReconnectServiceDefinition extends grpc.ServiceDefinition {
+  Start: MethodDefinition<_grpc_testing_ReconnectParams, _grpc_testing_Empty, _grpc_testing_ReconnectParams__Output, _grpc_testing_Empty__Output>
+  Stop: MethodDefinition<_grpc_testing_Empty, _grpc_testing_ReconnectInfo, _grpc_testing_Empty__Output, _grpc_testing_ReconnectInfo__Output>
+}
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/ResponseParameters.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/ResponseParameters.ts
index 04ca94ced..15f2f01f4 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/ResponseParameters.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/ResponseParameters.ts
@@ -21,7 +21,7 @@ export interface ResponseParameters {
    * implement the full compression tests by introspecting the call to verify
    * the response's compression status.
    */
-  'compressed'?: (_grpc_testing_BoolValue);
+  'compressed'?: (_grpc_testing_BoolValue | null);
 }
 
 /**
@@ -43,5 +43,5 @@ export interface ResponseParameters__Output {
    * implement the full compression tests by introspecting the call to verify
    * the response's compression status.
    */
-  'compressed'?: (_grpc_testing_BoolValue__Output);
+  'compressed': (_grpc_testing_BoolValue__Output | null);
 }
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/SimpleRequest.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/SimpleRequest.ts
index 056eb10b2..21843af69 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/SimpleRequest.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/SimpleRequest.ts
@@ -1,6 +1,6 @@
 // Original file: proto/grpc/testing/messages.proto
 
-import type { PayloadType as _grpc_testing_PayloadType } from '../../grpc/testing/PayloadType';
+import type { PayloadType as _grpc_testing_PayloadType, PayloadType__Output as _grpc_testing_PayloadType__Output } from '../../grpc/testing/PayloadType';
 import type { Payload as _grpc_testing_Payload, Payload__Output as _grpc_testing_Payload__Output } from '../../grpc/testing/Payload';
 import type { BoolValue as _grpc_testing_BoolValue, BoolValue__Output as _grpc_testing_BoolValue__Output } from '../../grpc/testing/BoolValue';
 import type { EchoStatus as _grpc_testing_EchoStatus, EchoStatus__Output as _grpc_testing_EchoStatus__Output } from '../../grpc/testing/EchoStatus';
@@ -13,7 +13,7 @@ export interface SimpleRequest {
    * Desired payload type in the response from the server.
    * If response_type is RANDOM, server randomly chooses one from other formats.
    */
-  'response_type'?: (_grpc_testing_PayloadType | keyof typeof _grpc_testing_PayloadType);
+  'response_type'?: (_grpc_testing_PayloadType);
   /**
    * Desired payload size in the response from the server.
    */
@@ -21,7 +21,7 @@ export interface SimpleRequest {
   /**
    * Optional input payload sent along with the request.
    */
-  'payload'?: (_grpc_testing_Payload);
+  'payload'?: (_grpc_testing_Payload | null);
   /**
    * Whether SimpleResponse should include username.
    */
@@ -36,15 +36,15 @@ export interface SimpleRequest {
    * implement the full compression tests by introspecting the call to verify
    * the response's compression status.
    */
-  'response_compressed'?: (_grpc_testing_BoolValue);
+  'response_compressed'?: (_grpc_testing_BoolValue | null);
   /**
    * Whether server should return a given status
    */
-  'response_status'?: (_grpc_testing_EchoStatus);
+  'response_status'?: (_grpc_testing_EchoStatus | null);
   /**
    * Whether the server should expect this request to be compressed.
    */
-  'expect_compressed'?: (_grpc_testing_BoolValue);
+  'expect_compressed'?: (_grpc_testing_BoolValue | null);
   /**
    * Whether SimpleResponse should include server_id.
    */
@@ -63,7 +63,7 @@ export interface SimpleRequest__Output {
    * Desired payload type in the response from the server.
    * If response_type is RANDOM, server randomly chooses one from other formats.
    */
-  'response_type': (keyof typeof _grpc_testing_PayloadType);
+  'response_type': (_grpc_testing_PayloadType__Output);
   /**
    * Desired payload size in the response from the server.
    */
@@ -71,7 +71,7 @@ export interface SimpleRequest__Output {
   /**
    * Optional input payload sent along with the request.
    */
-  'payload'?: (_grpc_testing_Payload__Output);
+  'payload': (_grpc_testing_Payload__Output | null);
   /**
    * Whether SimpleResponse should include username.
    */
@@ -86,15 +86,15 @@ export interface SimpleRequest__Output {
    * implement the full compression tests by introspecting the call to verify
    * the response's compression status.
    */
-  'response_compressed'?: (_grpc_testing_BoolValue__Output);
+  'response_compressed': (_grpc_testing_BoolValue__Output | null);
   /**
    * Whether server should return a given status
    */
-  'response_status'?: (_grpc_testing_EchoStatus__Output);
+  'response_status': (_grpc_testing_EchoStatus__Output | null);
   /**
    * Whether the server should expect this request to be compressed.
    */
-  'expect_compressed'?: (_grpc_testing_BoolValue__Output);
+  'expect_compressed': (_grpc_testing_BoolValue__Output | null);
   /**
    * Whether SimpleResponse should include server_id.
    */
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/SimpleResponse.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/SimpleResponse.ts
index 661f336ce..b737c31fa 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/SimpleResponse.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/SimpleResponse.ts
@@ -1,7 +1,7 @@
 // Original file: proto/grpc/testing/messages.proto
 
 import type { Payload as _grpc_testing_Payload, Payload__Output as _grpc_testing_Payload__Output } from '../../grpc/testing/Payload';
-import type { GrpclbRouteType as _grpc_testing_GrpclbRouteType } from '../../grpc/testing/GrpclbRouteType';
+import type { GrpclbRouteType as _grpc_testing_GrpclbRouteType, GrpclbRouteType__Output as _grpc_testing_GrpclbRouteType__Output } from '../../grpc/testing/GrpclbRouteType';
 
 /**
  * Unary response, as configured by the request.
@@ -10,7 +10,7 @@ export interface SimpleResponse {
   /**
    * Payload to increase message size.
    */
-  'payload'?: (_grpc_testing_Payload);
+  'payload'?: (_grpc_testing_Payload | null);
   /**
    * The user the request came from, for verifying authentication was
    * successful when the client expected it.
@@ -28,7 +28,7 @@ export interface SimpleResponse {
   /**
    * gRPCLB Path.
    */
-  'grpclb_route_type'?: (_grpc_testing_GrpclbRouteType | keyof typeof _grpc_testing_GrpclbRouteType);
+  'grpclb_route_type'?: (_grpc_testing_GrpclbRouteType);
   /**
    * Server hostname.
    */
@@ -42,7 +42,7 @@ export interface SimpleResponse__Output {
   /**
    * Payload to increase message size.
    */
-  'payload'?: (_grpc_testing_Payload__Output);
+  'payload': (_grpc_testing_Payload__Output | null);
   /**
    * The user the request came from, for verifying authentication was
    * successful when the client expected it.
@@ -60,7 +60,7 @@ export interface SimpleResponse__Output {
   /**
    * gRPCLB Path.
    */
-  'grpclb_route_type': (keyof typeof _grpc_testing_GrpclbRouteType);
+  'grpclb_route_type': (_grpc_testing_GrpclbRouteType__Output);
   /**
    * Server hostname.
    */
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingInputCallRequest.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingInputCallRequest.ts
index 56ad2b217..f45568849 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingInputCallRequest.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingInputCallRequest.ts
@@ -10,14 +10,14 @@ export interface StreamingInputCallRequest {
   /**
    * Optional input payload sent along with the request.
    */
-  'payload'?: (_grpc_testing_Payload);
+  'payload'?: (_grpc_testing_Payload | null);
   /**
    * Whether the server should expect this request to be compressed. This field
    * is "nullable" in order to interoperate seamlessly with servers not able to
    * implement the full compression tests by introspecting the call to verify
    * the request's compression status.
    */
-  'expect_compressed'?: (_grpc_testing_BoolValue);
+  'expect_compressed'?: (_grpc_testing_BoolValue | null);
 }
 
 /**
@@ -27,12 +27,12 @@ export interface StreamingInputCallRequest__Output {
   /**
    * Optional input payload sent along with the request.
    */
-  'payload'?: (_grpc_testing_Payload__Output);
+  'payload': (_grpc_testing_Payload__Output | null);
   /**
    * Whether the server should expect this request to be compressed. This field
    * is "nullable" in order to interoperate seamlessly with servers not able to
    * implement the full compression tests by introspecting the call to verify
    * the request's compression status.
    */
-  'expect_compressed'?: (_grpc_testing_BoolValue__Output);
+  'expect_compressed': (_grpc_testing_BoolValue__Output | null);
 }
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingOutputCallRequest.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingOutputCallRequest.ts
index 52922062d..0d812b74f 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingOutputCallRequest.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingOutputCallRequest.ts
@@ -1,6 +1,6 @@
 // Original file: proto/grpc/testing/messages.proto
 
-import type { PayloadType as _grpc_testing_PayloadType } from '../../grpc/testing/PayloadType';
+import type { PayloadType as _grpc_testing_PayloadType, PayloadType__Output as _grpc_testing_PayloadType__Output } from '../../grpc/testing/PayloadType';
 import type { ResponseParameters as _grpc_testing_ResponseParameters, ResponseParameters__Output as _grpc_testing_ResponseParameters__Output } from '../../grpc/testing/ResponseParameters';
 import type { Payload as _grpc_testing_Payload, Payload__Output as _grpc_testing_Payload__Output } from '../../grpc/testing/Payload';
 import type { EchoStatus as _grpc_testing_EchoStatus, EchoStatus__Output as _grpc_testing_EchoStatus__Output } from '../../grpc/testing/EchoStatus';
@@ -15,7 +15,7 @@ export interface StreamingOutputCallRequest {
    * might be of different types. This is to simulate a mixed type of payload
    * stream.
    */
-  'response_type'?: (_grpc_testing_PayloadType | keyof typeof _grpc_testing_PayloadType);
+  'response_type'?: (_grpc_testing_PayloadType);
   /**
    * Configuration for each expected response message.
    */
@@ -23,11 +23,11 @@ export interface StreamingOutputCallRequest {
   /**
    * Optional input payload sent along with the request.
    */
-  'payload'?: (_grpc_testing_Payload);
+  'payload'?: (_grpc_testing_Payload | null);
   /**
    * Whether server should return a given status
    */
-  'response_status'?: (_grpc_testing_EchoStatus);
+  'response_status'?: (_grpc_testing_EchoStatus | null);
 }
 
 /**
@@ -40,7 +40,7 @@ export interface StreamingOutputCallRequest__Output {
    * might be of different types. This is to simulate a mixed type of payload
    * stream.
    */
-  'response_type': (keyof typeof _grpc_testing_PayloadType);
+  'response_type': (_grpc_testing_PayloadType__Output);
   /**
    * Configuration for each expected response message.
    */
@@ -48,9 +48,9 @@ export interface StreamingOutputCallRequest__Output {
   /**
    * Optional input payload sent along with the request.
    */
-  'payload'?: (_grpc_testing_Payload__Output);
+  'payload': (_grpc_testing_Payload__Output | null);
   /**
    * Whether server should return a given status
    */
-  'response_status'?: (_grpc_testing_EchoStatus__Output);
+  'response_status': (_grpc_testing_EchoStatus__Output | null);
 }
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingOutputCallResponse.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingOutputCallResponse.ts
index 19ab306dd..e2eb435cd 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingOutputCallResponse.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/StreamingOutputCallResponse.ts
@@ -9,7 +9,7 @@ export interface StreamingOutputCallResponse {
   /**
    * Payload to increase response size.
    */
-  'payload'?: (_grpc_testing_Payload);
+  'payload'?: (_grpc_testing_Payload | null);
 }
 
 /**
@@ -19,5 +19,5 @@ export interface StreamingOutputCallResponse__Output {
   /**
    * Payload to increase response size.
    */
-  'payload'?: (_grpc_testing_Payload__Output);
+  'payload': (_grpc_testing_Payload__Output | null);
 }
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/TestService.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/TestService.ts
index dbb606c83..139d3c0ef 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/TestService.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/TestService.ts
@@ -1,6 +1,7 @@
 // Original file: proto/grpc/testing/test.proto
 
 import type * as grpc from '@grpc/grpc-js'
+import type { MethodDefinition } from '@grpc/proto-loader'
 import type { Empty as _grpc_testing_Empty, Empty__Output as _grpc_testing_Empty__Output } from '../../grpc/testing/Empty';
 import type { SimpleRequest as _grpc_testing_SimpleRequest, SimpleRequest__Output as _grpc_testing_SimpleRequest__Output } from '../../grpc/testing/SimpleRequest';
 import type { SimpleResponse as _grpc_testing_SimpleResponse, SimpleResponse__Output as _grpc_testing_SimpleResponse__Output } from '../../grpc/testing/SimpleResponse';
@@ -19,34 +20,34 @@ export interface TestServiceClient extends grpc.Client {
    * headers set such that a caching HTTP proxy (such as GFE) can
    * satisfy subsequent requests.
    */
-  CacheableUnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  CacheableUnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  CacheableUnaryCall(argument: _grpc_testing_SimpleRequest, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  CacheableUnaryCall(argument: _grpc_testing_SimpleRequest, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
+  CacheableUnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  CacheableUnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  CacheableUnaryCall(argument: _grpc_testing_SimpleRequest, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  CacheableUnaryCall(argument: _grpc_testing_SimpleRequest, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
   /**
    * One request followed by one response. Response has cache control
    * headers set such that a caching HTTP proxy (such as GFE) can
    * satisfy subsequent requests.
    */
-  cacheableUnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  cacheableUnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  cacheableUnaryCall(argument: _grpc_testing_SimpleRequest, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  cacheableUnaryCall(argument: _grpc_testing_SimpleRequest, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
+  cacheableUnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  cacheableUnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  cacheableUnaryCall(argument: _grpc_testing_SimpleRequest, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  cacheableUnaryCall(argument: _grpc_testing_SimpleRequest, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
   
   /**
    * One empty request followed by one empty response.
    */
-  EmptyCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  EmptyCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  EmptyCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  EmptyCall(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
+  EmptyCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  EmptyCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  EmptyCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  EmptyCall(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
   /**
    * One empty request followed by one empty response.
    */
-  emptyCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  emptyCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  emptyCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  emptyCall(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
+  emptyCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  emptyCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  emptyCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  emptyCall(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
   
   /**
    * A sequence of requests with each request served by the server immediately.
@@ -84,18 +85,18 @@ export interface TestServiceClient extends grpc.Client {
    * A sequence of requests followed by one response (streamed upload).
    * The server returns the aggregated size of client payload as the result.
    */
-  StreamingInputCall(metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_StreamingInputCallResponse__Output) => void): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
-  StreamingInputCall(metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_StreamingInputCallResponse__Output) => void): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
-  StreamingInputCall(options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_StreamingInputCallResponse__Output) => void): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
-  StreamingInputCall(callback: (error?: grpc.ServiceError, result?: _grpc_testing_StreamingInputCallResponse__Output) => void): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
+  StreamingInputCall(metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_StreamingInputCallResponse__Output>): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
+  StreamingInputCall(metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_StreamingInputCallResponse__Output>): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
+  StreamingInputCall(options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_StreamingInputCallResponse__Output>): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
+  StreamingInputCall(callback: grpc.requestCallback<_grpc_testing_StreamingInputCallResponse__Output>): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
   /**
    * A sequence of requests followed by one response (streamed upload).
    * The server returns the aggregated size of client payload as the result.
    */
-  streamingInputCall(metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_StreamingInputCallResponse__Output) => void): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
-  streamingInputCall(metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_StreamingInputCallResponse__Output) => void): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
-  streamingInputCall(options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_StreamingInputCallResponse__Output) => void): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
-  streamingInputCall(callback: (error?: grpc.ServiceError, result?: _grpc_testing_StreamingInputCallResponse__Output) => void): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
+  streamingInputCall(metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_StreamingInputCallResponse__Output>): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
+  streamingInputCall(metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_StreamingInputCallResponse__Output>): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
+  streamingInputCall(options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_StreamingInputCallResponse__Output>): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
+  streamingInputCall(callback: grpc.requestCallback<_grpc_testing_StreamingInputCallResponse__Output>): grpc.ClientWritableStream<_grpc_testing_StreamingInputCallRequest>;
   
   /**
    * One request followed by a sequence of responses (streamed download).
@@ -113,34 +114,34 @@ export interface TestServiceClient extends grpc.Client {
   /**
    * One request followed by one response.
    */
-  UnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  UnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  UnaryCall(argument: _grpc_testing_SimpleRequest, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  UnaryCall(argument: _grpc_testing_SimpleRequest, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
+  UnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  UnaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  UnaryCall(argument: _grpc_testing_SimpleRequest, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  UnaryCall(argument: _grpc_testing_SimpleRequest, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
   /**
    * One request followed by one response.
    */
-  unaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  unaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  unaryCall(argument: _grpc_testing_SimpleRequest, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
-  unaryCall(argument: _grpc_testing_SimpleRequest, callback: (error?: grpc.ServiceError, result?: _grpc_testing_SimpleResponse__Output) => void): grpc.ClientUnaryCall;
+  unaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  unaryCall(argument: _grpc_testing_SimpleRequest, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  unaryCall(argument: _grpc_testing_SimpleRequest, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
+  unaryCall(argument: _grpc_testing_SimpleRequest, callback: grpc.requestCallback<_grpc_testing_SimpleResponse__Output>): grpc.ClientUnaryCall;
   
   /**
    * The test server will not implement this method. It will be used
    * to test the behavior when clients call unimplemented methods.
    */
-  UnimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  UnimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  UnimplementedCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  UnimplementedCall(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
+  UnimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  UnimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  UnimplementedCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  UnimplementedCall(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
   /**
    * The test server will not implement this method. It will be used
    * to test the behavior when clients call unimplemented methods.
    */
-  unimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  unimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  unimplementedCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  unimplementedCall(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
+  unimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  unimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  unimplementedCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  unimplementedCall(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
   
 }
 
@@ -200,3 +201,14 @@ export interface TestServiceHandlers extends grpc.UntypedServiceImplementation {
   UnimplementedCall: grpc.handleUnaryCall<_grpc_testing_Empty__Output, _grpc_testing_Empty>;
   
 }
+
+export interface TestServiceDefinition extends grpc.ServiceDefinition {
+  CacheableUnaryCall: MethodDefinition<_grpc_testing_SimpleRequest, _grpc_testing_SimpleResponse, _grpc_testing_SimpleRequest__Output, _grpc_testing_SimpleResponse__Output>
+  EmptyCall: MethodDefinition<_grpc_testing_Empty, _grpc_testing_Empty, _grpc_testing_Empty__Output, _grpc_testing_Empty__Output>
+  FullDuplexCall: MethodDefinition<_grpc_testing_StreamingOutputCallRequest, _grpc_testing_StreamingOutputCallResponse, _grpc_testing_StreamingOutputCallRequest__Output, _grpc_testing_StreamingOutputCallResponse__Output>
+  HalfDuplexCall: MethodDefinition<_grpc_testing_StreamingOutputCallRequest, _grpc_testing_StreamingOutputCallResponse, _grpc_testing_StreamingOutputCallRequest__Output, _grpc_testing_StreamingOutputCallResponse__Output>
+  StreamingInputCall: MethodDefinition<_grpc_testing_StreamingInputCallRequest, _grpc_testing_StreamingInputCallResponse, _grpc_testing_StreamingInputCallRequest__Output, _grpc_testing_StreamingInputCallResponse__Output>
+  StreamingOutputCall: MethodDefinition<_grpc_testing_StreamingOutputCallRequest, _grpc_testing_StreamingOutputCallResponse, _grpc_testing_StreamingOutputCallRequest__Output, _grpc_testing_StreamingOutputCallResponse__Output>
+  UnaryCall: MethodDefinition<_grpc_testing_SimpleRequest, _grpc_testing_SimpleResponse, _grpc_testing_SimpleRequest__Output, _grpc_testing_SimpleResponse__Output>
+  UnimplementedCall: MethodDefinition<_grpc_testing_Empty, _grpc_testing_Empty, _grpc_testing_Empty__Output, _grpc_testing_Empty__Output>
+}
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/UnimplementedService.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/UnimplementedService.ts
index d21dfcd0f..aea5d8b4a 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/UnimplementedService.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/UnimplementedService.ts
@@ -1,6 +1,7 @@
 // Original file: proto/grpc/testing/test.proto
 
 import type * as grpc from '@grpc/grpc-js'
+import type { MethodDefinition } from '@grpc/proto-loader'
 import type { Empty as _grpc_testing_Empty, Empty__Output as _grpc_testing_Empty__Output } from '../../grpc/testing/Empty';
 
 /**
@@ -11,17 +12,17 @@ export interface UnimplementedServiceClient extends grpc.Client {
   /**
    * A call that no server should implement
    */
-  UnimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  UnimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  UnimplementedCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  UnimplementedCall(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
+  UnimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  UnimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  UnimplementedCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  UnimplementedCall(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
   /**
    * A call that no server should implement
    */
-  unimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  unimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  unimplementedCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  unimplementedCall(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
+  unimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  unimplementedCall(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  unimplementedCall(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  unimplementedCall(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
   
 }
 
@@ -36,3 +37,7 @@ export interface UnimplementedServiceHandlers extends grpc.UntypedServiceImpleme
   UnimplementedCall: grpc.handleUnaryCall<_grpc_testing_Empty__Output, _grpc_testing_Empty>;
   
 }
+
+export interface UnimplementedServiceDefinition extends grpc.ServiceDefinition {
+  UnimplementedCall: MethodDefinition<_grpc_testing_Empty, _grpc_testing_Empty, _grpc_testing_Empty__Output, _grpc_testing_Empty__Output>
+}
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/XdsUpdateClientConfigureService.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/XdsUpdateClientConfigureService.ts
index 22947619c..76826b812 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/XdsUpdateClientConfigureService.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/XdsUpdateClientConfigureService.ts
@@ -1,6 +1,7 @@
 // Original file: proto/grpc/testing/test.proto
 
 import type * as grpc from '@grpc/grpc-js'
+import type { MethodDefinition } from '@grpc/proto-loader'
 import type { ClientConfigureRequest as _grpc_testing_ClientConfigureRequest, ClientConfigureRequest__Output as _grpc_testing_ClientConfigureRequest__Output } from '../../grpc/testing/ClientConfigureRequest';
 import type { ClientConfigureResponse as _grpc_testing_ClientConfigureResponse, ClientConfigureResponse__Output as _grpc_testing_ClientConfigureResponse__Output } from '../../grpc/testing/ClientConfigureResponse';
 
@@ -11,17 +12,17 @@ export interface XdsUpdateClientConfigureServiceClient extends grpc.Client {
   /**
    * Update the tes client's configuration.
    */
-  Configure(argument: _grpc_testing_ClientConfigureRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ClientConfigureResponse__Output) => void): grpc.ClientUnaryCall;
-  Configure(argument: _grpc_testing_ClientConfigureRequest, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ClientConfigureResponse__Output) => void): grpc.ClientUnaryCall;
-  Configure(argument: _grpc_testing_ClientConfigureRequest, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ClientConfigureResponse__Output) => void): grpc.ClientUnaryCall;
-  Configure(argument: _grpc_testing_ClientConfigureRequest, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ClientConfigureResponse__Output) => void): grpc.ClientUnaryCall;
+  Configure(argument: _grpc_testing_ClientConfigureRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_ClientConfigureResponse__Output>): grpc.ClientUnaryCall;
+  Configure(argument: _grpc_testing_ClientConfigureRequest, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_ClientConfigureResponse__Output>): grpc.ClientUnaryCall;
+  Configure(argument: _grpc_testing_ClientConfigureRequest, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_ClientConfigureResponse__Output>): grpc.ClientUnaryCall;
+  Configure(argument: _grpc_testing_ClientConfigureRequest, callback: grpc.requestCallback<_grpc_testing_ClientConfigureResponse__Output>): grpc.ClientUnaryCall;
   /**
    * Update the tes client's configuration.
    */
-  configure(argument: _grpc_testing_ClientConfigureRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ClientConfigureResponse__Output) => void): grpc.ClientUnaryCall;
-  configure(argument: _grpc_testing_ClientConfigureRequest, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ClientConfigureResponse__Output) => void): grpc.ClientUnaryCall;
-  configure(argument: _grpc_testing_ClientConfigureRequest, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ClientConfigureResponse__Output) => void): grpc.ClientUnaryCall;
-  configure(argument: _grpc_testing_ClientConfigureRequest, callback: (error?: grpc.ServiceError, result?: _grpc_testing_ClientConfigureResponse__Output) => void): grpc.ClientUnaryCall;
+  configure(argument: _grpc_testing_ClientConfigureRequest, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_ClientConfigureResponse__Output>): grpc.ClientUnaryCall;
+  configure(argument: _grpc_testing_ClientConfigureRequest, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_ClientConfigureResponse__Output>): grpc.ClientUnaryCall;
+  configure(argument: _grpc_testing_ClientConfigureRequest, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_ClientConfigureResponse__Output>): grpc.ClientUnaryCall;
+  configure(argument: _grpc_testing_ClientConfigureRequest, callback: grpc.requestCallback<_grpc_testing_ClientConfigureResponse__Output>): grpc.ClientUnaryCall;
   
 }
 
@@ -35,3 +36,7 @@ export interface XdsUpdateClientConfigureServiceHandlers extends grpc.UntypedSer
   Configure: grpc.handleUnaryCall<_grpc_testing_ClientConfigureRequest__Output, _grpc_testing_ClientConfigureResponse>;
   
 }
+
+export interface XdsUpdateClientConfigureServiceDefinition extends grpc.ServiceDefinition {
+  Configure: MethodDefinition<_grpc_testing_ClientConfigureRequest, _grpc_testing_ClientConfigureResponse, _grpc_testing_ClientConfigureRequest__Output, _grpc_testing_ClientConfigureResponse__Output>
+}
diff --git a/packages/grpc-js-xds/interop/generated/grpc/testing/XdsUpdateHealthService.ts b/packages/grpc-js-xds/interop/generated/grpc/testing/XdsUpdateHealthService.ts
index aa1e35dca..aa3d6e9c6 100644
--- a/packages/grpc-js-xds/interop/generated/grpc/testing/XdsUpdateHealthService.ts
+++ b/packages/grpc-js-xds/interop/generated/grpc/testing/XdsUpdateHealthService.ts
@@ -1,29 +1,30 @@
 // Original file: proto/grpc/testing/test.proto
 
 import type * as grpc from '@grpc/grpc-js'
+import type { MethodDefinition } from '@grpc/proto-loader'
 import type { Empty as _grpc_testing_Empty, Empty__Output as _grpc_testing_Empty__Output } from '../../grpc/testing/Empty';
 
 /**
  * A service to remotely control health status of an xDS test server.
  */
 export interface XdsUpdateHealthServiceClient extends grpc.Client {
-  SetNotServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  SetNotServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  SetNotServing(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  SetNotServing(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  setNotServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  setNotServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  setNotServing(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  setNotServing(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
+  SetNotServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  SetNotServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  SetNotServing(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  SetNotServing(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  setNotServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  setNotServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  setNotServing(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  setNotServing(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
   
-  SetServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  SetServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  SetServing(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  SetServing(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  setServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  setServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  setServing(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
-  setServing(argument: _grpc_testing_Empty, callback: (error?: grpc.ServiceError, result?: _grpc_testing_Empty__Output) => void): grpc.ClientUnaryCall;
+  SetServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  SetServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  SetServing(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  SetServing(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  setServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  setServing(argument: _grpc_testing_Empty, metadata: grpc.Metadata, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  setServing(argument: _grpc_testing_Empty, options: grpc.CallOptions, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
+  setServing(argument: _grpc_testing_Empty, callback: grpc.requestCallback<_grpc_testing_Empty__Output>): grpc.ClientUnaryCall;
   
 }
 
@@ -36,3 +37,8 @@ export interface XdsUpdateHealthServiceHandlers extends grpc.UntypedServiceImple
   SetServing: grpc.handleUnaryCall<_grpc_testing_Empty__Output, _grpc_testing_Empty>;
   
 }
+
+export interface XdsUpdateHealthServiceDefinition extends grpc.ServiceDefinition {
+  SetNotServing: MethodDefinition<_grpc_testing_Empty, _grpc_testing_Empty, _grpc_testing_Empty__Output, _grpc_testing_Empty__Output>
+  SetServing: MethodDefinition<_grpc_testing_Empty, _grpc_testing_Empty, _grpc_testing_Empty__Output, _grpc_testing_Empty__Output>
+}
diff --git a/packages/grpc-js-xds/interop/generated/test.ts b/packages/grpc-js-xds/interop/generated/test.ts
index f91f0c970..722f8fe28 100644
--- a/packages/grpc-js-xds/interop/generated/test.ts
+++ b/packages/grpc-js-xds/interop/generated/test.ts
@@ -1,12 +1,12 @@
 import type * as grpc from '@grpc/grpc-js';
-import type { ServiceDefinition, EnumTypeDefinition, MessageTypeDefinition } from '@grpc/proto-loader';
+import type { EnumTypeDefinition, MessageTypeDefinition } from '@grpc/proto-loader';
 
-import type { LoadBalancerStatsServiceClient as _grpc_testing_LoadBalancerStatsServiceClient } from './grpc/testing/LoadBalancerStatsService';
-import type { ReconnectServiceClient as _grpc_testing_ReconnectServiceClient } from './grpc/testing/ReconnectService';
-import type { TestServiceClient as _grpc_testing_TestServiceClient } from './grpc/testing/TestService';
-import type { UnimplementedServiceClient as _grpc_testing_UnimplementedServiceClient } from './grpc/testing/UnimplementedService';
-import type { XdsUpdateClientConfigureServiceClient as _grpc_testing_XdsUpdateClientConfigureServiceClient } from './grpc/testing/XdsUpdateClientConfigureService';
-import type { XdsUpdateHealthServiceClient as _grpc_testing_XdsUpdateHealthServiceClient } from './grpc/testing/XdsUpdateHealthService';
+import type { LoadBalancerStatsServiceClient as _grpc_testing_LoadBalancerStatsServiceClient, LoadBalancerStatsServiceDefinition as _grpc_testing_LoadBalancerStatsServiceDefinition } from './grpc/testing/LoadBalancerStatsService';
+import type { ReconnectServiceClient as _grpc_testing_ReconnectServiceClient, ReconnectServiceDefinition as _grpc_testing_ReconnectServiceDefinition } from './grpc/testing/ReconnectService';
+import type { TestServiceClient as _grpc_testing_TestServiceClient, TestServiceDefinition as _grpc_testing_TestServiceDefinition } from './grpc/testing/TestService';
+import type { UnimplementedServiceClient as _grpc_testing_UnimplementedServiceClient, UnimplementedServiceDefinition as _grpc_testing_UnimplementedServiceDefinition } from './grpc/testing/UnimplementedService';
+import type { XdsUpdateClientConfigureServiceClient as _grpc_testing_XdsUpdateClientConfigureServiceClient, XdsUpdateClientConfigureServiceDefinition as _grpc_testing_XdsUpdateClientConfigureServiceDefinition } from './grpc/testing/XdsUpdateClientConfigureService';
+import type { XdsUpdateHealthServiceClient as _grpc_testing_XdsUpdateHealthServiceClient, XdsUpdateHealthServiceDefinition as _grpc_testing_XdsUpdateHealthServiceDefinition } from './grpc/testing/XdsUpdateHealthService';
 
 type SubtypeConstructor<Constructor extends new (...args: any) => any, Subtype> = {
   new(...args: ConstructorParameters<Constructor>): Subtype;
@@ -28,7 +28,7 @@ export interface ProtoGrpcType {
       /**
        * A service used to obtain stats for verifying LB behavior.
        */
-      LoadBalancerStatsService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_LoadBalancerStatsServiceClient> & { service: ServiceDefinition }
+      LoadBalancerStatsService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_LoadBalancerStatsServiceClient> & { service: _grpc_testing_LoadBalancerStatsServiceDefinition }
       Payload: MessageTypeDefinition
       PayloadType: EnumTypeDefinition
       ReconnectInfo: MessageTypeDefinition
@@ -36,7 +36,7 @@ export interface ProtoGrpcType {
       /**
        * A service used to control reconnect server.
        */
-      ReconnectService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_ReconnectServiceClient> & { service: ServiceDefinition }
+      ReconnectService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_ReconnectServiceClient> & { service: _grpc_testing_ReconnectServiceDefinition }
       ResponseParameters: MessageTypeDefinition
       SimpleRequest: MessageTypeDefinition
       SimpleResponse: MessageTypeDefinition
@@ -48,20 +48,20 @@ export interface ProtoGrpcType {
        * A simple service to test the various types of RPCs and experiment with
        * performance with various types of payload.
        */
-      TestService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_TestServiceClient> & { service: ServiceDefinition }
+      TestService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_TestServiceClient> & { service: _grpc_testing_TestServiceDefinition }
       /**
        * A simple service NOT implemented at servers so clients can test for
        * that case.
        */
-      UnimplementedService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_UnimplementedServiceClient> & { service: ServiceDefinition }
+      UnimplementedService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_UnimplementedServiceClient> & { service: _grpc_testing_UnimplementedServiceDefinition }
       /**
        * A service to dynamically update the configuration of an xDS test client.
        */
-      XdsUpdateClientConfigureService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_XdsUpdateClientConfigureServiceClient> & { service: ServiceDefinition }
+      XdsUpdateClientConfigureService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_XdsUpdateClientConfigureServiceClient> & { service: _grpc_testing_XdsUpdateClientConfigureServiceDefinition }
       /**
        * A service to remotely control health status of an xDS test server.
        */
-      XdsUpdateHealthService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_XdsUpdateHealthServiceClient> & { service: ServiceDefinition }
+      XdsUpdateHealthService: SubtypeConstructor<typeof grpc.Client, _grpc_testing_XdsUpdateHealthServiceClient> & { service: _grpc_testing_XdsUpdateHealthServiceDefinition }
     }
   }
 }
diff --git a/packages/grpc-js-xds/interop/xds-interop-client.ts b/packages/grpc-js-xds/interop/xds-interop-client.ts
index 1fdaa3a69..a245ad09f 100644
--- a/packages/grpc-js-xds/interop/xds-interop-client.ts
+++ b/packages/grpc-js-xds/interop/xds-interop-client.ts
@@ -398,7 +398,7 @@ function makeSingleRequest(client: TestServiceClient, type: CallType, failOnFail
   const startTime = process.hrtime.bigint();
   const deadline = new Date();
   deadline.setSeconds(deadline.getSeconds() + currentConfig.timeoutSec);
-  const callback = (error: grpc.ServiceError | undefined, value: Empty__Output | undefined) => {
+  const callback = (error: grpc.ServiceError | null, value: Empty__Output | undefined) => {
     const statusCode = error?.code ?? grpc.status.OK;
     const duration = process.hrtime.bigint() - startTime;
     const durationSeconds = Number(duration / TIMESTAMP_ONE_SECOND) | 0;
diff --git a/packages/grpc-js-xds/package.json b/packages/grpc-js-xds/package.json
index 1286a16a8..9e7d2f18a 100644
--- a/packages/grpc-js-xds/package.json
+++ b/packages/grpc-js-xds/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@grpc/grpc-js-xds",
-  "version": "1.10.0",
+  "version": "1.10.1",
   "description": "Plugin for @grpc/grpc-js. Adds the xds:// URL scheme and associated features.",
   "main": "build/src/index.js",
   "scripts": {
@@ -12,7 +12,7 @@
     "prepare": "npm run generate-types && npm run compile",
     "pretest": "npm run compile",
     "posttest": "npm run check",
-    "generate-types": "proto-loader-gen-types --keepCase --longs String --enums String --defaults --oneofs --includeComments --includeDirs deps/envoy-api/ deps/xds/ deps/googleapis/ deps/protoc-gen-validate/ -O src/generated/ --grpcLib @grpc/grpc-js envoy/service/discovery/v3/ads.proto envoy/service/load_stats/v3/lrs.proto envoy/config/listener/v3/listener.proto envoy/config/route/v3/route.proto envoy/config/cluster/v3/cluster.proto envoy/config/endpoint/v3/endpoint.proto envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto udpa/type/v1/typed_struct.proto xds/type/v3/typed_struct.proto envoy/extensions/filters/http/fault/v3/fault.proto envoy/service/status/v3/csds.proto envoy/extensions/load_balancing_policies/wrr_locality/v3/wrr_locality.proto envoy/extensions/load_balancing_policies/ring_hash/v3/ring_hash.proto envoy/extensions/load_balancing_policies/pick_first/v3/pick_first.proto",
+    "generate-types": "proto-loader-gen-types --keepCase --longs String --enums String --defaults --oneofs --includeComments --includeDirs deps/envoy-api/ deps/xds/ deps/googleapis/ deps/protoc-gen-validate/ -O src/generated/ --grpcLib @grpc/grpc-js envoy/service/discovery/v3/ads.proto envoy/service/load_stats/v3/lrs.proto envoy/config/listener/v3/listener.proto envoy/config/route/v3/route.proto envoy/config/cluster/v3/cluster.proto envoy/config/endpoint/v3/endpoint.proto envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto udpa/type/v1/typed_struct.proto xds/type/v3/typed_struct.proto envoy/extensions/filters/http/fault/v3/fault.proto envoy/service/status/v3/csds.proto envoy/extensions/load_balancing_policies/wrr_locality/v3/wrr_locality.proto envoy/extensions/load_balancing_policies/ring_hash/v3/ring_hash.proto envoy/extensions/load_balancing_policies/pick_first/v3/pick_first.proto envoy/extensions/clusters/aggregate/v3/cluster.proto",
     "generate-interop-types": "proto-loader-gen-types --keep-case --longs String --enums String --defaults --oneofs --json --includeComments --includeDirs proto/ -O interop/generated --grpcLib @grpc/grpc-js grpc/testing/test.proto",
     "generate-test-types": "proto-loader-gen-types --keep-case --longs String --enums String --defaults --oneofs --json --includeComments --includeDirs proto/ -O test/generated --grpcLib @grpc/grpc-js grpc/testing/echo.proto"
   },
@@ -43,7 +43,7 @@
     "yargs": "^15.4.1"
   },
   "dependencies": {
-    "@grpc/proto-loader": "^0.6.0",
+    "@grpc/proto-loader": "^0.7.13",
     "google-auth-library": "^7.0.2",
     "re2-wasm": "^1.0.1",
     "vscode-uri": "^3.0.7",
diff --git a/packages/grpc-js-xds/src/generated/cluster.ts b/packages/grpc-js-xds/src/generated/cluster.ts
index 1aa37589b..6e8c5f985 100644
--- a/packages/grpc-js-xds/src/generated/cluster.ts
+++ b/packages/grpc-js-xds/src/generated/cluster.ts
@@ -101,6 +101,15 @@ export interface ProtoGrpcType {
         }
       }
     }
+    extensions: {
+      clusters: {
+        aggregate: {
+          v3: {
+            ClusterConfig: MessageTypeDefinition
+          }
+        }
+      }
+    }
     type: {
       matcher: {
         v3: {
diff --git a/packages/grpc-js-xds/src/generated/envoy/admin/v3/BootstrapConfigDump.ts b/packages/grpc-js-xds/src/generated/envoy/admin/v3/BootstrapConfigDump.ts
deleted file mode 100644
index d47f00ef3..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/admin/v3/BootstrapConfigDump.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-// Original file: deps/envoy-api/envoy/admin/v3/config_dump.proto
-
-import type { Bootstrap as _envoy_config_bootstrap_v3_Bootstrap, Bootstrap__Output as _envoy_config_bootstrap_v3_Bootstrap__Output } from '../../../envoy/config/bootstrap/v3/Bootstrap';
-import type { Timestamp as _google_protobuf_Timestamp, Timestamp__Output as _google_protobuf_Timestamp__Output } from '../../../google/protobuf/Timestamp';
-
-/**
- * This message describes the bootstrap configuration that Envoy was started with. This includes
- * any CLI overrides that were merged. Bootstrap configuration information can be used to recreate
- * the static portions of an Envoy configuration by reusing the output as the bootstrap
- * configuration for another Envoy.
- */
-export interface BootstrapConfigDump {
-  'bootstrap'?: (_envoy_config_bootstrap_v3_Bootstrap | null);
-  /**
-   * The timestamp when the BootstrapConfig was last updated.
-   */
-  'last_updated'?: (_google_protobuf_Timestamp | null);
-}
-
-/**
- * This message describes the bootstrap configuration that Envoy was started with. This includes
- * any CLI overrides that were merged. Bootstrap configuration information can be used to recreate
- * the static portions of an Envoy configuration by reusing the output as the bootstrap
- * configuration for another Envoy.
- */
-export interface BootstrapConfigDump__Output {
-  'bootstrap': (_envoy_config_bootstrap_v3_Bootstrap__Output | null);
-  /**
-   * The timestamp when the BootstrapConfig was last updated.
-   */
-  'last_updated': (_google_protobuf_Timestamp__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/admin/v3/ClientResourceStatus.ts b/packages/grpc-js-xds/src/generated/envoy/admin/v3/ClientResourceStatus.ts
index 8488bbdd7..b7a78a338 100644
--- a/packages/grpc-js-xds/src/generated/envoy/admin/v3/ClientResourceStatus.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/admin/v3/ClientResourceStatus.ts
@@ -4,17 +4,17 @@
  * Resource status from the view of a xDS client, which tells the synchronization
  * status between the xDS client and the xDS server.
  */
-export enum ClientResourceStatus {
+export const ClientResourceStatus = {
   /**
    * Resource status is not available/unknown.
    */
-  UNKNOWN = 0,
+  UNKNOWN: 'UNKNOWN',
   /**
    * Client requested this resource but hasn't received any update from management
    * server. The client will not fail requests, but will queue them until update
    * arrives or the client times out waiting for the resource.
    */
-  REQUESTED = 1,
+  REQUESTED: 'REQUESTED',
   /**
    * This resource has been requested by the client but has either not been
    * delivered by the server or was previously delivered by the server and then
@@ -22,13 +22,56 @@ export enum ClientResourceStatus {
    * information, please refer to the :ref:`"Knowing When a Requested Resource
    * Does Not Exist" <xds_protocol_resource_not_existed>` section.
    */
-  DOES_NOT_EXIST = 2,
+  DOES_NOT_EXIST: 'DOES_NOT_EXIST',
   /**
    * Client received this resource and replied with ACK.
    */
-  ACKED = 3,
+  ACKED: 'ACKED',
   /**
    * Client received this resource and replied with NACK.
    */
-  NACKED = 4,
-}
+  NACKED: 'NACKED',
+} as const;
+
+/**
+ * Resource status from the view of a xDS client, which tells the synchronization
+ * status between the xDS client and the xDS server.
+ */
+export type ClientResourceStatus =
+  /**
+   * Resource status is not available/unknown.
+   */
+  | 'UNKNOWN'
+  | 0
+  /**
+   * Client requested this resource but hasn't received any update from management
+   * server. The client will not fail requests, but will queue them until update
+   * arrives or the client times out waiting for the resource.
+   */
+  | 'REQUESTED'
+  | 1
+  /**
+   * This resource has been requested by the client but has either not been
+   * delivered by the server or was previously delivered by the server and then
+   * subsequently removed from resources provided by the server. For more
+   * information, please refer to the :ref:`"Knowing When a Requested Resource
+   * Does Not Exist" <xds_protocol_resource_not_existed>` section.
+   */
+  | 'DOES_NOT_EXIST'
+  | 2
+  /**
+   * Client received this resource and replied with ACK.
+   */
+  | 'ACKED'
+  | 3
+  /**
+   * Client received this resource and replied with NACK.
+   */
+  | 'NACKED'
+  | 4
+
+/**
+ * Resource status from the view of a xDS client, which tells the synchronization
+ * status between the xDS client and the xDS server.
+ */
+export type ClientResourceStatus__Output = typeof ClientResourceStatus[keyof typeof ClientResourceStatus]
diff --git a/packages/grpc-js-xds/src/generated/envoy/admin/v3/ClustersConfigDump.ts b/packages/grpc-js-xds/src/generated/envoy/admin/v3/ClustersConfigDump.ts
index aabcd212a..2c3b4f8a5 100644
--- a/packages/grpc-js-xds/src/generated/envoy/admin/v3/ClustersConfigDump.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/admin/v3/ClustersConfigDump.ts
@@ -3,7 +3,7 @@
 import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../google/protobuf/Any';
 import type { Timestamp as _google_protobuf_Timestamp, Timestamp__Output as _google_protobuf_Timestamp__Output } from '../../../google/protobuf/Timestamp';
 import type { UpdateFailureState as _envoy_admin_v3_UpdateFailureState, UpdateFailureState__Output as _envoy_admin_v3_UpdateFailureState__Output } from '../../../envoy/admin/v3/UpdateFailureState';
-import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus } from '../../../envoy/admin/v3/ClientResourceStatus';
+import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus, ClientResourceStatus__Output as _envoy_admin_v3_ClientResourceStatus__Output } from '../../../envoy/admin/v3/ClientResourceStatus';
 
 /**
  * Describes a dynamically loaded cluster via the CDS API.
@@ -37,7 +37,7 @@ export interface _envoy_admin_v3_ClustersConfigDump_DynamicCluster {
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status'?: (_envoy_admin_v3_ClientResourceStatus | keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status'?: (_envoy_admin_v3_ClientResourceStatus);
 }
 
 /**
@@ -72,7 +72,7 @@ export interface _envoy_admin_v3_ClustersConfigDump_DynamicCluster__Output {
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status': (keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status': (_envoy_admin_v3_ClientResourceStatus__Output);
 }
 
 /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/admin/v3/ConfigDump.ts b/packages/grpc-js-xds/src/generated/envoy/admin/v3/ConfigDump.ts
deleted file mode 100644
index 8a0ab65c2..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/admin/v3/ConfigDump.ts
+++ /dev/null
@@ -1,65 +0,0 @@
-// Original file: deps/envoy-api/envoy/admin/v3/config_dump.proto
-
-import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../google/protobuf/Any';
-
-/**
- * The :ref:`/config_dump <operations_admin_interface_config_dump>` admin endpoint uses this wrapper
- * message to maintain and serve arbitrary configuration information from any component in Envoy.
- */
-export interface ConfigDump {
-  /**
-   * This list is serialized and dumped in its entirety at the
-   * :ref:`/config_dump <operations_admin_interface_config_dump>` endpoint.
-   * 
-   * The following configurations are currently supported and will be dumped in the order given
-   * below:
-   * 
-   * * *bootstrap*: :ref:`BootstrapConfigDump <envoy_v3_api_msg_admin.v3.BootstrapConfigDump>`
-   * * *clusters*: :ref:`ClustersConfigDump <envoy_v3_api_msg_admin.v3.ClustersConfigDump>`
-   * * *endpoints*:  :ref:`EndpointsConfigDump <envoy_v3_api_msg_admin.v3.EndpointsConfigDump>`
-   * * *listeners*: :ref:`ListenersConfigDump <envoy_v3_api_msg_admin.v3.ListenersConfigDump>`
-   * * *scoped_routes*: :ref:`ScopedRoutesConfigDump <envoy_v3_api_msg_admin.v3.ScopedRoutesConfigDump>`
-   * * *routes*:  :ref:`RoutesConfigDump <envoy_v3_api_msg_admin.v3.RoutesConfigDump>`
-   * * *secrets*:  :ref:`SecretsConfigDump <envoy_v3_api_msg_admin.v3.SecretsConfigDump>`
-   * 
-   * EDS Configuration will only be dumped by using parameter `?include_eds`
-   * 
-   * You can filter output with the resource and mask query parameters.
-   * See :ref:`/config_dump?resource={} <operations_admin_interface_config_dump_by_resource>`,
-   * :ref:`/config_dump?mask={} <operations_admin_interface_config_dump_by_mask>`,
-   * or :ref:`/config_dump?resource={},mask={}
-   * <operations_admin_interface_config_dump_by_resource_and_mask>` for more information.
-   */
-  'configs'?: (_google_protobuf_Any)[];
-}
-
-/**
- * The :ref:`/config_dump <operations_admin_interface_config_dump>` admin endpoint uses this wrapper
- * message to maintain and serve arbitrary configuration information from any component in Envoy.
- */
-export interface ConfigDump__Output {
-  /**
-   * This list is serialized and dumped in its entirety at the
-   * :ref:`/config_dump <operations_admin_interface_config_dump>` endpoint.
-   * 
-   * The following configurations are currently supported and will be dumped in the order given
-   * below:
-   * 
-   * * *bootstrap*: :ref:`BootstrapConfigDump <envoy_v3_api_msg_admin.v3.BootstrapConfigDump>`
-   * * *clusters*: :ref:`ClustersConfigDump <envoy_v3_api_msg_admin.v3.ClustersConfigDump>`
-   * * *endpoints*:  :ref:`EndpointsConfigDump <envoy_v3_api_msg_admin.v3.EndpointsConfigDump>`
-   * * *listeners*: :ref:`ListenersConfigDump <envoy_v3_api_msg_admin.v3.ListenersConfigDump>`
-   * * *scoped_routes*: :ref:`ScopedRoutesConfigDump <envoy_v3_api_msg_admin.v3.ScopedRoutesConfigDump>`
-   * * *routes*:  :ref:`RoutesConfigDump <envoy_v3_api_msg_admin.v3.RoutesConfigDump>`
-   * * *secrets*:  :ref:`SecretsConfigDump <envoy_v3_api_msg_admin.v3.SecretsConfigDump>`
-   * 
-   * EDS Configuration will only be dumped by using parameter `?include_eds`
-   * 
-   * You can filter output with the resource and mask query parameters.
-   * See :ref:`/config_dump?resource={} <operations_admin_interface_config_dump_by_resource>`,
-   * :ref:`/config_dump?mask={} <operations_admin_interface_config_dump_by_mask>`,
-   * or :ref:`/config_dump?resource={},mask={}
-   * <operations_admin_interface_config_dump_by_resource_and_mask>` for more information.
-   */
-  'configs': (_google_protobuf_Any__Output)[];
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/admin/v3/EcdsConfigDump.ts b/packages/grpc-js-xds/src/generated/envoy/admin/v3/EcdsConfigDump.ts
index e63307cb5..70562962b 100644
--- a/packages/grpc-js-xds/src/generated/envoy/admin/v3/EcdsConfigDump.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/admin/v3/EcdsConfigDump.ts
@@ -3,7 +3,7 @@
 import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../google/protobuf/Any';
 import type { Timestamp as _google_protobuf_Timestamp, Timestamp__Output as _google_protobuf_Timestamp__Output } from '../../../google/protobuf/Timestamp';
 import type { UpdateFailureState as _envoy_admin_v3_UpdateFailureState, UpdateFailureState__Output as _envoy_admin_v3_UpdateFailureState__Output } from '../../../envoy/admin/v3/UpdateFailureState';
-import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus } from '../../../envoy/admin/v3/ClientResourceStatus';
+import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus, ClientResourceStatus__Output as _envoy_admin_v3_ClientResourceStatus__Output } from '../../../envoy/admin/v3/ClientResourceStatus';
 
 /**
  * [#next-free-field: 6]
@@ -36,7 +36,7 @@ export interface _envoy_admin_v3_EcdsConfigDump_EcdsFilterConfig {
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status'?: (_envoy_admin_v3_ClientResourceStatus | keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status'?: (_envoy_admin_v3_ClientResourceStatus);
 }
 
 /**
@@ -70,7 +70,7 @@ export interface _envoy_admin_v3_EcdsConfigDump_EcdsFilterConfig__Output {
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status': (keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status': (_envoy_admin_v3_ClientResourceStatus__Output);
 }
 
 /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/admin/v3/EndpointsConfigDump.ts b/packages/grpc-js-xds/src/generated/envoy/admin/v3/EndpointsConfigDump.ts
index ab5485dbe..3f362c5c3 100644
--- a/packages/grpc-js-xds/src/generated/envoy/admin/v3/EndpointsConfigDump.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/admin/v3/EndpointsConfigDump.ts
@@ -3,7 +3,7 @@
 import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../google/protobuf/Any';
 import type { Timestamp as _google_protobuf_Timestamp, Timestamp__Output as _google_protobuf_Timestamp__Output } from '../../../google/protobuf/Timestamp';
 import type { UpdateFailureState as _envoy_admin_v3_UpdateFailureState, UpdateFailureState__Output as _envoy_admin_v3_UpdateFailureState__Output } from '../../../envoy/admin/v3/UpdateFailureState';
-import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus } from '../../../envoy/admin/v3/ClientResourceStatus';
+import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus, ClientResourceStatus__Output as _envoy_admin_v3_ClientResourceStatus__Output } from '../../../envoy/admin/v3/ClientResourceStatus';
 
 /**
  * [#next-free-field: 6]
@@ -35,7 +35,7 @@ export interface _envoy_admin_v3_EndpointsConfigDump_DynamicEndpointConfig {
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status'?: (_envoy_admin_v3_ClientResourceStatus | keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status'?: (_envoy_admin_v3_ClientResourceStatus);
 }
 
 /**
@@ -68,7 +68,7 @@ export interface _envoy_admin_v3_EndpointsConfigDump_DynamicEndpointConfig__Outp
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status': (keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status': (_envoy_admin_v3_ClientResourceStatus__Output);
 }
 
 export interface _envoy_admin_v3_EndpointsConfigDump_StaticEndpointConfig {
diff --git a/packages/grpc-js-xds/src/generated/envoy/admin/v3/ListenersConfigDump.ts b/packages/grpc-js-xds/src/generated/envoy/admin/v3/ListenersConfigDump.ts
index 946e37953..a90338fdf 100644
--- a/packages/grpc-js-xds/src/generated/envoy/admin/v3/ListenersConfigDump.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/admin/v3/ListenersConfigDump.ts
@@ -3,7 +3,7 @@
 import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../google/protobuf/Any';
 import type { Timestamp as _google_protobuf_Timestamp, Timestamp__Output as _google_protobuf_Timestamp__Output } from '../../../google/protobuf/Timestamp';
 import type { UpdateFailureState as _envoy_admin_v3_UpdateFailureState, UpdateFailureState__Output as _envoy_admin_v3_UpdateFailureState__Output } from '../../../envoy/admin/v3/UpdateFailureState';
-import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus } from '../../../envoy/admin/v3/ClientResourceStatus';
+import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus, ClientResourceStatus__Output as _envoy_admin_v3_ClientResourceStatus__Output } from '../../../envoy/admin/v3/ClientResourceStatus';
 
 /**
  * Describes a dynamically loaded listener via the LDS API.
@@ -44,7 +44,7 @@ export interface _envoy_admin_v3_ListenersConfigDump_DynamicListener {
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status'?: (_envoy_admin_v3_ClientResourceStatus | keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status'?: (_envoy_admin_v3_ClientResourceStatus);
 }
 
 /**
@@ -86,7 +86,7 @@ export interface _envoy_admin_v3_ListenersConfigDump_DynamicListener__Output {
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status': (keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status': (_envoy_admin_v3_ClientResourceStatus__Output);
 }
 
 export interface _envoy_admin_v3_ListenersConfigDump_DynamicListenerState {
diff --git a/packages/grpc-js-xds/src/generated/envoy/admin/v3/RoutesConfigDump.ts b/packages/grpc-js-xds/src/generated/envoy/admin/v3/RoutesConfigDump.ts
index 7b9bb29d0..6de43f0eb 100644
--- a/packages/grpc-js-xds/src/generated/envoy/admin/v3/RoutesConfigDump.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/admin/v3/RoutesConfigDump.ts
@@ -3,7 +3,7 @@
 import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../google/protobuf/Any';
 import type { Timestamp as _google_protobuf_Timestamp, Timestamp__Output as _google_protobuf_Timestamp__Output } from '../../../google/protobuf/Timestamp';
 import type { UpdateFailureState as _envoy_admin_v3_UpdateFailureState, UpdateFailureState__Output as _envoy_admin_v3_UpdateFailureState__Output } from '../../../envoy/admin/v3/UpdateFailureState';
-import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus } from '../../../envoy/admin/v3/ClientResourceStatus';
+import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus, ClientResourceStatus__Output as _envoy_admin_v3_ClientResourceStatus__Output } from '../../../envoy/admin/v3/ClientResourceStatus';
 
 /**
  * [#next-free-field: 6]
@@ -35,7 +35,7 @@ export interface _envoy_admin_v3_RoutesConfigDump_DynamicRouteConfig {
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status'?: (_envoy_admin_v3_ClientResourceStatus | keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status'?: (_envoy_admin_v3_ClientResourceStatus);
 }
 
 /**
@@ -68,7 +68,7 @@ export interface _envoy_admin_v3_RoutesConfigDump_DynamicRouteConfig__Output {
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status': (keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status': (_envoy_admin_v3_ClientResourceStatus__Output);
 }
 
 export interface _envoy_admin_v3_RoutesConfigDump_StaticRouteConfig {
diff --git a/packages/grpc-js-xds/src/generated/envoy/admin/v3/ScopedRoutesConfigDump.ts b/packages/grpc-js-xds/src/generated/envoy/admin/v3/ScopedRoutesConfigDump.ts
index c0723ce69..1ce3934cc 100644
--- a/packages/grpc-js-xds/src/generated/envoy/admin/v3/ScopedRoutesConfigDump.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/admin/v3/ScopedRoutesConfigDump.ts
@@ -3,7 +3,7 @@
 import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../google/protobuf/Any';
 import type { Timestamp as _google_protobuf_Timestamp, Timestamp__Output as _google_protobuf_Timestamp__Output } from '../../../google/protobuf/Timestamp';
 import type { UpdateFailureState as _envoy_admin_v3_UpdateFailureState, UpdateFailureState__Output as _envoy_admin_v3_UpdateFailureState__Output } from '../../../envoy/admin/v3/UpdateFailureState';
-import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus } from '../../../envoy/admin/v3/ClientResourceStatus';
+import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus, ClientResourceStatus__Output as _envoy_admin_v3_ClientResourceStatus__Output } from '../../../envoy/admin/v3/ClientResourceStatus';
 
 /**
  * [#next-free-field: 7]
@@ -39,7 +39,7 @@ export interface _envoy_admin_v3_ScopedRoutesConfigDump_DynamicScopedRouteConfig
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status'?: (_envoy_admin_v3_ClientResourceStatus | keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status'?: (_envoy_admin_v3_ClientResourceStatus);
 }
 
 /**
@@ -76,7 +76,7 @@ export interface _envoy_admin_v3_ScopedRoutesConfigDump_DynamicScopedRouteConfig
    * The client status of this resource.
    * [#not-implemented-hide:]
    */
-  'client_status': (keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status': (_envoy_admin_v3_ClientResourceStatus__Output);
 }
 
 export interface _envoy_admin_v3_ScopedRoutesConfigDump_InlineScopedRouteConfigs {
diff --git a/packages/grpc-js-xds/src/generated/envoy/admin/v3/SecretsConfigDump.ts b/packages/grpc-js-xds/src/generated/envoy/admin/v3/SecretsConfigDump.ts
deleted file mode 100644
index 21921edec..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/admin/v3/SecretsConfigDump.ts
+++ /dev/null
@@ -1,162 +0,0 @@
-// Original file: deps/envoy-api/envoy/admin/v3/config_dump.proto
-
-import type { Timestamp as _google_protobuf_Timestamp, Timestamp__Output as _google_protobuf_Timestamp__Output } from '../../../google/protobuf/Timestamp';
-import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../google/protobuf/Any';
-import type { UpdateFailureState as _envoy_admin_v3_UpdateFailureState, UpdateFailureState__Output as _envoy_admin_v3_UpdateFailureState__Output } from '../../../envoy/admin/v3/UpdateFailureState';
-import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus } from '../../../envoy/admin/v3/ClientResourceStatus';
-
-/**
- * DynamicSecret contains secret information fetched via SDS.
- * [#next-free-field: 7]
- */
-export interface _envoy_admin_v3_SecretsConfigDump_DynamicSecret {
-  /**
-   * The name assigned to the secret.
-   */
-  'name'?: (string);
-  /**
-   * This is the per-resource version information.
-   */
-  'version_info'?: (string);
-  /**
-   * The timestamp when the secret was last updated.
-   */
-  'last_updated'?: (_google_protobuf_Timestamp | null);
-  /**
-   * The actual secret information.
-   * Security sensitive information is redacted (replaced with "[redacted]") for
-   * private keys and passwords in TLS certificates.
-   */
-  'secret'?: (_google_protobuf_Any | null);
-  /**
-   * Set if the last update failed, cleared after the next successful update.
-   * The *error_state* field contains the rejected version of this particular
-   * resource along with the reason and timestamp. For successfully updated or
-   * acknowledged resource, this field should be empty.
-   * [#not-implemented-hide:]
-   */
-  'error_state'?: (_envoy_admin_v3_UpdateFailureState | null);
-  /**
-   * The client status of this resource.
-   * [#not-implemented-hide:]
-   */
-  'client_status'?: (_envoy_admin_v3_ClientResourceStatus | keyof typeof _envoy_admin_v3_ClientResourceStatus);
-}
-
-/**
- * DynamicSecret contains secret information fetched via SDS.
- * [#next-free-field: 7]
- */
-export interface _envoy_admin_v3_SecretsConfigDump_DynamicSecret__Output {
-  /**
-   * The name assigned to the secret.
-   */
-  'name': (string);
-  /**
-   * This is the per-resource version information.
-   */
-  'version_info': (string);
-  /**
-   * The timestamp when the secret was last updated.
-   */
-  'last_updated': (_google_protobuf_Timestamp__Output | null);
-  /**
-   * The actual secret information.
-   * Security sensitive information is redacted (replaced with "[redacted]") for
-   * private keys and passwords in TLS certificates.
-   */
-  'secret': (_google_protobuf_Any__Output | null);
-  /**
-   * Set if the last update failed, cleared after the next successful update.
-   * The *error_state* field contains the rejected version of this particular
-   * resource along with the reason and timestamp. For successfully updated or
-   * acknowledged resource, this field should be empty.
-   * [#not-implemented-hide:]
-   */
-  'error_state': (_envoy_admin_v3_UpdateFailureState__Output | null);
-  /**
-   * The client status of this resource.
-   * [#not-implemented-hide:]
-   */
-  'client_status': (keyof typeof _envoy_admin_v3_ClientResourceStatus);
-}
-
-/**
- * StaticSecret specifies statically loaded secret in bootstrap.
- */
-export interface _envoy_admin_v3_SecretsConfigDump_StaticSecret {
-  /**
-   * The name assigned to the secret.
-   */
-  'name'?: (string);
-  /**
-   * The timestamp when the secret was last updated.
-   */
-  'last_updated'?: (_google_protobuf_Timestamp | null);
-  /**
-   * The actual secret information.
-   * Security sensitive information is redacted (replaced with "[redacted]") for
-   * private keys and passwords in TLS certificates.
-   */
-  'secret'?: (_google_protobuf_Any | null);
-}
-
-/**
- * StaticSecret specifies statically loaded secret in bootstrap.
- */
-export interface _envoy_admin_v3_SecretsConfigDump_StaticSecret__Output {
-  /**
-   * The name assigned to the secret.
-   */
-  'name': (string);
-  /**
-   * The timestamp when the secret was last updated.
-   */
-  'last_updated': (_google_protobuf_Timestamp__Output | null);
-  /**
-   * The actual secret information.
-   * Security sensitive information is redacted (replaced with "[redacted]") for
-   * private keys and passwords in TLS certificates.
-   */
-  'secret': (_google_protobuf_Any__Output | null);
-}
-
-/**
- * Envoys SDS implementation fills this message with all secrets fetched dynamically via SDS.
- */
-export interface SecretsConfigDump {
-  /**
-   * The statically loaded secrets.
-   */
-  'static_secrets'?: (_envoy_admin_v3_SecretsConfigDump_StaticSecret)[];
-  /**
-   * The dynamically loaded active secrets. These are secrets that are available to service
-   * clusters or listeners.
-   */
-  'dynamic_active_secrets'?: (_envoy_admin_v3_SecretsConfigDump_DynamicSecret)[];
-  /**
-   * The dynamically loaded warming secrets. These are secrets that are currently undergoing
-   * warming in preparation to service clusters or listeners.
-   */
-  'dynamic_warming_secrets'?: (_envoy_admin_v3_SecretsConfigDump_DynamicSecret)[];
-}
-
-/**
- * Envoys SDS implementation fills this message with all secrets fetched dynamically via SDS.
- */
-export interface SecretsConfigDump__Output {
-  /**
-   * The statically loaded secrets.
-   */
-  'static_secrets': (_envoy_admin_v3_SecretsConfigDump_StaticSecret__Output)[];
-  /**
-   * The dynamically loaded active secrets. These are secrets that are available to service
-   * clusters or listeners.
-   */
-  'dynamic_active_secrets': (_envoy_admin_v3_SecretsConfigDump_DynamicSecret__Output)[];
-  /**
-   * The dynamically loaded warming secrets. These are secrets that are currently undergoing
-   * warming in preparation to service clusters or listeners.
-   */
-  'dynamic_warming_secrets': (_envoy_admin_v3_SecretsConfigDump_DynamicSecret__Output)[];
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/ComparisonFilter.ts b/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/ComparisonFilter.ts
index 07893f2dd..68c8f1b65 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/ComparisonFilter.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/ComparisonFilter.ts
@@ -4,20 +4,39 @@ import type { RuntimeUInt32 as _envoy_config_core_v3_RuntimeUInt32, RuntimeUInt3
 
 // Original file: deps/envoy-api/envoy/config/accesslog/v3/accesslog.proto
 
-export enum _envoy_config_accesslog_v3_ComparisonFilter_Op {
+export const _envoy_config_accesslog_v3_ComparisonFilter_Op = {
   /**
    * =
    */
-  EQ = 0,
+  EQ: 'EQ',
   /**
    * >=
    */
-  GE = 1,
+  GE: 'GE',
   /**
    * <=
    */
-  LE = 2,
-}
+  LE: 'LE',
+} as const;
+
+export type _envoy_config_accesslog_v3_ComparisonFilter_Op =
+  /**
+   * =
+   */
+  | 'EQ'
+  | 0
+  /**
+   * >=
+   */
+  | 'GE'
+  | 1
+  /**
+   * <=
+   */
+  | 'LE'
+  | 2
+
+export type _envoy_config_accesslog_v3_ComparisonFilter_Op__Output = typeof _envoy_config_accesslog_v3_ComparisonFilter_Op[keyof typeof _envoy_config_accesslog_v3_ComparisonFilter_Op]
 
 /**
  * Filter on an integer comparison.
@@ -26,7 +45,7 @@ export interface ComparisonFilter {
   /**
    * Comparison operator.
    */
-  'op'?: (_envoy_config_accesslog_v3_ComparisonFilter_Op | keyof typeof _envoy_config_accesslog_v3_ComparisonFilter_Op);
+  'op'?: (_envoy_config_accesslog_v3_ComparisonFilter_Op);
   /**
    * Value to compare against.
    */
@@ -40,7 +59,7 @@ export interface ComparisonFilter__Output {
   /**
    * Comparison operator.
    */
-  'op': (keyof typeof _envoy_config_accesslog_v3_ComparisonFilter_Op);
+  'op': (_envoy_config_accesslog_v3_ComparisonFilter_Op__Output);
   /**
    * Value to compare against.
    */
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/GrpcStatusFilter.ts b/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/GrpcStatusFilter.ts
index f7ccc8052..ec18bde8a 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/GrpcStatusFilter.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/GrpcStatusFilter.ts
@@ -3,25 +3,63 @@
 
 // Original file: deps/envoy-api/envoy/config/accesslog/v3/accesslog.proto
 
-export enum _envoy_config_accesslog_v3_GrpcStatusFilter_Status {
-  OK = 0,
-  CANCELED = 1,
-  UNKNOWN = 2,
-  INVALID_ARGUMENT = 3,
-  DEADLINE_EXCEEDED = 4,
-  NOT_FOUND = 5,
-  ALREADY_EXISTS = 6,
-  PERMISSION_DENIED = 7,
-  RESOURCE_EXHAUSTED = 8,
-  FAILED_PRECONDITION = 9,
-  ABORTED = 10,
-  OUT_OF_RANGE = 11,
-  UNIMPLEMENTED = 12,
-  INTERNAL = 13,
-  UNAVAILABLE = 14,
-  DATA_LOSS = 15,
-  UNAUTHENTICATED = 16,
-}
+export const _envoy_config_accesslog_v3_GrpcStatusFilter_Status = {
+  OK: 'OK',
+  CANCELED: 'CANCELED',
+  UNKNOWN: 'UNKNOWN',
+  INVALID_ARGUMENT: 'INVALID_ARGUMENT',
+  DEADLINE_EXCEEDED: 'DEADLINE_EXCEEDED',
+  NOT_FOUND: 'NOT_FOUND',
+  ALREADY_EXISTS: 'ALREADY_EXISTS',
+  PERMISSION_DENIED: 'PERMISSION_DENIED',
+  RESOURCE_EXHAUSTED: 'RESOURCE_EXHAUSTED',
+  FAILED_PRECONDITION: 'FAILED_PRECONDITION',
+  ABORTED: 'ABORTED',
+  OUT_OF_RANGE: 'OUT_OF_RANGE',
+  UNIMPLEMENTED: 'UNIMPLEMENTED',
+  INTERNAL: 'INTERNAL',
+  UNAVAILABLE: 'UNAVAILABLE',
+  DATA_LOSS: 'DATA_LOSS',
+  UNAUTHENTICATED: 'UNAUTHENTICATED',
+} as const;
+
+export type _envoy_config_accesslog_v3_GrpcStatusFilter_Status =
+  | 'OK'
+  | 0
+  | 'CANCELED'
+  | 1
+  | 'UNKNOWN'
+  | 2
+  | 'INVALID_ARGUMENT'
+  | 3
+  | 'DEADLINE_EXCEEDED'
+  | 4
+  | 'NOT_FOUND'
+  | 5
+  | 'ALREADY_EXISTS'
+  | 6
+  | 'PERMISSION_DENIED'
+  | 7
+  | 'RESOURCE_EXHAUSTED'
+  | 8
+  | 'FAILED_PRECONDITION'
+  | 9
+  | 'ABORTED'
+  | 10
+  | 'OUT_OF_RANGE'
+  | 11
+  | 'UNIMPLEMENTED'
+  | 12
+  | 'INTERNAL'
+  | 13
+  | 'UNAVAILABLE'
+  | 14
+  | 'DATA_LOSS'
+  | 15
+  | 'UNAUTHENTICATED'
+  | 16
+
+export type _envoy_config_accesslog_v3_GrpcStatusFilter_Status__Output = typeof _envoy_config_accesslog_v3_GrpcStatusFilter_Status[keyof typeof _envoy_config_accesslog_v3_GrpcStatusFilter_Status]
 
 /**
  * Filters gRPC requests based on their response status. If a gRPC status is not
@@ -31,7 +69,7 @@ export interface GrpcStatusFilter {
   /**
    * Logs only responses that have any one of the gRPC statuses in this field.
    */
-  'statuses'?: (_envoy_config_accesslog_v3_GrpcStatusFilter_Status | keyof typeof _envoy_config_accesslog_v3_GrpcStatusFilter_Status)[];
+  'statuses'?: (_envoy_config_accesslog_v3_GrpcStatusFilter_Status)[];
   /**
    * If included and set to true, the filter will instead block all responses
    * with a gRPC status or inferred gRPC status enumerated in statuses, and
@@ -48,7 +86,7 @@ export interface GrpcStatusFilter__Output {
   /**
    * Logs only responses that have any one of the gRPC statuses in this field.
    */
-  'statuses': (keyof typeof _envoy_config_accesslog_v3_GrpcStatusFilter_Status)[];
+  'statuses': (_envoy_config_accesslog_v3_GrpcStatusFilter_Status__Output)[];
   /**
    * If included and set to true, the filter will instead block all responses
    * with a gRPC status or inferred gRPC status enumerated in statuses, and
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/LogTypeFilter.ts b/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/LogTypeFilter.ts
index 8d51cd33f..59ad8e308 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/LogTypeFilter.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/accesslog/v3/LogTypeFilter.ts
@@ -1,6 +1,6 @@
 // Original file: deps/envoy-api/envoy/config/accesslog/v3/accesslog.proto
 
-import type { AccessLogType as _envoy_data_accesslog_v3_AccessLogType } from '../../../../envoy/data/accesslog/v3/AccessLogType';
+import type { AccessLogType as _envoy_data_accesslog_v3_AccessLogType, AccessLogType__Output as _envoy_data_accesslog_v3_AccessLogType__Output } from '../../../../envoy/data/accesslog/v3/AccessLogType';
 
 /**
  * Filters based on access log type.
@@ -9,7 +9,7 @@ export interface LogTypeFilter {
   /**
    * Logs only records which their type is one of the types defined in this field.
    */
-  'types'?: (_envoy_data_accesslog_v3_AccessLogType | keyof typeof _envoy_data_accesslog_v3_AccessLogType)[];
+  'types'?: (_envoy_data_accesslog_v3_AccessLogType)[];
   /**
    * If this field is set to true, the filter will instead block all records
    * with a access log type in types field, and allow all other records.
@@ -24,7 +24,7 @@ export interface LogTypeFilter__Output {
   /**
    * Logs only records which their type is one of the types defined in this field.
    */
-  'types': (keyof typeof _envoy_data_accesslog_v3_AccessLogType)[];
+  'types': (_envoy_data_accesslog_v3_AccessLogType__Output)[];
   /**
    * If this field is set to true, the filter will instead block all records
    * with a access log type in types field, and allow all other records.
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Admin.ts b/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Admin.ts
deleted file mode 100644
index a7f3826a1..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Admin.ts
+++ /dev/null
@@ -1,75 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-import type { Address as _envoy_config_core_v3_Address, Address__Output as _envoy_config_core_v3_Address__Output } from '../../../../envoy/config/core/v3/Address';
-import type { SocketOption as _envoy_config_core_v3_SocketOption, SocketOption__Output as _envoy_config_core_v3_SocketOption__Output } from '../../../../envoy/config/core/v3/SocketOption';
-import type { AccessLog as _envoy_config_accesslog_v3_AccessLog, AccessLog__Output as _envoy_config_accesslog_v3_AccessLog__Output } from '../../../../envoy/config/accesslog/v3/AccessLog';
-
-/**
- * Administration interface :ref:`operations documentation
- * <operations_admin_interface>`.
- * [#next-free-field: 6]
- */
-export interface Admin {
-  /**
-   * The path to write the access log for the administration server. If no
-   * access log is desired specify ‘/dev/null’. This is only required if
-   * :ref:`address <envoy_v3_api_field_config.bootstrap.v3.Admin.address>` is set.
-   * Deprecated in favor of *access_log* which offers more options.
-   */
-  'access_log_path'?: (string);
-  /**
-   * The cpu profiler output path for the administration server. If no profile
-   * path is specified, the default is ‘/var/log/envoy/envoy.prof’.
-   */
-  'profile_path'?: (string);
-  /**
-   * The TCP address that the administration server will listen on.
-   * If not specified, Envoy will not start an administration server.
-   */
-  'address'?: (_envoy_config_core_v3_Address | null);
-  /**
-   * Additional socket options that may not be present in Envoy source code or
-   * precompiled binaries.
-   */
-  'socket_options'?: (_envoy_config_core_v3_SocketOption)[];
-  /**
-   * Configuration for :ref:`access logs <arch_overview_access_logs>`
-   * emitted by the administration server.
-   */
-  'access_log'?: (_envoy_config_accesslog_v3_AccessLog)[];
-}
-
-/**
- * Administration interface :ref:`operations documentation
- * <operations_admin_interface>`.
- * [#next-free-field: 6]
- */
-export interface Admin__Output {
-  /**
-   * The path to write the access log for the administration server. If no
-   * access log is desired specify ‘/dev/null’. This is only required if
-   * :ref:`address <envoy_v3_api_field_config.bootstrap.v3.Admin.address>` is set.
-   * Deprecated in favor of *access_log* which offers more options.
-   */
-  'access_log_path': (string);
-  /**
-   * The cpu profiler output path for the administration server. If no profile
-   * path is specified, the default is ‘/var/log/envoy/envoy.prof’.
-   */
-  'profile_path': (string);
-  /**
-   * The TCP address that the administration server will listen on.
-   * If not specified, Envoy will not start an administration server.
-   */
-  'address': (_envoy_config_core_v3_Address__Output | null);
-  /**
-   * Additional socket options that may not be present in Envoy source code or
-   * precompiled binaries.
-   */
-  'socket_options': (_envoy_config_core_v3_SocketOption__Output)[];
-  /**
-   * Configuration for :ref:`access logs <arch_overview_access_logs>`
-   * emitted by the administration server.
-   */
-  'access_log': (_envoy_config_accesslog_v3_AccessLog__Output)[];
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Bootstrap.ts b/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Bootstrap.ts
deleted file mode 100644
index 797148675..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Bootstrap.ts
+++ /dev/null
@@ -1,642 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-import type { Node as _envoy_config_core_v3_Node, Node__Output as _envoy_config_core_v3_Node__Output } from '../../../../envoy/config/core/v3/Node';
-import type { ClusterManager as _envoy_config_bootstrap_v3_ClusterManager, ClusterManager__Output as _envoy_config_bootstrap_v3_ClusterManager__Output } from '../../../../envoy/config/bootstrap/v3/ClusterManager';
-import type { StatsSink as _envoy_config_metrics_v3_StatsSink, StatsSink__Output as _envoy_config_metrics_v3_StatsSink__Output } from '../../../../envoy/config/metrics/v3/StatsSink';
-import type { Duration as _google_protobuf_Duration, Duration__Output as _google_protobuf_Duration__Output } from '../../../../google/protobuf/Duration';
-import type { Watchdog as _envoy_config_bootstrap_v3_Watchdog, Watchdog__Output as _envoy_config_bootstrap_v3_Watchdog__Output } from '../../../../envoy/config/bootstrap/v3/Watchdog';
-import type { Tracing as _envoy_config_trace_v3_Tracing, Tracing__Output as _envoy_config_trace_v3_Tracing__Output } from '../../../../envoy/config/trace/v3/Tracing';
-import type { Admin as _envoy_config_bootstrap_v3_Admin, Admin__Output as _envoy_config_bootstrap_v3_Admin__Output } from '../../../../envoy/config/bootstrap/v3/Admin';
-import type { StatsConfig as _envoy_config_metrics_v3_StatsConfig, StatsConfig__Output as _envoy_config_metrics_v3_StatsConfig__Output } from '../../../../envoy/config/metrics/v3/StatsConfig';
-import type { ApiConfigSource as _envoy_config_core_v3_ApiConfigSource, ApiConfigSource__Output as _envoy_config_core_v3_ApiConfigSource__Output } from '../../../../envoy/config/core/v3/ApiConfigSource';
-import type { OverloadManager as _envoy_config_overload_v3_OverloadManager, OverloadManager__Output as _envoy_config_overload_v3_OverloadManager__Output } from '../../../../envoy/config/overload/v3/OverloadManager';
-import type { LayeredRuntime as _envoy_config_bootstrap_v3_LayeredRuntime, LayeredRuntime__Output as _envoy_config_bootstrap_v3_LayeredRuntime__Output } from '../../../../envoy/config/bootstrap/v3/LayeredRuntime';
-import type { UInt64Value as _google_protobuf_UInt64Value, UInt64Value__Output as _google_protobuf_UInt64Value__Output } from '../../../../google/protobuf/UInt64Value';
-import type { TypedExtensionConfig as _envoy_config_core_v3_TypedExtensionConfig, TypedExtensionConfig__Output as _envoy_config_core_v3_TypedExtensionConfig__Output } from '../../../../envoy/config/core/v3/TypedExtensionConfig';
-import type { ConfigSource as _envoy_config_core_v3_ConfigSource, ConfigSource__Output as _envoy_config_core_v3_ConfigSource__Output } from '../../../../envoy/config/core/v3/ConfigSource';
-import type { Watchdogs as _envoy_config_bootstrap_v3_Watchdogs, Watchdogs__Output as _envoy_config_bootstrap_v3_Watchdogs__Output } from '../../../../envoy/config/bootstrap/v3/Watchdogs';
-import type { FatalAction as _envoy_config_bootstrap_v3_FatalAction, FatalAction__Output as _envoy_config_bootstrap_v3_FatalAction__Output } from '../../../../envoy/config/bootstrap/v3/FatalAction';
-import type { DnsResolutionConfig as _envoy_config_core_v3_DnsResolutionConfig, DnsResolutionConfig__Output as _envoy_config_core_v3_DnsResolutionConfig__Output } from '../../../../envoy/config/core/v3/DnsResolutionConfig';
-import type { CustomInlineHeader as _envoy_config_bootstrap_v3_CustomInlineHeader, CustomInlineHeader__Output as _envoy_config_bootstrap_v3_CustomInlineHeader__Output } from '../../../../envoy/config/bootstrap/v3/CustomInlineHeader';
-import type { Listener as _envoy_config_listener_v3_Listener, Listener__Output as _envoy_config_listener_v3_Listener__Output } from '../../../../envoy/config/listener/v3/Listener';
-import type { Cluster as _envoy_config_cluster_v3_Cluster, Cluster__Output as _envoy_config_cluster_v3_Cluster__Output } from '../../../../envoy/config/cluster/v3/Cluster';
-import type { Secret as _envoy_extensions_transport_sockets_tls_v3_Secret, Secret__Output as _envoy_extensions_transport_sockets_tls_v3_Secret__Output } from '../../../../envoy/extensions/transport_sockets/tls/v3/Secret';
-import type { Long } from '@grpc/proto-loader';
-
-/**
- * [#next-free-field: 7]
- */
-export interface _envoy_config_bootstrap_v3_Bootstrap_DynamicResources {
-  /**
-   * All :ref:`Listeners <envoy_v3_api_msg_config.listener.v3.Listener>` are provided by a single
-   * :ref:`LDS <arch_overview_dynamic_config_lds>` configuration source.
-   */
-  'lds_config'?: (_envoy_config_core_v3_ConfigSource | null);
-  /**
-   * xdstp:// resource locator for listener collection.
-   * [#not-implemented-hide:]
-   */
-  'lds_resources_locator'?: (string);
-  /**
-   * All post-bootstrap :ref:`Cluster <envoy_v3_api_msg_config.cluster.v3.Cluster>` definitions are
-   * provided by a single :ref:`CDS <arch_overview_dynamic_config_cds>`
-   * configuration source.
-   */
-  'cds_config'?: (_envoy_config_core_v3_ConfigSource | null);
-  /**
-   * xdstp:// resource locator for cluster collection.
-   * [#not-implemented-hide:]
-   */
-  'cds_resources_locator'?: (string);
-  /**
-   * A single :ref:`ADS <config_overview_ads>` source may be optionally
-   * specified. This must have :ref:`api_type
-   * <envoy_v3_api_field_config.core.v3.ApiConfigSource.api_type>` :ref:`GRPC
-   * <envoy_v3_api_enum_value_config.core.v3.ApiConfigSource.ApiType.GRPC>`. Only
-   * :ref:`ConfigSources <envoy_v3_api_msg_config.core.v3.ConfigSource>` that have
-   * the :ref:`ads <envoy_v3_api_field_config.core.v3.ConfigSource.ads>` field set will be
-   * streamed on the ADS channel.
-   */
-  'ads_config'?: (_envoy_config_core_v3_ApiConfigSource | null);
-}
-
-/**
- * [#next-free-field: 7]
- */
-export interface _envoy_config_bootstrap_v3_Bootstrap_DynamicResources__Output {
-  /**
-   * All :ref:`Listeners <envoy_v3_api_msg_config.listener.v3.Listener>` are provided by a single
-   * :ref:`LDS <arch_overview_dynamic_config_lds>` configuration source.
-   */
-  'lds_config': (_envoy_config_core_v3_ConfigSource__Output | null);
-  /**
-   * xdstp:// resource locator for listener collection.
-   * [#not-implemented-hide:]
-   */
-  'lds_resources_locator': (string);
-  /**
-   * All post-bootstrap :ref:`Cluster <envoy_v3_api_msg_config.cluster.v3.Cluster>` definitions are
-   * provided by a single :ref:`CDS <arch_overview_dynamic_config_cds>`
-   * configuration source.
-   */
-  'cds_config': (_envoy_config_core_v3_ConfigSource__Output | null);
-  /**
-   * xdstp:// resource locator for cluster collection.
-   * [#not-implemented-hide:]
-   */
-  'cds_resources_locator': (string);
-  /**
-   * A single :ref:`ADS <config_overview_ads>` source may be optionally
-   * specified. This must have :ref:`api_type
-   * <envoy_v3_api_field_config.core.v3.ApiConfigSource.api_type>` :ref:`GRPC
-   * <envoy_v3_api_enum_value_config.core.v3.ApiConfigSource.ApiType.GRPC>`. Only
-   * :ref:`ConfigSources <envoy_v3_api_msg_config.core.v3.ConfigSource>` that have
-   * the :ref:`ads <envoy_v3_api_field_config.core.v3.ConfigSource.ads>` field set will be
-   * streamed on the ADS channel.
-   */
-  'ads_config': (_envoy_config_core_v3_ApiConfigSource__Output | null);
-}
-
-export interface _envoy_config_bootstrap_v3_Bootstrap_StaticResources {
-  /**
-   * Static :ref:`Listeners <envoy_v3_api_msg_config.listener.v3.Listener>`. These listeners are
-   * available regardless of LDS configuration.
-   */
-  'listeners'?: (_envoy_config_listener_v3_Listener)[];
-  /**
-   * If a network based configuration source is specified for :ref:`cds_config
-   * <envoy_v3_api_field_config.bootstrap.v3.Bootstrap.DynamicResources.cds_config>`, it's necessary
-   * to have some initial cluster definitions available to allow Envoy to know
-   * how to speak to the management server. These cluster definitions may not
-   * use :ref:`EDS <arch_overview_dynamic_config_eds>` (i.e. they should be static
-   * IP or DNS-based).
-   */
-  'clusters'?: (_envoy_config_cluster_v3_Cluster)[];
-  /**
-   * These static secrets can be used by :ref:`SdsSecretConfig
-   * <envoy_v3_api_msg_extensions.transport_sockets.tls.v3.SdsSecretConfig>`
-   */
-  'secrets'?: (_envoy_extensions_transport_sockets_tls_v3_Secret)[];
-}
-
-export interface _envoy_config_bootstrap_v3_Bootstrap_StaticResources__Output {
-  /**
-   * Static :ref:`Listeners <envoy_v3_api_msg_config.listener.v3.Listener>`. These listeners are
-   * available regardless of LDS configuration.
-   */
-  'listeners': (_envoy_config_listener_v3_Listener__Output)[];
-  /**
-   * If a network based configuration source is specified for :ref:`cds_config
-   * <envoy_v3_api_field_config.bootstrap.v3.Bootstrap.DynamicResources.cds_config>`, it's necessary
-   * to have some initial cluster definitions available to allow Envoy to know
-   * how to speak to the management server. These cluster definitions may not
-   * use :ref:`EDS <arch_overview_dynamic_config_eds>` (i.e. they should be static
-   * IP or DNS-based).
-   */
-  'clusters': (_envoy_config_cluster_v3_Cluster__Output)[];
-  /**
-   * These static secrets can be used by :ref:`SdsSecretConfig
-   * <envoy_v3_api_msg_extensions.transport_sockets.tls.v3.SdsSecretConfig>`
-   */
-  'secrets': (_envoy_extensions_transport_sockets_tls_v3_Secret__Output)[];
-}
-
-/**
- * Bootstrap :ref:`configuration overview <config_overview_bootstrap>`.
- * [#next-free-field: 33]
- */
-export interface Bootstrap {
-  /**
-   * Node identity to present to the management server and for instance
-   * identification purposes (e.g. in generated headers).
-   */
-  'node'?: (_envoy_config_core_v3_Node | null);
-  /**
-   * Statically specified resources.
-   */
-  'static_resources'?: (_envoy_config_bootstrap_v3_Bootstrap_StaticResources | null);
-  /**
-   * xDS configuration sources.
-   */
-  'dynamic_resources'?: (_envoy_config_bootstrap_v3_Bootstrap_DynamicResources | null);
-  /**
-   * Configuration for the cluster manager which owns all upstream clusters
-   * within the server.
-   */
-  'cluster_manager'?: (_envoy_config_bootstrap_v3_ClusterManager | null);
-  /**
-   * Optional file system path to search for startup flag files.
-   */
-  'flags_path'?: (string);
-  /**
-   * Optional set of stats sinks.
-   */
-  'stats_sinks'?: (_envoy_config_metrics_v3_StatsSink)[];
-  /**
-   * Optional duration between flushes to configured stats sinks. For
-   * performance reasons Envoy latches counters and only flushes counters and
-   * gauges at a periodic interval. If not specified the default is 5000ms (5
-   * seconds). Only one of `stats_flush_interval` or `stats_flush_on_admin`
-   * can be set.
-   * Duration must be at least 1ms and at most 5 min.
-   */
-  'stats_flush_interval'?: (_google_protobuf_Duration | null);
-  /**
-   * Optional watchdog configuration.
-   * This is for a single watchdog configuration for the entire system.
-   * Deprecated in favor of *watchdogs* which has finer granularity.
-   */
-  'watchdog'?: (_envoy_config_bootstrap_v3_Watchdog | null);
-  /**
-   * Configuration for an external tracing provider.
-   * 
-   * .. attention::
-   * This field has been deprecated in favor of :ref:`HttpConnectionManager.Tracing.provider
-   * <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.Tracing.provider>`.
-   */
-  'tracing'?: (_envoy_config_trace_v3_Tracing | null);
-  /**
-   * Configuration for the local administration HTTP server.
-   */
-  'admin'?: (_envoy_config_bootstrap_v3_Admin | null);
-  /**
-   * Configuration for internal processing of stats.
-   */
-  'stats_config'?: (_envoy_config_metrics_v3_StatsConfig | null);
-  /**
-   * Health discovery service config option.
-   * (:ref:`core.ApiConfigSource <envoy_v3_api_msg_config.core.v3.ApiConfigSource>`)
-   */
-  'hds_config'?: (_envoy_config_core_v3_ApiConfigSource | null);
-  /**
-   * Optional overload manager configuration.
-   */
-  'overload_manager'?: (_envoy_config_overload_v3_OverloadManager | null);
-  /**
-   * Enable :ref:`stats for event dispatcher <operations_performance>`, defaults to false.
-   * Note that this records a value for each iteration of the event loop on every thread. This
-   * should normally be minimal overhead, but when using
-   * :ref:`statsd <envoy_v3_api_msg_config.metrics.v3.StatsdSink>`, it will send each observed value
-   * over the wire individually because the statsd protocol doesn't have any way to represent a
-   * histogram summary. Be aware that this can be a very large volume of data.
-   */
-  'enable_dispatcher_stats'?: (boolean);
-  /**
-   * Configuration for the runtime configuration provider. If not
-   * specified, a “null” provider will be used which will result in all defaults
-   * being used.
-   */
-  'layered_runtime'?: (_envoy_config_bootstrap_v3_LayeredRuntime | null);
-  /**
-   * Optional string which will be used in lieu of x-envoy in prefixing headers.
-   * 
-   * For example, if this string is present and set to X-Foo, then x-envoy-retry-on will be
-   * transformed into x-foo-retry-on etc.
-   * 
-   * Note this applies to the headers Envoy will generate, the headers Envoy will sanitize, and the
-   * headers Envoy will trust for core code and core extensions only. Be VERY careful making
-   * changes to this string, especially in multi-layer Envoy deployments or deployments using
-   * extensions which are not upstream.
-   */
-  'header_prefix'?: (string);
-  /**
-   * Optional proxy version which will be used to set the value of :ref:`server.version statistic
-   * <server_statistics>` if specified. Envoy will not process this value, it will be sent as is to
-   * :ref:`stats sinks <envoy_v3_api_msg_config.metrics.v3.StatsSink>`.
-   */
-  'stats_server_version_override'?: (_google_protobuf_UInt64Value | null);
-  /**
-   * Always use TCP queries instead of UDP queries for DNS lookups.
-   * This may be overridden on a per-cluster basis in cds_config,
-   * when :ref:`dns_resolvers <envoy_v3_api_field_config.cluster.v3.Cluster.dns_resolvers>` and
-   * :ref:`use_tcp_for_dns_lookups <envoy_v3_api_field_config.cluster.v3.Cluster.use_tcp_for_dns_lookups>` are
-   * specified.
-   * Setting this value causes failure if the
-   * ``envoy.restart_features.use_apple_api_for_dns_lookups`` runtime value is true during
-   * server startup. Apple' API only uses UDP for DNS resolution.
-   * This field is deprecated in favor of *dns_resolution_config*
-   * which aggregates all of the DNS resolver configuration in a single message.
-   */
-  'use_tcp_for_dns_lookups'?: (boolean);
-  /**
-   * Specifies optional bootstrap extensions to be instantiated at startup time.
-   * Each item contains extension specific configuration.
-   * [#extension-category: envoy.bootstrap]
-   */
-  'bootstrap_extensions'?: (_envoy_config_core_v3_TypedExtensionConfig)[];
-  /**
-   * Configuration sources that will participate in
-   * xdstp:// URL authority resolution. The algorithm is as
-   * follows:
-   * 1. The authority field is taken from the xdstp:// URL, call
-   * this *resource_authority*.
-   * 2. *resource_authority* is compared against the authorities in any peer
-   * *ConfigSource*. The peer *ConfigSource* is the configuration source
-   * message which would have been used unconditionally for resolution
-   * with opaque resource names. If there is a match with an authority, the
-   * peer *ConfigSource* message is used.
-   * 3. *resource_authority* is compared sequentially with the authorities in
-   * each configuration source in *config_sources*. The first *ConfigSource*
-   * to match wins.
-   * 4. As a fallback, if no configuration source matches, then
-   * *default_config_source* is used.
-   * 5. If *default_config_source* is not specified, resolution fails.
-   * [#not-implemented-hide:]
-   */
-  'config_sources'?: (_envoy_config_core_v3_ConfigSource)[];
-  /**
-   * Default configuration source for xdstp:// URLs if all
-   * other resolution fails.
-   * [#not-implemented-hide:]
-   */
-  'default_config_source'?: (_envoy_config_core_v3_ConfigSource | null);
-  /**
-   * Optional overriding of default socket interface. The value must be the name of one of the
-   * socket interface factories initialized through a bootstrap extension
-   */
-  'default_socket_interface'?: (string);
-  /**
-   * Global map of CertificateProvider instances. These instances are referred to by name in the
-   * :ref:`CommonTlsContext.CertificateProviderInstance.instance_name
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CommonTlsContext.CertificateProviderInstance.instance_name>`
-   * field.
-   * [#not-implemented-hide:]
-   */
-  'certificate_provider_instances'?: ({[key: string]: _envoy_config_core_v3_TypedExtensionConfig});
-  /**
-   * A list of :ref:`Node <envoy_v3_api_msg_config.core.v3.Node>` field names
-   * that will be included in the context parameters of the effective
-   * xdstp:// URL that is sent in a discovery request when resource
-   * locators are used for LDS/CDS. Any non-string field will have its JSON
-   * encoding set as the context parameter value, with the exception of
-   * metadata, which will be flattened (see example below). The supported field
-   * names are:
-   * - "cluster"
-   * - "id"
-   * - "locality.region"
-   * - "locality.sub_zone"
-   * - "locality.zone"
-   * - "metadata"
-   * - "user_agent_build_version.metadata"
-   * - "user_agent_build_version.version"
-   * - "user_agent_name"
-   * - "user_agent_version"
-   * 
-   * The node context parameters act as a base layer dictionary for the context
-   * parameters (i.e. more specific resource specific context parameters will
-   * override). Field names will be prefixed with “udpa.node.” when included in
-   * context parameters.
-   * 
-   * For example, if node_context_params is ``["user_agent_name", "metadata"]``,
-   * the implied context parameters might be::
-   * 
-   * node.user_agent_name: "envoy"
-   * node.metadata.foo: "{\"bar\": \"baz\"}"
-   * node.metadata.some: "42"
-   * node.metadata.thing: "\"thing\""
-   * 
-   * [#not-implemented-hide:]
-   */
-  'node_context_params'?: (string)[];
-  /**
-   * Optional watchdogs configuration.
-   * This is used for specifying different watchdogs for the different subsystems.
-   * [#extension-category: envoy.guarddog_actions]
-   */
-  'watchdogs'?: (_envoy_config_bootstrap_v3_Watchdogs | null);
-  /**
-   * Specifies optional extensions instantiated at startup time and
-   * invoked during crash time on the request that caused the crash.
-   */
-  'fatal_actions'?: (_envoy_config_bootstrap_v3_FatalAction)[];
-  /**
-   * Flush stats to sinks only when queried for on the admin interface. If set,
-   * a flush timer is not created. Only one of `stats_flush_on_admin` or
-   * `stats_flush_interval` can be set.
-   */
-  'stats_flush_on_admin'?: (boolean);
-  /**
-   * DNS resolution configuration which includes the underlying dns resolver addresses and options.
-   * This may be overridden on a per-cluster basis in cds_config, when
-   * :ref:`dns_resolution_config <envoy_v3_api_field_config.cluster.v3.Cluster.dns_resolution_config>`
-   * is specified.
-   * *dns_resolution_config* will be deprecated once
-   * :ref:'typed_dns_resolver_config <envoy_v3_api_field_config.bootstrap.v3.Bootstrap.typed_dns_resolver_config>'
-   * is fully supported.
-   */
-  'dns_resolution_config'?: (_envoy_config_core_v3_DnsResolutionConfig | null);
-  /**
-   * DNS resolver type configuration extension. This extension can be used to configure c-ares, apple,
-   * or any other DNS resolver types and the related parameters.
-   * For example, an object of :ref:`DnsResolutionConfig <envoy_v3_api_msg_config.core.v3.DnsResolutionConfig>`
-   * can be packed into this *typed_dns_resolver_config*. This configuration will replace the
-   * :ref:'dns_resolution_config <envoy_v3_api_field_config.bootstrap.v3.Bootstrap.dns_resolution_config>'
-   * configuration eventually.
-   * TODO(yanjunxiang): Investigate the deprecation plan for *dns_resolution_config*.
-   * During the transition period when both *dns_resolution_config* and *typed_dns_resolver_config* exists,
-   * this configuration is optional.
-   * When *typed_dns_resolver_config* is in place, Envoy will use it and ignore *dns_resolution_config*.
-   * When *typed_dns_resolver_config* is missing, the default behavior is in place.
-   * [#not-implemented-hide:]
-   */
-  'typed_dns_resolver_config'?: (_envoy_config_core_v3_TypedExtensionConfig | null);
-  /**
-   * Specifies a set of headers that need to be registered as inline header. This configuration
-   * allows users to customize the inline headers on-demand at Envoy startup without modifying
-   * Envoy's source code.
-   * 
-   * Note that the 'set-cookie' header cannot be registered as inline header.
-   */
-  'inline_headers'?: (_envoy_config_bootstrap_v3_CustomInlineHeader)[];
-  'stats_flush'?: "stats_flush_on_admin";
-}
-
-/**
- * Bootstrap :ref:`configuration overview <config_overview_bootstrap>`.
- * [#next-free-field: 33]
- */
-export interface Bootstrap__Output {
-  /**
-   * Node identity to present to the management server and for instance
-   * identification purposes (e.g. in generated headers).
-   */
-  'node': (_envoy_config_core_v3_Node__Output | null);
-  /**
-   * Statically specified resources.
-   */
-  'static_resources': (_envoy_config_bootstrap_v3_Bootstrap_StaticResources__Output | null);
-  /**
-   * xDS configuration sources.
-   */
-  'dynamic_resources': (_envoy_config_bootstrap_v3_Bootstrap_DynamicResources__Output | null);
-  /**
-   * Configuration for the cluster manager which owns all upstream clusters
-   * within the server.
-   */
-  'cluster_manager': (_envoy_config_bootstrap_v3_ClusterManager__Output | null);
-  /**
-   * Optional file system path to search for startup flag files.
-   */
-  'flags_path': (string);
-  /**
-   * Optional set of stats sinks.
-   */
-  'stats_sinks': (_envoy_config_metrics_v3_StatsSink__Output)[];
-  /**
-   * Optional duration between flushes to configured stats sinks. For
-   * performance reasons Envoy latches counters and only flushes counters and
-   * gauges at a periodic interval. If not specified the default is 5000ms (5
-   * seconds). Only one of `stats_flush_interval` or `stats_flush_on_admin`
-   * can be set.
-   * Duration must be at least 1ms and at most 5 min.
-   */
-  'stats_flush_interval': (_google_protobuf_Duration__Output | null);
-  /**
-   * Optional watchdog configuration.
-   * This is for a single watchdog configuration for the entire system.
-   * Deprecated in favor of *watchdogs* which has finer granularity.
-   */
-  'watchdog': (_envoy_config_bootstrap_v3_Watchdog__Output | null);
-  /**
-   * Configuration for an external tracing provider.
-   * 
-   * .. attention::
-   * This field has been deprecated in favor of :ref:`HttpConnectionManager.Tracing.provider
-   * <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.Tracing.provider>`.
-   */
-  'tracing': (_envoy_config_trace_v3_Tracing__Output | null);
-  /**
-   * Configuration for the local administration HTTP server.
-   */
-  'admin': (_envoy_config_bootstrap_v3_Admin__Output | null);
-  /**
-   * Configuration for internal processing of stats.
-   */
-  'stats_config': (_envoy_config_metrics_v3_StatsConfig__Output | null);
-  /**
-   * Health discovery service config option.
-   * (:ref:`core.ApiConfigSource <envoy_v3_api_msg_config.core.v3.ApiConfigSource>`)
-   */
-  'hds_config': (_envoy_config_core_v3_ApiConfigSource__Output | null);
-  /**
-   * Optional overload manager configuration.
-   */
-  'overload_manager': (_envoy_config_overload_v3_OverloadManager__Output | null);
-  /**
-   * Enable :ref:`stats for event dispatcher <operations_performance>`, defaults to false.
-   * Note that this records a value for each iteration of the event loop on every thread. This
-   * should normally be minimal overhead, but when using
-   * :ref:`statsd <envoy_v3_api_msg_config.metrics.v3.StatsdSink>`, it will send each observed value
-   * over the wire individually because the statsd protocol doesn't have any way to represent a
-   * histogram summary. Be aware that this can be a very large volume of data.
-   */
-  'enable_dispatcher_stats': (boolean);
-  /**
-   * Configuration for the runtime configuration provider. If not
-   * specified, a “null” provider will be used which will result in all defaults
-   * being used.
-   */
-  'layered_runtime': (_envoy_config_bootstrap_v3_LayeredRuntime__Output | null);
-  /**
-   * Optional string which will be used in lieu of x-envoy in prefixing headers.
-   * 
-   * For example, if this string is present and set to X-Foo, then x-envoy-retry-on will be
-   * transformed into x-foo-retry-on etc.
-   * 
-   * Note this applies to the headers Envoy will generate, the headers Envoy will sanitize, and the
-   * headers Envoy will trust for core code and core extensions only. Be VERY careful making
-   * changes to this string, especially in multi-layer Envoy deployments or deployments using
-   * extensions which are not upstream.
-   */
-  'header_prefix': (string);
-  /**
-   * Optional proxy version which will be used to set the value of :ref:`server.version statistic
-   * <server_statistics>` if specified. Envoy will not process this value, it will be sent as is to
-   * :ref:`stats sinks <envoy_v3_api_msg_config.metrics.v3.StatsSink>`.
-   */
-  'stats_server_version_override': (_google_protobuf_UInt64Value__Output | null);
-  /**
-   * Always use TCP queries instead of UDP queries for DNS lookups.
-   * This may be overridden on a per-cluster basis in cds_config,
-   * when :ref:`dns_resolvers <envoy_v3_api_field_config.cluster.v3.Cluster.dns_resolvers>` and
-   * :ref:`use_tcp_for_dns_lookups <envoy_v3_api_field_config.cluster.v3.Cluster.use_tcp_for_dns_lookups>` are
-   * specified.
-   * Setting this value causes failure if the
-   * ``envoy.restart_features.use_apple_api_for_dns_lookups`` runtime value is true during
-   * server startup. Apple' API only uses UDP for DNS resolution.
-   * This field is deprecated in favor of *dns_resolution_config*
-   * which aggregates all of the DNS resolver configuration in a single message.
-   */
-  'use_tcp_for_dns_lookups': (boolean);
-  /**
-   * Specifies optional bootstrap extensions to be instantiated at startup time.
-   * Each item contains extension specific configuration.
-   * [#extension-category: envoy.bootstrap]
-   */
-  'bootstrap_extensions': (_envoy_config_core_v3_TypedExtensionConfig__Output)[];
-  /**
-   * Configuration sources that will participate in
-   * xdstp:// URL authority resolution. The algorithm is as
-   * follows:
-   * 1. The authority field is taken from the xdstp:// URL, call
-   * this *resource_authority*.
-   * 2. *resource_authority* is compared against the authorities in any peer
-   * *ConfigSource*. The peer *ConfigSource* is the configuration source
-   * message which would have been used unconditionally for resolution
-   * with opaque resource names. If there is a match with an authority, the
-   * peer *ConfigSource* message is used.
-   * 3. *resource_authority* is compared sequentially with the authorities in
-   * each configuration source in *config_sources*. The first *ConfigSource*
-   * to match wins.
-   * 4. As a fallback, if no configuration source matches, then
-   * *default_config_source* is used.
-   * 5. If *default_config_source* is not specified, resolution fails.
-   * [#not-implemented-hide:]
-   */
-  'config_sources': (_envoy_config_core_v3_ConfigSource__Output)[];
-  /**
-   * Default configuration source for xdstp:// URLs if all
-   * other resolution fails.
-   * [#not-implemented-hide:]
-   */
-  'default_config_source': (_envoy_config_core_v3_ConfigSource__Output | null);
-  /**
-   * Optional overriding of default socket interface. The value must be the name of one of the
-   * socket interface factories initialized through a bootstrap extension
-   */
-  'default_socket_interface': (string);
-  /**
-   * Global map of CertificateProvider instances. These instances are referred to by name in the
-   * :ref:`CommonTlsContext.CertificateProviderInstance.instance_name
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CommonTlsContext.CertificateProviderInstance.instance_name>`
-   * field.
-   * [#not-implemented-hide:]
-   */
-  'certificate_provider_instances': ({[key: string]: _envoy_config_core_v3_TypedExtensionConfig__Output});
-  /**
-   * A list of :ref:`Node <envoy_v3_api_msg_config.core.v3.Node>` field names
-   * that will be included in the context parameters of the effective
-   * xdstp:// URL that is sent in a discovery request when resource
-   * locators are used for LDS/CDS. Any non-string field will have its JSON
-   * encoding set as the context parameter value, with the exception of
-   * metadata, which will be flattened (see example below). The supported field
-   * names are:
-   * - "cluster"
-   * - "id"
-   * - "locality.region"
-   * - "locality.sub_zone"
-   * - "locality.zone"
-   * - "metadata"
-   * - "user_agent_build_version.metadata"
-   * - "user_agent_build_version.version"
-   * - "user_agent_name"
-   * - "user_agent_version"
-   * 
-   * The node context parameters act as a base layer dictionary for the context
-   * parameters (i.e. more specific resource specific context parameters will
-   * override). Field names will be prefixed with “udpa.node.” when included in
-   * context parameters.
-   * 
-   * For example, if node_context_params is ``["user_agent_name", "metadata"]``,
-   * the implied context parameters might be::
-   * 
-   * node.user_agent_name: "envoy"
-   * node.metadata.foo: "{\"bar\": \"baz\"}"
-   * node.metadata.some: "42"
-   * node.metadata.thing: "\"thing\""
-   * 
-   * [#not-implemented-hide:]
-   */
-  'node_context_params': (string)[];
-  /**
-   * Optional watchdogs configuration.
-   * This is used for specifying different watchdogs for the different subsystems.
-   * [#extension-category: envoy.guarddog_actions]
-   */
-  'watchdogs': (_envoy_config_bootstrap_v3_Watchdogs__Output | null);
-  /**
-   * Specifies optional extensions instantiated at startup time and
-   * invoked during crash time on the request that caused the crash.
-   */
-  'fatal_actions': (_envoy_config_bootstrap_v3_FatalAction__Output)[];
-  /**
-   * Flush stats to sinks only when queried for on the admin interface. If set,
-   * a flush timer is not created. Only one of `stats_flush_on_admin` or
-   * `stats_flush_interval` can be set.
-   */
-  'stats_flush_on_admin'?: (boolean);
-  /**
-   * DNS resolution configuration which includes the underlying dns resolver addresses and options.
-   * This may be overridden on a per-cluster basis in cds_config, when
-   * :ref:`dns_resolution_config <envoy_v3_api_field_config.cluster.v3.Cluster.dns_resolution_config>`
-   * is specified.
-   * *dns_resolution_config* will be deprecated once
-   * :ref:'typed_dns_resolver_config <envoy_v3_api_field_config.bootstrap.v3.Bootstrap.typed_dns_resolver_config>'
-   * is fully supported.
-   */
-  'dns_resolution_config': (_envoy_config_core_v3_DnsResolutionConfig__Output | null);
-  /**
-   * DNS resolver type configuration extension. This extension can be used to configure c-ares, apple,
-   * or any other DNS resolver types and the related parameters.
-   * For example, an object of :ref:`DnsResolutionConfig <envoy_v3_api_msg_config.core.v3.DnsResolutionConfig>`
-   * can be packed into this *typed_dns_resolver_config*. This configuration will replace the
-   * :ref:'dns_resolution_config <envoy_v3_api_field_config.bootstrap.v3.Bootstrap.dns_resolution_config>'
-   * configuration eventually.
-   * TODO(yanjunxiang): Investigate the deprecation plan for *dns_resolution_config*.
-   * During the transition period when both *dns_resolution_config* and *typed_dns_resolver_config* exists,
-   * this configuration is optional.
-   * When *typed_dns_resolver_config* is in place, Envoy will use it and ignore *dns_resolution_config*.
-   * When *typed_dns_resolver_config* is missing, the default behavior is in place.
-   * [#not-implemented-hide:]
-   */
-  'typed_dns_resolver_config': (_envoy_config_core_v3_TypedExtensionConfig__Output | null);
-  /**
-   * Specifies a set of headers that need to be registered as inline header. This configuration
-   * allows users to customize the inline headers on-demand at Envoy startup without modifying
-   * Envoy's source code.
-   * 
-   * Note that the 'set-cookie' header cannot be registered as inline header.
-   */
-  'inline_headers': (_envoy_config_bootstrap_v3_CustomInlineHeader__Output)[];
-  'stats_flush': "stats_flush_on_admin";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/ClusterManager.ts b/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/ClusterManager.ts
deleted file mode 100644
index 571b96fb7..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/ClusterManager.ts
+++ /dev/null
@@ -1,99 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-import type { BindConfig as _envoy_config_core_v3_BindConfig, BindConfig__Output as _envoy_config_core_v3_BindConfig__Output } from '../../../../envoy/config/core/v3/BindConfig';
-import type { ApiConfigSource as _envoy_config_core_v3_ApiConfigSource, ApiConfigSource__Output as _envoy_config_core_v3_ApiConfigSource__Output } from '../../../../envoy/config/core/v3/ApiConfigSource';
-import type { EventServiceConfig as _envoy_config_core_v3_EventServiceConfig, EventServiceConfig__Output as _envoy_config_core_v3_EventServiceConfig__Output } from '../../../../envoy/config/core/v3/EventServiceConfig';
-
-export interface _envoy_config_bootstrap_v3_ClusterManager_OutlierDetection {
-  /**
-   * Specifies the path to the outlier event log.
-   */
-  'event_log_path'?: (string);
-  /**
-   * [#not-implemented-hide:]
-   * The gRPC service for the outlier detection event service.
-   * If empty, outlier detection events won't be sent to a remote endpoint.
-   */
-  'event_service'?: (_envoy_config_core_v3_EventServiceConfig | null);
-}
-
-export interface _envoy_config_bootstrap_v3_ClusterManager_OutlierDetection__Output {
-  /**
-   * Specifies the path to the outlier event log.
-   */
-  'event_log_path': (string);
-  /**
-   * [#not-implemented-hide:]
-   * The gRPC service for the outlier detection event service.
-   * If empty, outlier detection events won't be sent to a remote endpoint.
-   */
-  'event_service': (_envoy_config_core_v3_EventServiceConfig__Output | null);
-}
-
-/**
- * Cluster manager :ref:`architecture overview <arch_overview_cluster_manager>`.
- */
-export interface ClusterManager {
-  /**
-   * Name of the local cluster (i.e., the cluster that owns the Envoy running
-   * this configuration). In order to enable :ref:`zone aware routing
-   * <arch_overview_load_balancing_zone_aware_routing>` this option must be set.
-   * If *local_cluster_name* is defined then :ref:`clusters
-   * <envoy_v3_api_msg_config.cluster.v3.Cluster>` must be defined in the :ref:`Bootstrap
-   * static cluster resources
-   * <envoy_v3_api_field_config.bootstrap.v3.Bootstrap.StaticResources.clusters>`. This is unrelated to
-   * the :option:`--service-cluster` option which does not `affect zone aware
-   * routing <https://github.com/envoyproxy/envoy/issues/774>`_.
-   */
-  'local_cluster_name'?: (string);
-  /**
-   * Optional global configuration for outlier detection.
-   */
-  'outlier_detection'?: (_envoy_config_bootstrap_v3_ClusterManager_OutlierDetection | null);
-  /**
-   * Optional configuration used to bind newly established upstream connections.
-   * This may be overridden on a per-cluster basis by upstream_bind_config in the cds_config.
-   */
-  'upstream_bind_config'?: (_envoy_config_core_v3_BindConfig | null);
-  /**
-   * A management server endpoint to stream load stats to via
-   * *StreamLoadStats*. This must have :ref:`api_type
-   * <envoy_v3_api_field_config.core.v3.ApiConfigSource.api_type>` :ref:`GRPC
-   * <envoy_v3_api_enum_value_config.core.v3.ApiConfigSource.ApiType.GRPC>`.
-   */
-  'load_stats_config'?: (_envoy_config_core_v3_ApiConfigSource | null);
-}
-
-/**
- * Cluster manager :ref:`architecture overview <arch_overview_cluster_manager>`.
- */
-export interface ClusterManager__Output {
-  /**
-   * Name of the local cluster (i.e., the cluster that owns the Envoy running
-   * this configuration). In order to enable :ref:`zone aware routing
-   * <arch_overview_load_balancing_zone_aware_routing>` this option must be set.
-   * If *local_cluster_name* is defined then :ref:`clusters
-   * <envoy_v3_api_msg_config.cluster.v3.Cluster>` must be defined in the :ref:`Bootstrap
-   * static cluster resources
-   * <envoy_v3_api_field_config.bootstrap.v3.Bootstrap.StaticResources.clusters>`. This is unrelated to
-   * the :option:`--service-cluster` option which does not `affect zone aware
-   * routing <https://github.com/envoyproxy/envoy/issues/774>`_.
-   */
-  'local_cluster_name': (string);
-  /**
-   * Optional global configuration for outlier detection.
-   */
-  'outlier_detection': (_envoy_config_bootstrap_v3_ClusterManager_OutlierDetection__Output | null);
-  /**
-   * Optional configuration used to bind newly established upstream connections.
-   * This may be overridden on a per-cluster basis by upstream_bind_config in the cds_config.
-   */
-  'upstream_bind_config': (_envoy_config_core_v3_BindConfig__Output | null);
-  /**
-   * A management server endpoint to stream load stats to via
-   * *StreamLoadStats*. This must have :ref:`api_type
-   * <envoy_v3_api_field_config.core.v3.ApiConfigSource.api_type>` :ref:`GRPC
-   * <envoy_v3_api_enum_value_config.core.v3.ApiConfigSource.ApiType.GRPC>`.
-   */
-  'load_stats_config': (_envoy_config_core_v3_ApiConfigSource__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/CustomInlineHeader.ts b/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/CustomInlineHeader.ts
deleted file mode 100644
index f0e2d29aa..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/CustomInlineHeader.ts
+++ /dev/null
@@ -1,85 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-export enum _envoy_config_bootstrap_v3_CustomInlineHeader_InlineHeaderType {
-  REQUEST_HEADER = 0,
-  REQUEST_TRAILER = 1,
-  RESPONSE_HEADER = 2,
-  RESPONSE_TRAILER = 3,
-}
-
-/**
- * Used to specify the header that needs to be registered as an inline header.
- * 
- * If request or response contain multiple headers with the same name and the header
- * name is registered as an inline header. Then multiple headers will be folded
- * into one, and multiple header values will be concatenated by a suitable delimiter.
- * The delimiter is generally a comma.
- * 
- * For example, if 'foo' is registered as an inline header, and the headers contains
- * the following two headers:
- * 
- * .. code-block:: text
- * 
- * foo: bar
- * foo: eep
- * 
- * Then they will eventually be folded into:
- * 
- * .. code-block:: text
- * 
- * foo: bar, eep
- * 
- * Inline headers provide O(1) search performance, but each inline header imposes
- * an additional memory overhead on all instances of the corresponding type of
- * HeaderMap or TrailerMap.
- */
-export interface CustomInlineHeader {
-  /**
-   * The name of the header that is expected to be set as the inline header.
-   */
-  'inline_header_name'?: (string);
-  /**
-   * The type of the header that is expected to be set as the inline header.
-   */
-  'inline_header_type'?: (_envoy_config_bootstrap_v3_CustomInlineHeader_InlineHeaderType | keyof typeof _envoy_config_bootstrap_v3_CustomInlineHeader_InlineHeaderType);
-}
-
-/**
- * Used to specify the header that needs to be registered as an inline header.
- * 
- * If request or response contain multiple headers with the same name and the header
- * name is registered as an inline header. Then multiple headers will be folded
- * into one, and multiple header values will be concatenated by a suitable delimiter.
- * The delimiter is generally a comma.
- * 
- * For example, if 'foo' is registered as an inline header, and the headers contains
- * the following two headers:
- * 
- * .. code-block:: text
- * 
- * foo: bar
- * foo: eep
- * 
- * Then they will eventually be folded into:
- * 
- * .. code-block:: text
- * 
- * foo: bar, eep
- * 
- * Inline headers provide O(1) search performance, but each inline header imposes
- * an additional memory overhead on all instances of the corresponding type of
- * HeaderMap or TrailerMap.
- */
-export interface CustomInlineHeader__Output {
-  /**
-   * The name of the header that is expected to be set as the inline header.
-   */
-  'inline_header_name': (string);
-  /**
-   * The type of the header that is expected to be set as the inline header.
-   */
-  'inline_header_type': (keyof typeof _envoy_config_bootstrap_v3_CustomInlineHeader_InlineHeaderType);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/FatalAction.ts b/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/FatalAction.ts
deleted file mode 100644
index 236afded5..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/FatalAction.ts
+++ /dev/null
@@ -1,39 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-import type { TypedExtensionConfig as _envoy_config_core_v3_TypedExtensionConfig, TypedExtensionConfig__Output as _envoy_config_core_v3_TypedExtensionConfig__Output } from '../../../../envoy/config/core/v3/TypedExtensionConfig';
-
-/**
- * Fatal actions to run while crashing. Actions can be safe (meaning they are
- * async-signal safe) or unsafe. We run all safe actions before we run unsafe actions.
- * If using an unsafe action that could get stuck or deadlock, it important to
- * have an out of band system to terminate the process.
- * 
- * The interface for the extension is ``Envoy::Server::Configuration::FatalAction``.
- * *FatalAction* extensions live in the ``envoy.extensions.fatal_actions`` API
- * namespace.
- */
-export interface FatalAction {
-  /**
-   * Extension specific configuration for the action. It's expected to conform
-   * to the ``Envoy::Server::Configuration::FatalAction`` interface.
-   */
-  'config'?: (_envoy_config_core_v3_TypedExtensionConfig | null);
-}
-
-/**
- * Fatal actions to run while crashing. Actions can be safe (meaning they are
- * async-signal safe) or unsafe. We run all safe actions before we run unsafe actions.
- * If using an unsafe action that could get stuck or deadlock, it important to
- * have an out of band system to terminate the process.
- * 
- * The interface for the extension is ``Envoy::Server::Configuration::FatalAction``.
- * *FatalAction* extensions live in the ``envoy.extensions.fatal_actions`` API
- * namespace.
- */
-export interface FatalAction__Output {
-  /**
-   * Extension specific configuration for the action. It's expected to conform
-   * to the ``Envoy::Server::Configuration::FatalAction`` interface.
-   */
-  'config': (_envoy_config_core_v3_TypedExtensionConfig__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/LayeredRuntime.ts b/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/LayeredRuntime.ts
deleted file mode 100644
index 3514d3140..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/LayeredRuntime.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-import type { RuntimeLayer as _envoy_config_bootstrap_v3_RuntimeLayer, RuntimeLayer__Output as _envoy_config_bootstrap_v3_RuntimeLayer__Output } from '../../../../envoy/config/bootstrap/v3/RuntimeLayer';
-
-/**
- * Runtime :ref:`configuration overview <config_runtime>`.
- */
-export interface LayeredRuntime {
-  /**
-   * The :ref:`layers <config_runtime_layering>` of the runtime. This is ordered
-   * such that later layers in the list overlay earlier entries.
-   */
-  'layers'?: (_envoy_config_bootstrap_v3_RuntimeLayer)[];
-}
-
-/**
- * Runtime :ref:`configuration overview <config_runtime>`.
- */
-export interface LayeredRuntime__Output {
-  /**
-   * The :ref:`layers <config_runtime_layering>` of the runtime. This is ordered
-   * such that later layers in the list overlay earlier entries.
-   */
-  'layers': (_envoy_config_bootstrap_v3_RuntimeLayer__Output)[];
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Runtime.ts b/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Runtime.ts
deleted file mode 100644
index 4f7713bcf..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Runtime.ts
+++ /dev/null
@@ -1,77 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-import type { Struct as _google_protobuf_Struct, Struct__Output as _google_protobuf_Struct__Output } from '../../../../google/protobuf/Struct';
-
-/**
- * Runtime :ref:`configuration overview <config_runtime>` (deprecated).
- */
-export interface Runtime {
-  /**
-   * The implementation assumes that the file system tree is accessed via a
-   * symbolic link. An atomic link swap is used when a new tree should be
-   * switched to. This parameter specifies the path to the symbolic link. Envoy
-   * will watch the location for changes and reload the file system tree when
-   * they happen. If this parameter is not set, there will be no disk based
-   * runtime.
-   */
-  'symlink_root'?: (string);
-  /**
-   * Specifies the subdirectory to load within the root directory. This is
-   * useful if multiple systems share the same delivery mechanism. Envoy
-   * configuration elements can be contained in a dedicated subdirectory.
-   */
-  'subdirectory'?: (string);
-  /**
-   * Specifies an optional subdirectory to load within the root directory. If
-   * specified and the directory exists, configuration values within this
-   * directory will override those found in the primary subdirectory. This is
-   * useful when Envoy is deployed across many different types of servers.
-   * Sometimes it is useful to have a per service cluster directory for runtime
-   * configuration. See below for exactly how the override directory is used.
-   */
-  'override_subdirectory'?: (string);
-  /**
-   * Static base runtime. This will be :ref:`overridden
-   * <config_runtime_layering>` by other runtime layers, e.g.
-   * disk or admin. This follows the :ref:`runtime protobuf JSON representation
-   * encoding <config_runtime_proto_json>`.
-   */
-  'base'?: (_google_protobuf_Struct | null);
-}
-
-/**
- * Runtime :ref:`configuration overview <config_runtime>` (deprecated).
- */
-export interface Runtime__Output {
-  /**
-   * The implementation assumes that the file system tree is accessed via a
-   * symbolic link. An atomic link swap is used when a new tree should be
-   * switched to. This parameter specifies the path to the symbolic link. Envoy
-   * will watch the location for changes and reload the file system tree when
-   * they happen. If this parameter is not set, there will be no disk based
-   * runtime.
-   */
-  'symlink_root': (string);
-  /**
-   * Specifies the subdirectory to load within the root directory. This is
-   * useful if multiple systems share the same delivery mechanism. Envoy
-   * configuration elements can be contained in a dedicated subdirectory.
-   */
-  'subdirectory': (string);
-  /**
-   * Specifies an optional subdirectory to load within the root directory. If
-   * specified and the directory exists, configuration values within this
-   * directory will override those found in the primary subdirectory. This is
-   * useful when Envoy is deployed across many different types of servers.
-   * Sometimes it is useful to have a per service cluster directory for runtime
-   * configuration. See below for exactly how the override directory is used.
-   */
-  'override_subdirectory': (string);
-  /**
-   * Static base runtime. This will be :ref:`overridden
-   * <config_runtime_layering>` by other runtime layers, e.g.
-   * disk or admin. This follows the :ref:`runtime protobuf JSON representation
-   * encoding <config_runtime_proto_json>`.
-   */
-  'base': (_google_protobuf_Struct__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/RuntimeLayer.ts b/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/RuntimeLayer.ts
deleted file mode 100644
index b072bfa7d..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/RuntimeLayer.ts
+++ /dev/null
@@ -1,142 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-import type { Struct as _google_protobuf_Struct, Struct__Output as _google_protobuf_Struct__Output } from '../../../../google/protobuf/Struct';
-import type { ConfigSource as _envoy_config_core_v3_ConfigSource, ConfigSource__Output as _envoy_config_core_v3_ConfigSource__Output } from '../../../../envoy/config/core/v3/ConfigSource';
-
-/**
- * :ref:`Admin console runtime <config_runtime_admin>` layer.
- */
-export interface _envoy_config_bootstrap_v3_RuntimeLayer_AdminLayer {
-}
-
-/**
- * :ref:`Admin console runtime <config_runtime_admin>` layer.
- */
-export interface _envoy_config_bootstrap_v3_RuntimeLayer_AdminLayer__Output {
-}
-
-/**
- * :ref:`Disk runtime <config_runtime_local_disk>` layer.
- */
-export interface _envoy_config_bootstrap_v3_RuntimeLayer_DiskLayer {
-  /**
-   * The implementation assumes that the file system tree is accessed via a
-   * symbolic link. An atomic link swap is used when a new tree should be
-   * switched to. This parameter specifies the path to the symbolic link.
-   * Envoy will watch the location for changes and reload the file system tree
-   * when they happen. See documentation on runtime :ref:`atomicity
-   * <config_runtime_atomicity>` for further details on how reloads are
-   * treated.
-   */
-  'symlink_root'?: (string);
-  /**
-   * Specifies the subdirectory to load within the root directory. This is
-   * useful if multiple systems share the same delivery mechanism. Envoy
-   * configuration elements can be contained in a dedicated subdirectory.
-   */
-  'subdirectory'?: (string);
-  /**
-   * :ref:`Append <config_runtime_local_disk_service_cluster_subdirs>` the
-   * service cluster to the path under symlink root.
-   */
-  'append_service_cluster'?: (boolean);
-}
-
-/**
- * :ref:`Disk runtime <config_runtime_local_disk>` layer.
- */
-export interface _envoy_config_bootstrap_v3_RuntimeLayer_DiskLayer__Output {
-  /**
-   * The implementation assumes that the file system tree is accessed via a
-   * symbolic link. An atomic link swap is used when a new tree should be
-   * switched to. This parameter specifies the path to the symbolic link.
-   * Envoy will watch the location for changes and reload the file system tree
-   * when they happen. See documentation on runtime :ref:`atomicity
-   * <config_runtime_atomicity>` for further details on how reloads are
-   * treated.
-   */
-  'symlink_root': (string);
-  /**
-   * Specifies the subdirectory to load within the root directory. This is
-   * useful if multiple systems share the same delivery mechanism. Envoy
-   * configuration elements can be contained in a dedicated subdirectory.
-   */
-  'subdirectory': (string);
-  /**
-   * :ref:`Append <config_runtime_local_disk_service_cluster_subdirs>` the
-   * service cluster to the path under symlink root.
-   */
-  'append_service_cluster': (boolean);
-}
-
-/**
- * :ref:`Runtime Discovery Service (RTDS) <config_runtime_rtds>` layer.
- */
-export interface _envoy_config_bootstrap_v3_RuntimeLayer_RtdsLayer {
-  /**
-   * Resource to subscribe to at *rtds_config* for the RTDS layer.
-   */
-  'name'?: (string);
-  /**
-   * RTDS configuration source.
-   */
-  'rtds_config'?: (_envoy_config_core_v3_ConfigSource | null);
-}
-
-/**
- * :ref:`Runtime Discovery Service (RTDS) <config_runtime_rtds>` layer.
- */
-export interface _envoy_config_bootstrap_v3_RuntimeLayer_RtdsLayer__Output {
-  /**
-   * Resource to subscribe to at *rtds_config* for the RTDS layer.
-   */
-  'name': (string);
-  /**
-   * RTDS configuration source.
-   */
-  'rtds_config': (_envoy_config_core_v3_ConfigSource__Output | null);
-}
-
-/**
- * [#next-free-field: 6]
- */
-export interface RuntimeLayer {
-  /**
-   * Descriptive name for the runtime layer. This is only used for the runtime
-   * :http:get:`/runtime` output.
-   */
-  'name'?: (string);
-  /**
-   * :ref:`Static runtime <config_runtime_bootstrap>` layer.
-   * This follows the :ref:`runtime protobuf JSON representation encoding
-   * <config_runtime_proto_json>`. Unlike static xDS resources, this static
-   * layer is overridable by later layers in the runtime virtual filesystem.
-   */
-  'static_layer'?: (_google_protobuf_Struct | null);
-  'disk_layer'?: (_envoy_config_bootstrap_v3_RuntimeLayer_DiskLayer | null);
-  'admin_layer'?: (_envoy_config_bootstrap_v3_RuntimeLayer_AdminLayer | null);
-  'rtds_layer'?: (_envoy_config_bootstrap_v3_RuntimeLayer_RtdsLayer | null);
-  'layer_specifier'?: "static_layer"|"disk_layer"|"admin_layer"|"rtds_layer";
-}
-
-/**
- * [#next-free-field: 6]
- */
-export interface RuntimeLayer__Output {
-  /**
-   * Descriptive name for the runtime layer. This is only used for the runtime
-   * :http:get:`/runtime` output.
-   */
-  'name': (string);
-  /**
-   * :ref:`Static runtime <config_runtime_bootstrap>` layer.
-   * This follows the :ref:`runtime protobuf JSON representation encoding
-   * <config_runtime_proto_json>`. Unlike static xDS resources, this static
-   * layer is overridable by later layers in the runtime virtual filesystem.
-   */
-  'static_layer'?: (_google_protobuf_Struct__Output | null);
-  'disk_layer'?: (_envoy_config_bootstrap_v3_RuntimeLayer_DiskLayer__Output | null);
-  'admin_layer'?: (_envoy_config_bootstrap_v3_RuntimeLayer_AdminLayer__Output | null);
-  'rtds_layer'?: (_envoy_config_bootstrap_v3_RuntimeLayer_RtdsLayer__Output | null);
-  'layer_specifier': "static_layer"|"disk_layer"|"admin_layer"|"rtds_layer";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Watchdog.ts b/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Watchdog.ts
deleted file mode 100644
index 8cd743b56..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Watchdog.ts
+++ /dev/null
@@ -1,141 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-import type { Duration as _google_protobuf_Duration, Duration__Output as _google_protobuf_Duration__Output } from '../../../../google/protobuf/Duration';
-import type { Percent as _envoy_type_v3_Percent, Percent__Output as _envoy_type_v3_Percent__Output } from '../../../../envoy/type/v3/Percent';
-import type { TypedExtensionConfig as _envoy_config_core_v3_TypedExtensionConfig, TypedExtensionConfig__Output as _envoy_config_core_v3_TypedExtensionConfig__Output } from '../../../../envoy/config/core/v3/TypedExtensionConfig';
-
-export interface _envoy_config_bootstrap_v3_Watchdog_WatchdogAction {
-  /**
-   * Extension specific configuration for the action.
-   */
-  'config'?: (_envoy_config_core_v3_TypedExtensionConfig | null);
-  'event'?: (_envoy_config_bootstrap_v3_Watchdog_WatchdogAction_WatchdogEvent | keyof typeof _envoy_config_bootstrap_v3_Watchdog_WatchdogAction_WatchdogEvent);
-}
-
-export interface _envoy_config_bootstrap_v3_Watchdog_WatchdogAction__Output {
-  /**
-   * Extension specific configuration for the action.
-   */
-  'config': (_envoy_config_core_v3_TypedExtensionConfig__Output | null);
-  'event': (keyof typeof _envoy_config_bootstrap_v3_Watchdog_WatchdogAction_WatchdogEvent);
-}
-
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-/**
- * The events are fired in this order: KILL, MULTIKILL, MEGAMISS, MISS.
- * Within an event type, actions execute in the order they are configured.
- * For KILL/MULTIKILL there is a default PANIC that will run after the
- * registered actions and kills the process if it wasn't already killed.
- * It might be useful to specify several debug actions, and possibly an
- * alternate FATAL action.
- */
-export enum _envoy_config_bootstrap_v3_Watchdog_WatchdogAction_WatchdogEvent {
-  UNKNOWN = 0,
-  KILL = 1,
-  MULTIKILL = 2,
-  MEGAMISS = 3,
-  MISS = 4,
-}
-
-/**
- * Envoy process watchdog configuration. When configured, this monitors for
- * nonresponsive threads and kills the process after the configured thresholds.
- * See the :ref:`watchdog documentation <operations_performance_watchdog>` for more information.
- * [#next-free-field: 8]
- */
-export interface Watchdog {
-  /**
-   * The duration after which Envoy counts a nonresponsive thread in the
-   * *watchdog_miss* statistic. If not specified the default is 200ms.
-   */
-  'miss_timeout'?: (_google_protobuf_Duration | null);
-  /**
-   * The duration after which Envoy counts a nonresponsive thread in the
-   * *watchdog_mega_miss* statistic. If not specified the default is
-   * 1000ms.
-   */
-  'megamiss_timeout'?: (_google_protobuf_Duration | null);
-  /**
-   * If a watched thread has been nonresponsive for this duration, assume a
-   * programming error and kill the entire Envoy process. Set to 0 to disable
-   * kill behavior. If not specified the default is 0 (disabled).
-   */
-  'kill_timeout'?: (_google_protobuf_Duration | null);
-  /**
-   * If max(2, ceil(registered_threads * Fraction(*multikill_threshold*)))
-   * threads have been nonresponsive for at least this duration kill the entire
-   * Envoy process. Set to 0 to disable this behavior. If not specified the
-   * default is 0 (disabled).
-   */
-  'multikill_timeout'?: (_google_protobuf_Duration | null);
-  /**
-   * Sets the threshold for *multikill_timeout* in terms of the percentage of
-   * nonresponsive threads required for the *multikill_timeout*.
-   * If not specified the default is 0.
-   */
-  'multikill_threshold'?: (_envoy_type_v3_Percent | null);
-  /**
-   * Defines the maximum jitter used to adjust the *kill_timeout* if *kill_timeout* is
-   * enabled. Enabling this feature would help to reduce risk of synchronized
-   * watchdog kill events across proxies due to external triggers. Set to 0 to
-   * disable. If not specified the default is 0 (disabled).
-   */
-  'max_kill_timeout_jitter'?: (_google_protobuf_Duration | null);
-  /**
-   * Register actions that will fire on given WatchDog events.
-   * See *WatchDogAction* for priority of events.
-   */
-  'actions'?: (_envoy_config_bootstrap_v3_Watchdog_WatchdogAction)[];
-}
-
-/**
- * Envoy process watchdog configuration. When configured, this monitors for
- * nonresponsive threads and kills the process after the configured thresholds.
- * See the :ref:`watchdog documentation <operations_performance_watchdog>` for more information.
- * [#next-free-field: 8]
- */
-export interface Watchdog__Output {
-  /**
-   * The duration after which Envoy counts a nonresponsive thread in the
-   * *watchdog_miss* statistic. If not specified the default is 200ms.
-   */
-  'miss_timeout': (_google_protobuf_Duration__Output | null);
-  /**
-   * The duration after which Envoy counts a nonresponsive thread in the
-   * *watchdog_mega_miss* statistic. If not specified the default is
-   * 1000ms.
-   */
-  'megamiss_timeout': (_google_protobuf_Duration__Output | null);
-  /**
-   * If a watched thread has been nonresponsive for this duration, assume a
-   * programming error and kill the entire Envoy process. Set to 0 to disable
-   * kill behavior. If not specified the default is 0 (disabled).
-   */
-  'kill_timeout': (_google_protobuf_Duration__Output | null);
-  /**
-   * If max(2, ceil(registered_threads * Fraction(*multikill_threshold*)))
-   * threads have been nonresponsive for at least this duration kill the entire
-   * Envoy process. Set to 0 to disable this behavior. If not specified the
-   * default is 0 (disabled).
-   */
-  'multikill_timeout': (_google_protobuf_Duration__Output | null);
-  /**
-   * Sets the threshold for *multikill_timeout* in terms of the percentage of
-   * nonresponsive threads required for the *multikill_timeout*.
-   * If not specified the default is 0.
-   */
-  'multikill_threshold': (_envoy_type_v3_Percent__Output | null);
-  /**
-   * Defines the maximum jitter used to adjust the *kill_timeout* if *kill_timeout* is
-   * enabled. Enabling this feature would help to reduce risk of synchronized
-   * watchdog kill events across proxies due to external triggers. Set to 0 to
-   * disable. If not specified the default is 0 (disabled).
-   */
-  'max_kill_timeout_jitter': (_google_protobuf_Duration__Output | null);
-  /**
-   * Register actions that will fire on given WatchDog events.
-   * See *WatchDogAction* for priority of events.
-   */
-  'actions': (_envoy_config_bootstrap_v3_Watchdog_WatchdogAction__Output)[];
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Watchdogs.ts b/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Watchdogs.ts
deleted file mode 100644
index b478615ea..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/bootstrap/v3/Watchdogs.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/bootstrap/v3/bootstrap.proto
-
-import type { Watchdog as _envoy_config_bootstrap_v3_Watchdog, Watchdog__Output as _envoy_config_bootstrap_v3_Watchdog__Output } from '../../../../envoy/config/bootstrap/v3/Watchdog';
-
-/**
- * Allows you to specify different watchdog configs for different subsystems.
- * This allows finer tuned policies for the watchdog. If a subsystem is omitted
- * the default values for that system will be used.
- */
-export interface Watchdogs {
-  /**
-   * Watchdog for the main thread.
-   */
-  'main_thread_watchdog'?: (_envoy_config_bootstrap_v3_Watchdog | null);
-  /**
-   * Watchdog for the worker threads.
-   */
-  'worker_watchdog'?: (_envoy_config_bootstrap_v3_Watchdog | null);
-}
-
-/**
- * Allows you to specify different watchdog configs for different subsystems.
- * This allows finer tuned policies for the watchdog. If a subsystem is omitted
- * the default values for that system will be used.
- */
-export interface Watchdogs__Output {
-  /**
-   * Watchdog for the main thread.
-   */
-  'main_thread_watchdog': (_envoy_config_bootstrap_v3_Watchdog__Output | null);
-  /**
-   * Watchdog for the worker threads.
-   */
-  'worker_watchdog': (_envoy_config_bootstrap_v3_Watchdog__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/CircuitBreakers.ts b/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/CircuitBreakers.ts
index 4a8a4be36..61f473134 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/CircuitBreakers.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/CircuitBreakers.ts
@@ -1,6 +1,6 @@
 // Original file: deps/envoy-api/envoy/config/cluster/v3/circuit_breaker.proto
 
-import type { RoutingPriority as _envoy_config_core_v3_RoutingPriority } from '../../../../envoy/config/core/v3/RoutingPriority';
+import type { RoutingPriority as _envoy_config_core_v3_RoutingPriority, RoutingPriority__Output as _envoy_config_core_v3_RoutingPriority__Output } from '../../../../envoy/config/core/v3/RoutingPriority';
 import type { UInt32Value as _google_protobuf_UInt32Value, UInt32Value__Output as _google_protobuf_UInt32Value__Output } from '../../../../google/protobuf/UInt32Value';
 import type { Percent as _envoy_type_v3_Percent, Percent__Output as _envoy_type_v3_Percent__Output } from '../../../../envoy/type/v3/Percent';
 
@@ -50,7 +50,7 @@ export interface _envoy_config_cluster_v3_CircuitBreakers_Thresholds {
    * The :ref:`RoutingPriority<envoy_v3_api_enum_config.core.v3.RoutingPriority>`
    * the specified CircuitBreaker settings apply to.
    */
-  'priority'?: (_envoy_config_core_v3_RoutingPriority | keyof typeof _envoy_config_core_v3_RoutingPriority);
+  'priority'?: (_envoy_config_core_v3_RoutingPriority);
   /**
    * The maximum number of connections that Envoy will make to the upstream
    * cluster. If not specified, the default is 1024.
@@ -114,7 +114,7 @@ export interface _envoy_config_cluster_v3_CircuitBreakers_Thresholds__Output {
    * The :ref:`RoutingPriority<envoy_v3_api_enum_config.core.v3.RoutingPriority>`
    * the specified CircuitBreaker settings apply to.
    */
-  'priority': (keyof typeof _envoy_config_core_v3_RoutingPriority);
+  'priority': (_envoy_config_core_v3_RoutingPriority__Output);
   /**
    * The maximum number of connections that Envoy will make to the upstream
    * cluster. If not specified, the default is 1024.
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/Cluster.ts b/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/Cluster.ts
index be30d8212..8cab36301 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/Cluster.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/Cluster.ts
@@ -29,22 +29,37 @@ import type { Percent as _envoy_type_v3_Percent, Percent__Output as _envoy_type_
 import type { UInt64Value as _google_protobuf_UInt64Value, UInt64Value__Output as _google_protobuf_UInt64Value__Output } from '../../../../google/protobuf/UInt64Value';
 import type { HealthStatusSet as _envoy_config_core_v3_HealthStatusSet, HealthStatusSet__Output as _envoy_config_core_v3_HealthStatusSet__Output } from '../../../../envoy/config/core/v3/HealthStatusSet';
 import type { DoubleValue as _google_protobuf_DoubleValue, DoubleValue__Output as _google_protobuf_DoubleValue__Output } from '../../../../google/protobuf/DoubleValue';
-import type { Long } from '@grpc/proto-loader';
 
 // Original file: deps/envoy-api/envoy/config/cluster/v3/cluster.proto
 
-export enum _envoy_config_cluster_v3_Cluster_ClusterProtocolSelection {
+export const _envoy_config_cluster_v3_Cluster_ClusterProtocolSelection = {
   /**
    * Cluster can only operate on one of the possible upstream protocols (HTTP1.1, HTTP2).
    * If :ref:`http2_protocol_options <envoy_v3_api_field_config.cluster.v3.Cluster.http2_protocol_options>` are
    * present, HTTP2 will be used, otherwise HTTP1.1 will be used.
    */
-  USE_CONFIGURED_PROTOCOL = 0,
+  USE_CONFIGURED_PROTOCOL: 'USE_CONFIGURED_PROTOCOL',
   /**
    * Use HTTP1.1 or HTTP2, depending on which one is used on the downstream connection.
    */
-  USE_DOWNSTREAM_PROTOCOL = 1,
-}
+  USE_DOWNSTREAM_PROTOCOL: 'USE_DOWNSTREAM_PROTOCOL',
+} as const;
+
+export type _envoy_config_cluster_v3_Cluster_ClusterProtocolSelection =
+  /**
+   * Cluster can only operate on one of the possible upstream protocols (HTTP1.1, HTTP2).
+   * If :ref:`http2_protocol_options <envoy_v3_api_field_config.cluster.v3.Cluster.http2_protocol_options>` are
+   * present, HTTP2 will be used, otherwise HTTP1.1 will be used.
+   */
+  | 'USE_CONFIGURED_PROTOCOL'
+  | 0
+  /**
+   * Use HTTP1.1 or HTTP2, depending on which one is used on the downstream connection.
+   */
+  | 'USE_DOWNSTREAM_PROTOCOL'
+  | 1
+
+export type _envoy_config_cluster_v3_Cluster_ClusterProtocolSelection__Output = typeof _envoy_config_cluster_v3_Cluster_ClusterProtocolSelection[keyof typeof _envoy_config_cluster_v3_Cluster_ClusterProtocolSelection]
 
 /**
  * Common configuration for all load balancer implementations.
@@ -268,36 +283,81 @@ export interface _envoy_config_cluster_v3_Cluster_CustomClusterType__Output {
  * Refer to :ref:`service discovery type <arch_overview_service_discovery_types>`
  * for an explanation on each type.
  */
-export enum _envoy_config_cluster_v3_Cluster_DiscoveryType {
+export const _envoy_config_cluster_v3_Cluster_DiscoveryType = {
   /**
    * Refer to the :ref:`static discovery type<arch_overview_service_discovery_types_static>`
    * for an explanation.
    */
-  STATIC = 0,
+  STATIC: 'STATIC',
   /**
    * Refer to the :ref:`strict DNS discovery
    * type<arch_overview_service_discovery_types_strict_dns>`
    * for an explanation.
    */
-  STRICT_DNS = 1,
+  STRICT_DNS: 'STRICT_DNS',
   /**
    * Refer to the :ref:`logical DNS discovery
    * type<arch_overview_service_discovery_types_logical_dns>`
    * for an explanation.
    */
-  LOGICAL_DNS = 2,
+  LOGICAL_DNS: 'LOGICAL_DNS',
   /**
    * Refer to the :ref:`service discovery type<arch_overview_service_discovery_types_eds>`
    * for an explanation.
    */
-  EDS = 3,
+  EDS: 'EDS',
   /**
    * Refer to the :ref:`original destination discovery
    * type<arch_overview_service_discovery_types_original_destination>`
    * for an explanation.
    */
-  ORIGINAL_DST = 4,
-}
+  ORIGINAL_DST: 'ORIGINAL_DST',
+} as const;
+
+/**
+ * Refer to :ref:`service discovery type <arch_overview_service_discovery_types>`
+ * for an explanation on each type.
+ */
+export type _envoy_config_cluster_v3_Cluster_DiscoveryType =
+  /**
+   * Refer to the :ref:`static discovery type<arch_overview_service_discovery_types_static>`
+   * for an explanation.
+   */
+  | 'STATIC'
+  | 0
+  /**
+   * Refer to the :ref:`strict DNS discovery
+   * type<arch_overview_service_discovery_types_strict_dns>`
+   * for an explanation.
+   */
+  | 'STRICT_DNS'
+  | 1
+  /**
+   * Refer to the :ref:`logical DNS discovery
+   * type<arch_overview_service_discovery_types_logical_dns>`
+   * for an explanation.
+   */
+  | 'LOGICAL_DNS'
+  | 2
+  /**
+   * Refer to the :ref:`service discovery type<arch_overview_service_discovery_types_eds>`
+   * for an explanation.
+   */
+  | 'EDS'
+  | 3
+  /**
+   * Refer to the :ref:`original destination discovery
+   * type<arch_overview_service_discovery_types_original_destination>`
+   * for an explanation.
+   */
+  | 'ORIGINAL_DST'
+  | 4
+
+/**
+ * Refer to :ref:`service discovery type <arch_overview_service_discovery_types>`
+ * for an explanation on each type.
+ */
+export type _envoy_config_cluster_v3_Cluster_DiscoveryType__Output = typeof _envoy_config_cluster_v3_Cluster_DiscoveryType[keyof typeof _envoy_config_cluster_v3_Cluster_DiscoveryType]
 
 // Original file: deps/envoy-api/envoy/config/cluster/v3/cluster.proto
 
@@ -324,13 +384,73 @@ export enum _envoy_config_cluster_v3_Cluster_DiscoveryType {
  * ignored.
  * [#next-major-version: deprecate AUTO in favor of a V6_PREFERRED option.]
  */
-export enum _envoy_config_cluster_v3_Cluster_DnsLookupFamily {
-  AUTO = 0,
-  V4_ONLY = 1,
-  V6_ONLY = 2,
-  V4_PREFERRED = 3,
-  ALL = 4,
-}
+export const _envoy_config_cluster_v3_Cluster_DnsLookupFamily = {
+  AUTO: 'AUTO',
+  V4_ONLY: 'V4_ONLY',
+  V6_ONLY: 'V6_ONLY',
+  V4_PREFERRED: 'V4_PREFERRED',
+  ALL: 'ALL',
+} as const;
+
+/**
+ * When V4_ONLY is selected, the DNS resolver will only perform a lookup for
+ * addresses in the IPv4 family. If V6_ONLY is selected, the DNS resolver will
+ * only perform a lookup for addresses in the IPv6 family. If AUTO is
+ * specified, the DNS resolver will first perform a lookup for addresses in
+ * the IPv6 family and fallback to a lookup for addresses in the IPv4 family.
+ * This is semantically equivalent to a non-existent V6_PREFERRED option.
+ * AUTO is a legacy name that is more opaque than
+ * necessary and will be deprecated in favor of V6_PREFERRED in a future major version of the API.
+ * If V4_PREFERRED is specified, the DNS resolver will first perform a lookup for addresses in the
+ * IPv4 family and fallback to a lookup for addresses in the IPv6 family. i.e., the callback
+ * target will only get v6 addresses if there were NO v4 addresses to return.
+ * If ALL is specified, the DNS resolver will perform a lookup for both IPv4 and IPv6 families,
+ * and return all resolved addresses. When this is used, Happy Eyeballs will be enabled for
+ * upstream connections. Refer to :ref:`Happy Eyeballs Support <arch_overview_happy_eyeballs>`
+ * for more information.
+ * For cluster types other than
+ * :ref:`STRICT_DNS<envoy_v3_api_enum_value_config.cluster.v3.Cluster.DiscoveryType.STRICT_DNS>` and
+ * :ref:`LOGICAL_DNS<envoy_v3_api_enum_value_config.cluster.v3.Cluster.DiscoveryType.LOGICAL_DNS>`,
+ * this setting is
+ * ignored.
+ * [#next-major-version: deprecate AUTO in favor of a V6_PREFERRED option.]
+ */
+export type _envoy_config_cluster_v3_Cluster_DnsLookupFamily =
+  | 'AUTO'
+  | 0
+  | 'V4_ONLY'
+  | 1
+  | 'V6_ONLY'
+  | 2
+  | 'V4_PREFERRED'
+  | 3
+  | 'ALL'
+  | 4
+
+/**
+ * When V4_ONLY is selected, the DNS resolver will only perform a lookup for
+ * addresses in the IPv4 family. If V6_ONLY is selected, the DNS resolver will
+ * only perform a lookup for addresses in the IPv6 family. If AUTO is
+ * specified, the DNS resolver will first perform a lookup for addresses in
+ * the IPv6 family and fallback to a lookup for addresses in the IPv4 family.
+ * This is semantically equivalent to a non-existent V6_PREFERRED option.
+ * AUTO is a legacy name that is more opaque than
+ * necessary and will be deprecated in favor of V6_PREFERRED in a future major version of the API.
+ * If V4_PREFERRED is specified, the DNS resolver will first perform a lookup for addresses in the
+ * IPv4 family and fallback to a lookup for addresses in the IPv6 family. i.e., the callback
+ * target will only get v6 addresses if there were NO v4 addresses to return.
+ * If ALL is specified, the DNS resolver will perform a lookup for both IPv4 and IPv6 families,
+ * and return all resolved addresses. When this is used, Happy Eyeballs will be enabled for
+ * upstream connections. Refer to :ref:`Happy Eyeballs Support <arch_overview_happy_eyeballs>`
+ * for more information.
+ * For cluster types other than
+ * :ref:`STRICT_DNS<envoy_v3_api_enum_value_config.cluster.v3.Cluster.DiscoveryType.STRICT_DNS>` and
+ * :ref:`LOGICAL_DNS<envoy_v3_api_enum_value_config.cluster.v3.Cluster.DiscoveryType.LOGICAL_DNS>`,
+ * this setting is
+ * ignored.
+ * [#next-major-version: deprecate AUTO in favor of a V6_PREFERRED option.]
+ */
+export type _envoy_config_cluster_v3_Cluster_DnsLookupFamily__Output = typeof _envoy_config_cluster_v3_Cluster_DnsLookupFamily[keyof typeof _envoy_config_cluster_v3_Cluster_DnsLookupFamily]
 
 /**
  * Only valid when discovery type is EDS.
@@ -369,18 +489,40 @@ export interface _envoy_config_cluster_v3_Cluster_EdsClusterConfig__Output {
 /**
  * The hash function used to hash hosts onto the ketama ring.
  */
-export enum _envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction {
+export const _envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction = {
   /**
    * Use `xxHash <https://github.com/Cyan4973/xxHash>`_, this is the default hash function.
    */
-  XX_HASH = 0,
+  XX_HASH: 'XX_HASH',
   /**
    * Use `MurmurHash2 <https://sites.google.com/site/murmurhash/>`_, this is compatible with
    * std:hash<string> in GNU libstdc++ 3.4.20 or above. This is typically the case when compiled
    * on Linux and not macOS.
    */
-  MURMUR_HASH_2 = 1,
-}
+  MURMUR_HASH_2: 'MURMUR_HASH_2',
+} as const;
+
+/**
+ * The hash function used to hash hosts onto the ketama ring.
+ */
+export type _envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction =
+  /**
+   * Use `xxHash <https://github.com/Cyan4973/xxHash>`_, this is the default hash function.
+   */
+  | 'XX_HASH'
+  | 0
+  /**
+   * Use `MurmurHash2 <https://sites.google.com/site/murmurhash/>`_, this is compatible with
+   * std:hash<string> in GNU libstdc++ 3.4.20 or above. This is typically the case when compiled
+   * on Linux and not macOS.
+   */
+  | 'MURMUR_HASH_2'
+  | 1
+
+/**
+ * The hash function used to hash hosts onto the ketama ring.
+ */
+export type _envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction__Output = typeof _envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction[keyof typeof _envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction]
 
 // Original file: deps/envoy-api/envoy/config/cluster/v3/cluster.proto
 
@@ -388,42 +530,42 @@ export enum _envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction {
  * Refer to :ref:`load balancer type <arch_overview_load_balancing_types>` architecture
  * overview section for information on each type.
  */
-export enum _envoy_config_cluster_v3_Cluster_LbPolicy {
+export const _envoy_config_cluster_v3_Cluster_LbPolicy = {
   /**
    * Refer to the :ref:`round robin load balancing
    * policy<arch_overview_load_balancing_types_round_robin>`
    * for an explanation.
    */
-  ROUND_ROBIN = 0,
+  ROUND_ROBIN: 'ROUND_ROBIN',
   /**
    * Refer to the :ref:`least request load balancing
    * policy<arch_overview_load_balancing_types_least_request>`
    * for an explanation.
    */
-  LEAST_REQUEST = 1,
+  LEAST_REQUEST: 'LEAST_REQUEST',
   /**
    * Refer to the :ref:`ring hash load balancing
    * policy<arch_overview_load_balancing_types_ring_hash>`
    * for an explanation.
    */
-  RING_HASH = 2,
+  RING_HASH: 'RING_HASH',
   /**
    * Refer to the :ref:`random load balancing
    * policy<arch_overview_load_balancing_types_random>`
    * for an explanation.
    */
-  RANDOM = 3,
+  RANDOM: 'RANDOM',
   /**
    * Refer to the :ref:`Maglev load balancing policy<arch_overview_load_balancing_types_maglev>`
    * for an explanation.
    */
-  MAGLEV = 5,
+  MAGLEV: 'MAGLEV',
   /**
    * This load balancer type must be specified if the configured cluster provides a cluster
    * specific load balancer. Consult the configured cluster's documentation for whether to set
    * this option or not.
    */
-  CLUSTER_PROVIDED = 6,
+  CLUSTER_PROVIDED: 'CLUSTER_PROVIDED',
   /**
    * Use the new :ref:`load_balancing_policy
    * <envoy_v3_api_field_config.cluster.v3.Cluster.load_balancing_policy>` field to determine the LB policy.
@@ -431,8 +573,70 @@ export enum _envoy_config_cluster_v3_Cluster_LbPolicy {
    * <envoy_v3_api_field_config.cluster.v3.Cluster.load_balancing_policy>` field without
    * setting any value in :ref:`lb_policy<envoy_v3_api_field_config.cluster.v3.Cluster.lb_policy>`.
    */
-  LOAD_BALANCING_POLICY_CONFIG = 7,
-}
+  LOAD_BALANCING_POLICY_CONFIG: 'LOAD_BALANCING_POLICY_CONFIG',
+} as const;
+
+/**
+ * Refer to :ref:`load balancer type <arch_overview_load_balancing_types>` architecture
+ * overview section for information on each type.
+ */
+export type _envoy_config_cluster_v3_Cluster_LbPolicy =
+  /**
+   * Refer to the :ref:`round robin load balancing
+   * policy<arch_overview_load_balancing_types_round_robin>`
+   * for an explanation.
+   */
+  | 'ROUND_ROBIN'
+  | 0
+  /**
+   * Refer to the :ref:`least request load balancing
+   * policy<arch_overview_load_balancing_types_least_request>`
+   * for an explanation.
+   */
+  | 'LEAST_REQUEST'
+  | 1
+  /**
+   * Refer to the :ref:`ring hash load balancing
+   * policy<arch_overview_load_balancing_types_ring_hash>`
+   * for an explanation.
+   */
+  | 'RING_HASH'
+  | 2
+  /**
+   * Refer to the :ref:`random load balancing
+   * policy<arch_overview_load_balancing_types_random>`
+   * for an explanation.
+   */
+  | 'RANDOM'
+  | 3
+  /**
+   * Refer to the :ref:`Maglev load balancing policy<arch_overview_load_balancing_types_maglev>`
+   * for an explanation.
+   */
+  | 'MAGLEV'
+  | 5
+  /**
+   * This load balancer type must be specified if the configured cluster provides a cluster
+   * specific load balancer. Consult the configured cluster's documentation for whether to set
+   * this option or not.
+   */
+  | 'CLUSTER_PROVIDED'
+  | 6
+  /**
+   * Use the new :ref:`load_balancing_policy
+   * <envoy_v3_api_field_config.cluster.v3.Cluster.load_balancing_policy>` field to determine the LB policy.
+   * This has been deprecated in favor of using the :ref:`load_balancing_policy
+   * <envoy_v3_api_field_config.cluster.v3.Cluster.load_balancing_policy>` field without
+   * setting any value in :ref:`lb_policy<envoy_v3_api_field_config.cluster.v3.Cluster.lb_policy>`.
+   */
+  | 'LOAD_BALANCING_POLICY_CONFIG'
+  | 7
+
+/**
+ * Refer to :ref:`load balancer type <arch_overview_load_balancing_types>` architecture
+ * overview section for information on each type.
+ */
+export type _envoy_config_cluster_v3_Cluster_LbPolicy__Output = typeof _envoy_config_cluster_v3_Cluster_LbPolicy[keyof typeof _envoy_config_cluster_v3_Cluster_LbPolicy]
 
 /**
  * Optionally divide the endpoints in this cluster into subsets defined by
@@ -445,7 +649,7 @@ export interface _envoy_config_cluster_v3_Cluster_LbSubsetConfig {
    * metadata. The value defaults to
    * :ref:`NO_FALLBACK<envoy_v3_api_enum_value_config.cluster.v3.Cluster.LbSubsetConfig.LbSubsetFallbackPolicy.NO_FALLBACK>`.
    */
-  'fallback_policy'?: (_envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy | keyof typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy);
+  'fallback_policy'?: (_envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy);
   /**
    * Specifies the default subset of endpoints used during fallback if
    * fallback_policy is
@@ -518,7 +722,7 @@ export interface _envoy_config_cluster_v3_Cluster_LbSubsetConfig {
    * The value defaults to
    * :ref:`METADATA_NO_FALLBACK<envoy_v3_api_enum_value_config.cluster.v3.Cluster.LbSubsetConfig.LbSubsetMetadataFallbackPolicy.METADATA_NO_FALLBACK>`.
    */
-  'metadata_fallback_policy'?: (_envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy | keyof typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy);
+  'metadata_fallback_policy'?: (_envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy);
 }
 
 /**
@@ -532,7 +736,7 @@ export interface _envoy_config_cluster_v3_Cluster_LbSubsetConfig__Output {
    * metadata. The value defaults to
    * :ref:`NO_FALLBACK<envoy_v3_api_enum_value_config.cluster.v3.Cluster.LbSubsetConfig.LbSubsetFallbackPolicy.NO_FALLBACK>`.
    */
-  'fallback_policy': (keyof typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy);
+  'fallback_policy': (_envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy__Output);
   /**
    * Specifies the default subset of endpoints used during fallback if
    * fallback_policy is
@@ -605,7 +809,7 @@ export interface _envoy_config_cluster_v3_Cluster_LbSubsetConfig__Output {
    * The value defaults to
    * :ref:`METADATA_NO_FALLBACK<envoy_v3_api_enum_value_config.cluster.v3.Cluster.LbSubsetConfig.LbSubsetMetadataFallbackPolicy.METADATA_NO_FALLBACK>`.
    */
-  'metadata_fallback_policy': (keyof typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy);
+  'metadata_fallback_policy': (_envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy__Output);
 }
 
 // Original file: deps/envoy-api/envoy/config/cluster/v3/cluster.proto
@@ -617,19 +821,43 @@ export interface _envoy_config_cluster_v3_Cluster_LbSubsetConfig__Output {
  * etc). If DEFAULT_SUBSET is selected, load balancing is performed over the
  * endpoints matching the values from the default_subset field.
  */
-export enum _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy {
-  NO_FALLBACK = 0,
-  ANY_ENDPOINT = 1,
-  DEFAULT_SUBSET = 2,
-}
+export const _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy = {
+  NO_FALLBACK: 'NO_FALLBACK',
+  ANY_ENDPOINT: 'ANY_ENDPOINT',
+  DEFAULT_SUBSET: 'DEFAULT_SUBSET',
+} as const;
+
+/**
+ * If NO_FALLBACK is selected, a result
+ * equivalent to no healthy hosts is reported. If ANY_ENDPOINT is selected,
+ * any cluster endpoint may be returned (subject to policy, health checks,
+ * etc). If DEFAULT_SUBSET is selected, load balancing is performed over the
+ * endpoints matching the values from the default_subset field.
+ */
+export type _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy =
+  | 'NO_FALLBACK'
+  | 0
+  | 'ANY_ENDPOINT'
+  | 1
+  | 'DEFAULT_SUBSET'
+  | 2
+
+/**
+ * If NO_FALLBACK is selected, a result
+ * equivalent to no healthy hosts is reported. If ANY_ENDPOINT is selected,
+ * any cluster endpoint may be returned (subject to policy, health checks,
+ * etc). If DEFAULT_SUBSET is selected, load balancing is performed over the
+ * endpoints matching the values from the default_subset field.
+ */
+export type _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy__Output = typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy[keyof typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetFallbackPolicy]
 
 // Original file: deps/envoy-api/envoy/config/cluster/v3/cluster.proto
 
-export enum _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy {
+export const _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy = {
   /**
    * No fallback. Route metadata will be used as-is.
    */
-  METADATA_NO_FALLBACK = 0,
+  METADATA_NO_FALLBACK: 'METADATA_NO_FALLBACK',
   /**
    * A special metadata key ``fallback_list`` will be used to provide variants of metadata to try.
    * Value of ``fallback_list`` key has to be a list. Every list element has to be a struct - it will
@@ -671,8 +899,60 @@ export enum _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFall
    * 
    * is used.
    */
-  FALLBACK_LIST = 1,
-}
+  FALLBACK_LIST: 'FALLBACK_LIST',
+} as const;
+
+export type _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy =
+  /**
+   * No fallback. Route metadata will be used as-is.
+   */
+  | 'METADATA_NO_FALLBACK'
+  | 0
+  /**
+   * A special metadata key ``fallback_list`` will be used to provide variants of metadata to try.
+   * Value of ``fallback_list`` key has to be a list. Every list element has to be a struct - it will
+   * be merged with route metadata, overriding keys that appear in both places.
+   * ``fallback_list`` entries will be used in order until a host is found.
+   * 
+   * ``fallback_list`` key itself is removed from metadata before subset load balancing is performed.
+   * 
+   * Example:
+   * 
+   * for metadata:
+   * 
+   * .. code-block:: yaml
+   * 
+   * version: 1.0
+   * fallback_list:
+   * - version: 2.0
+   * hardware: c64
+   * - hardware: c32
+   * - version: 3.0
+   * 
+   * at first, metadata:
+   * 
+   * .. code-block:: json
+   * 
+   * {"version": "2.0", "hardware": "c64"}
+   * 
+   * will be used for load balancing. If no host is found, metadata:
+   * 
+   * .. code-block:: json
+   * 
+   * {"version": "1.0", "hardware": "c32"}
+   * 
+   * is next to try. If it still results in no host, finally metadata:
+   * 
+   * .. code-block:: json
+   * 
+   * {"version": "3.0"}
+   * 
+   * is used.
+   */
+  | 'FALLBACK_LIST'
+  | 1
+
+export type _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy__Output = typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy[keyof typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetMetadataFallbackPolicy]
 
 /**
  * Specifications for subsets.
@@ -698,7 +978,7 @@ export interface _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelecto
    * The behavior used when no endpoint subset matches the selected route's
    * metadata.
    */
-  'fallback_policy'?: (_envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy | keyof typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy);
+  'fallback_policy'?: (_envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy);
   /**
    * Subset of
    * :ref:`keys<envoy_v3_api_field_config.cluster.v3.Cluster.LbSubsetConfig.LbSubsetSelector.keys>` used by
@@ -737,7 +1017,7 @@ export interface _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelecto
    * The behavior used when no endpoint subset matches the selected route's
    * metadata.
    */
-  'fallback_policy': (keyof typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy);
+  'fallback_policy': (_envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy__Output);
   /**
    * Subset of
    * :ref:`keys<envoy_v3_api_field_config.cluster.v3.Cluster.LbSubsetConfig.LbSubsetSelector.keys>` used by
@@ -757,25 +1037,25 @@ export interface _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelecto
 /**
  * Allows to override top level fallback policy per selector.
  */
-export enum _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy {
+export const _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy = {
   /**
    * If NOT_DEFINED top level config fallback policy is used instead.
    */
-  NOT_DEFINED = 0,
+  NOT_DEFINED: 'NOT_DEFINED',
   /**
    * If NO_FALLBACK is selected, a result equivalent to no healthy hosts is reported.
    */
-  NO_FALLBACK = 1,
+  NO_FALLBACK: 'NO_FALLBACK',
   /**
    * If ANY_ENDPOINT is selected, any cluster endpoint may be returned
    * (subject to policy, health checks, etc).
    */
-  ANY_ENDPOINT = 2,
+  ANY_ENDPOINT: 'ANY_ENDPOINT',
   /**
    * If DEFAULT_SUBSET is selected, load balancing is performed over the
    * endpoints matching the values from the default_subset field.
    */
-  DEFAULT_SUBSET = 3,
+  DEFAULT_SUBSET: 'DEFAULT_SUBSET',
   /**
    * If KEYS_SUBSET is selected, subset selector matching is performed again with metadata
    * keys reduced to
@@ -783,8 +1063,49 @@ export enum _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbS
    * It allows for a fallback to a different, less specific selector if some of the keys of
    * the selector are considered optional.
    */
-  KEYS_SUBSET = 4,
-}
+  KEYS_SUBSET: 'KEYS_SUBSET',
+} as const;
+
+/**
+ * Allows to override top level fallback policy per selector.
+ */
+export type _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy =
+  /**
+   * If NOT_DEFINED top level config fallback policy is used instead.
+   */
+  | 'NOT_DEFINED'
+  | 0
+  /**
+   * If NO_FALLBACK is selected, a result equivalent to no healthy hosts is reported.
+   */
+  | 'NO_FALLBACK'
+  | 1
+  /**
+   * If ANY_ENDPOINT is selected, any cluster endpoint may be returned
+   * (subject to policy, health checks, etc).
+   */
+  | 'ANY_ENDPOINT'
+  | 2
+  /**
+   * If DEFAULT_SUBSET is selected, load balancing is performed over the
+   * endpoints matching the values from the default_subset field.
+   */
+  | 'DEFAULT_SUBSET'
+  | 3
+  /**
+   * If KEYS_SUBSET is selected, subset selector matching is performed again with metadata
+   * keys reduced to
+   * :ref:`fallback_keys_subset<envoy_v3_api_field_config.cluster.v3.Cluster.LbSubsetConfig.LbSubsetSelector.fallback_keys_subset>`.
+   * It allows for a fallback to a different, less specific selector if some of the keys of
+   * the selector are considered optional.
+   */
+  | 'KEYS_SUBSET'
+  | 4
+
+/**
+ * Allows to override top level fallback policy per selector.
+ */
+export type _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy__Output = typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy[keyof typeof _envoy_config_cluster_v3_Cluster_LbSubsetConfig_LbSubsetSelector_LbSubsetSelectorFallbackPolicy]
 
 /**
  * Specific configuration for the LeastRequest load balancing policy.
@@ -1138,7 +1459,7 @@ export interface _envoy_config_cluster_v3_Cluster_RingHashLbConfig {
    * The hash function used to hash hosts onto the ketama ring. The value defaults to
    * :ref:`XX_HASH<envoy_v3_api_enum_value_config.cluster.v3.Cluster.RingHashLbConfig.HashFunction.XX_HASH>`.
    */
-  'hash_function'?: (_envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction | keyof typeof _envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction);
+  'hash_function'?: (_envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction);
   /**
    * Maximum hash ring size. Defaults to 8M entries, and limited to 8M entries, but can be lowered
    * to further constrain resource use. See also
@@ -1163,7 +1484,7 @@ export interface _envoy_config_cluster_v3_Cluster_RingHashLbConfig__Output {
    * The hash function used to hash hosts onto the ketama ring. The value defaults to
    * :ref:`XX_HASH<envoy_v3_api_enum_value_config.cluster.v3.Cluster.RingHashLbConfig.HashFunction.XX_HASH>`.
    */
-  'hash_function': (keyof typeof _envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction);
+  'hash_function': (_envoy_config_cluster_v3_Cluster_RingHashLbConfig_HashFunction__Output);
   /**
    * Maximum hash ring size. Defaults to 8M entries, and limited to 8M entries, but can be lowered
    * to further constrain resource use. See also
@@ -1383,7 +1704,7 @@ export interface Cluster {
    * The :ref:`service discovery type <arch_overview_service_discovery_types>`
    * to use for resolving the cluster.
    */
-  'type'?: (_envoy_config_cluster_v3_Cluster_DiscoveryType | keyof typeof _envoy_config_cluster_v3_Cluster_DiscoveryType);
+  'type'?: (_envoy_config_cluster_v3_Cluster_DiscoveryType);
   /**
    * Configuration to use for EDS updates for the Cluster.
    */
@@ -1402,7 +1723,7 @@ export interface Cluster {
    * The :ref:`load balancer type <arch_overview_load_balancing_types>` to use
    * when picking a host in the cluster.
    */
-  'lb_policy'?: (_envoy_config_cluster_v3_Cluster_LbPolicy | keyof typeof _envoy_config_cluster_v3_Cluster_LbPolicy);
+  'lb_policy'?: (_envoy_config_cluster_v3_Cluster_LbPolicy);
   /**
    * Optional :ref:`active health checking <arch_overview_health_checking>`
    * configuration for the cluster. If no
@@ -1418,6 +1739,7 @@ export interface Cluster {
    * 
    * .. attention::
    * This field has been deprecated in favor of the :ref:`max_requests_per_connection <envoy_v3_api_field_config.core.v3.HttpProtocolOptions.max_requests_per_connection>` field.
+   * @deprecated
    */
   'max_requests_per_connection'?: (_google_protobuf_UInt32Value | null);
   /**
@@ -1433,6 +1755,7 @@ export interface Cluster {
    * See :ref:`upstream_http_protocol_options
    * <envoy_v3_api_field_extensions.upstreams.http.v3.HttpProtocolOptions.upstream_http_protocol_options>`
    * for example usage.
+   * @deprecated
    */
   'http_protocol_options'?: (_envoy_config_core_v3_Http1ProtocolOptions | null);
   /**
@@ -1449,6 +1772,7 @@ export interface Cluster {
    * See :ref:`upstream_http_protocol_options
    * <envoy_v3_api_field_extensions.upstreams.http.v3.HttpProtocolOptions.upstream_http_protocol_options>`
    * for example usage.
+   * @deprecated
    */
   'http2_protocol_options'?: (_envoy_config_core_v3_Http2ProtocolOptions | null);
   /**
@@ -1468,7 +1792,7 @@ export interface Cluster {
    * value defaults to
    * :ref:`AUTO<envoy_v3_api_enum_value_config.cluster.v3.Cluster.DnsLookupFamily.AUTO>`.
    */
-  'dns_lookup_family'?: (_envoy_config_cluster_v3_Cluster_DnsLookupFamily | keyof typeof _envoy_config_cluster_v3_Cluster_DnsLookupFamily);
+  'dns_lookup_family'?: (_envoy_config_cluster_v3_Cluster_DnsLookupFamily);
   /**
    * If DNS resolvers are specified and the cluster type is either
    * :ref:`STRICT_DNS<envoy_v3_api_enum_value_config.cluster.v3.Cluster.DiscoveryType.STRICT_DNS>`,
@@ -1482,6 +1806,7 @@ export interface Cluster {
    * this setting is ignored.
    * This field is deprecated in favor of ``dns_resolution_config``
    * which aggregates all of the DNS resolver configuration in a single message.
+   * @deprecated
    */
   'dns_resolvers'?: (_envoy_config_core_v3_Address)[];
   /**
@@ -1543,8 +1868,9 @@ export interface Cluster {
    * <envoy_v3_api_msg_extensions.upstreams.http.v3.HttpProtocolOptions>` message.
    * http_protocol_options can be set via the cluster's
    * :ref:`extension_protocol_options<envoy_v3_api_field_config.cluster.v3.Cluster.typed_extension_protocol_options>`.
+   * @deprecated
    */
-  'protocol_selection'?: (_envoy_config_cluster_v3_Cluster_ClusterProtocolSelection | keyof typeof _envoy_config_cluster_v3_Cluster_ClusterProtocolSelection);
+  'protocol_selection'?: (_envoy_config_cluster_v3_Cluster_ClusterProtocolSelection);
   /**
    * Common configuration for all load balancer implementations.
    */
@@ -1570,6 +1896,7 @@ export interface Cluster {
    * See :ref:`upstream_http_protocol_options
    * <envoy_v3_api_field_extensions.upstreams.http.v3.HttpProtocolOptions.upstream_http_protocol_options>`
    * for example usage.
+   * @deprecated
    */
   'common_http_protocol_options'?: (_envoy_config_core_v3_HttpProtocolOptions | null);
   /**
@@ -1732,6 +2059,7 @@ export interface Cluster {
    * Always use TCP queries instead of UDP queries for DNS lookups.
    * This field is deprecated in favor of ``dns_resolution_config``
    * which aggregates all of the DNS resolver configuration in a single message.
+   * @deprecated
    */
   'use_tcp_for_dns_lookups'?: (boolean);
   /**
@@ -1745,6 +2073,7 @@ export interface Cluster {
    * See :ref:`upstream_http_protocol_options
    * <envoy_v3_api_field_extensions.upstreams.http.v3.HttpProtocolOptions.upstream_http_protocol_options>`
    * for example usage.
+   * @deprecated
    */
   'upstream_http_protocol_options'?: (_envoy_config_core_v3_UpstreamHttpProtocolOptions | null);
   /**
@@ -1758,6 +2087,7 @@ export interface Cluster {
    * 
    * This field has been deprecated in favor of ``timeout_budgets``, part of
    * :ref:`track_cluster_stats <envoy_v3_api_field_config.cluster.v3.Cluster.track_cluster_stats>`.
+   * @deprecated
    */
   'track_timeout_budgets'?: (boolean);
   /**
@@ -1802,6 +2132,7 @@ export interface Cluster {
    * DNS resolution configuration which includes the underlying dns resolver addresses and options.
    * This field is deprecated in favor of
    * :ref:`typed_dns_resolver_config <envoy_v3_api_field_config.cluster.v3.Cluster.typed_dns_resolver_config>`.
+   * @deprecated
    */
   'dns_resolution_config'?: (_envoy_config_core_v3_DnsResolutionConfig | null);
   /**
@@ -1862,7 +2193,7 @@ export interface Cluster__Output {
    * The :ref:`service discovery type <arch_overview_service_discovery_types>`
    * to use for resolving the cluster.
    */
-  'type'?: (keyof typeof _envoy_config_cluster_v3_Cluster_DiscoveryType);
+  'type'?: (_envoy_config_cluster_v3_Cluster_DiscoveryType__Output);
   /**
    * Configuration to use for EDS updates for the Cluster.
    */
@@ -1881,7 +2212,7 @@ export interface Cluster__Output {
    * The :ref:`load balancer type <arch_overview_load_balancing_types>` to use
    * when picking a host in the cluster.
    */
-  'lb_policy': (keyof typeof _envoy_config_cluster_v3_Cluster_LbPolicy);
+  'lb_policy': (_envoy_config_cluster_v3_Cluster_LbPolicy__Output);
   /**
    * Optional :ref:`active health checking <arch_overview_health_checking>`
    * configuration for the cluster. If no
@@ -1897,6 +2228,7 @@ export interface Cluster__Output {
    * 
    * .. attention::
    * This field has been deprecated in favor of the :ref:`max_requests_per_connection <envoy_v3_api_field_config.core.v3.HttpProtocolOptions.max_requests_per_connection>` field.
+   * @deprecated
    */
   'max_requests_per_connection': (_google_protobuf_UInt32Value__Output | null);
   /**
@@ -1912,6 +2244,7 @@ export interface Cluster__Output {
    * See :ref:`upstream_http_protocol_options
    * <envoy_v3_api_field_extensions.upstreams.http.v3.HttpProtocolOptions.upstream_http_protocol_options>`
    * for example usage.
+   * @deprecated
    */
   'http_protocol_options': (_envoy_config_core_v3_Http1ProtocolOptions__Output | null);
   /**
@@ -1928,6 +2261,7 @@ export interface Cluster__Output {
    * See :ref:`upstream_http_protocol_options
    * <envoy_v3_api_field_extensions.upstreams.http.v3.HttpProtocolOptions.upstream_http_protocol_options>`
    * for example usage.
+   * @deprecated
    */
   'http2_protocol_options': (_envoy_config_core_v3_Http2ProtocolOptions__Output | null);
   /**
@@ -1947,7 +2281,7 @@ export interface Cluster__Output {
    * value defaults to
    * :ref:`AUTO<envoy_v3_api_enum_value_config.cluster.v3.Cluster.DnsLookupFamily.AUTO>`.
    */
-  'dns_lookup_family': (keyof typeof _envoy_config_cluster_v3_Cluster_DnsLookupFamily);
+  'dns_lookup_family': (_envoy_config_cluster_v3_Cluster_DnsLookupFamily__Output);
   /**
    * If DNS resolvers are specified and the cluster type is either
    * :ref:`STRICT_DNS<envoy_v3_api_enum_value_config.cluster.v3.Cluster.DiscoveryType.STRICT_DNS>`,
@@ -1961,6 +2295,7 @@ export interface Cluster__Output {
    * this setting is ignored.
    * This field is deprecated in favor of ``dns_resolution_config``
    * which aggregates all of the DNS resolver configuration in a single message.
+   * @deprecated
    */
   'dns_resolvers': (_envoy_config_core_v3_Address__Output)[];
   /**
@@ -2022,8 +2357,9 @@ export interface Cluster__Output {
    * <envoy_v3_api_msg_extensions.upstreams.http.v3.HttpProtocolOptions>` message.
    * http_protocol_options can be set via the cluster's
    * :ref:`extension_protocol_options<envoy_v3_api_field_config.cluster.v3.Cluster.typed_extension_protocol_options>`.
+   * @deprecated
    */
-  'protocol_selection': (keyof typeof _envoy_config_cluster_v3_Cluster_ClusterProtocolSelection);
+  'protocol_selection': (_envoy_config_cluster_v3_Cluster_ClusterProtocolSelection__Output);
   /**
    * Common configuration for all load balancer implementations.
    */
@@ -2049,6 +2385,7 @@ export interface Cluster__Output {
    * See :ref:`upstream_http_protocol_options
    * <envoy_v3_api_field_extensions.upstreams.http.v3.HttpProtocolOptions.upstream_http_protocol_options>`
    * for example usage.
+   * @deprecated
    */
   'common_http_protocol_options': (_envoy_config_core_v3_HttpProtocolOptions__Output | null);
   /**
@@ -2211,6 +2548,7 @@ export interface Cluster__Output {
    * Always use TCP queries instead of UDP queries for DNS lookups.
    * This field is deprecated in favor of ``dns_resolution_config``
    * which aggregates all of the DNS resolver configuration in a single message.
+   * @deprecated
    */
   'use_tcp_for_dns_lookups': (boolean);
   /**
@@ -2224,6 +2562,7 @@ export interface Cluster__Output {
    * See :ref:`upstream_http_protocol_options
    * <envoy_v3_api_field_extensions.upstreams.http.v3.HttpProtocolOptions.upstream_http_protocol_options>`
    * for example usage.
+   * @deprecated
    */
   'upstream_http_protocol_options': (_envoy_config_core_v3_UpstreamHttpProtocolOptions__Output | null);
   /**
@@ -2237,6 +2576,7 @@ export interface Cluster__Output {
    * 
    * This field has been deprecated in favor of ``timeout_budgets``, part of
    * :ref:`track_cluster_stats <envoy_v3_api_field_config.cluster.v3.Cluster.track_cluster_stats>`.
+   * @deprecated
    */
   'track_timeout_budgets': (boolean);
   /**
@@ -2281,6 +2621,7 @@ export interface Cluster__Output {
    * DNS resolution configuration which includes the underlying dns resolver addresses and options.
    * This field is deprecated in favor of
    * :ref:`typed_dns_resolver_config <envoy_v3_api_field_config.cluster.v3.Cluster.typed_dns_resolver_config>`.
+   * @deprecated
    */
   'dns_resolution_config': (_envoy_config_core_v3_DnsResolutionConfig__Output | null);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/UpstreamBindConfig.ts b/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/UpstreamBindConfig.ts
deleted file mode 100644
index f2dbd0608..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/cluster/v3/UpstreamBindConfig.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/cluster/v3/cluster.proto
-
-import type { Address as _envoy_config_core_v3_Address, Address__Output as _envoy_config_core_v3_Address__Output } from '../../../../envoy/config/core/v3/Address';
-
-/**
- * An extensible structure containing the address Envoy should bind to when
- * establishing upstream connections.
- */
-export interface UpstreamBindConfig {
-  /**
-   * The address Envoy should bind to when establishing upstream connections.
-   */
-  'source_address'?: (_envoy_config_core_v3_Address | null);
-}
-
-/**
- * An extensible structure containing the address Envoy should bind to when
- * establishing upstream connections.
- */
-export interface UpstreamBindConfig__Output {
-  /**
-   * The address Envoy should bind to when establishing upstream connections.
-   */
-  'source_address': (_envoy_config_core_v3_Address__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ApiConfigSource.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ApiConfigSource.ts
index 691ab93ba..0a2f11bdf 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ApiConfigSource.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ApiConfigSource.ts
@@ -3,7 +3,7 @@
 import type { Duration as _google_protobuf_Duration, Duration__Output as _google_protobuf_Duration__Output } from '../../../../google/protobuf/Duration';
 import type { GrpcService as _envoy_config_core_v3_GrpcService, GrpcService__Output as _envoy_config_core_v3_GrpcService__Output } from '../../../../envoy/config/core/v3/GrpcService';
 import type { RateLimitSettings as _envoy_config_core_v3_RateLimitSettings, RateLimitSettings__Output as _envoy_config_core_v3_RateLimitSettings__Output } from '../../../../envoy/config/core/v3/RateLimitSettings';
-import type { ApiVersion as _envoy_config_core_v3_ApiVersion } from '../../../../envoy/config/core/v3/ApiVersion';
+import type { ApiVersion as _envoy_config_core_v3_ApiVersion, ApiVersion__Output as _envoy_config_core_v3_ApiVersion__Output } from '../../../../envoy/config/core/v3/ApiVersion';
 import type { TypedExtensionConfig as _envoy_config_core_v3_TypedExtensionConfig, TypedExtensionConfig__Output as _envoy_config_core_v3_TypedExtensionConfig__Output } from '../../../../envoy/config/core/v3/TypedExtensionConfig';
 
 // Original file: deps/envoy-api/envoy/config/core/v3/config_source.proto
@@ -11,41 +11,91 @@ import type { TypedExtensionConfig as _envoy_config_core_v3_TypedExtensionConfig
 /**
  * APIs may be fetched via either REST or gRPC.
  */
-export enum _envoy_config_core_v3_ApiConfigSource_ApiType {
+export const _envoy_config_core_v3_ApiConfigSource_ApiType = {
   /**
    * Ideally this would be 'reserved 0' but one can't reserve the default
    * value. Instead we throw an exception if this is ever used.
+   * @deprecated
    */
-  DEPRECATED_AND_UNAVAILABLE_DO_NOT_USE = 0,
+  DEPRECATED_AND_UNAVAILABLE_DO_NOT_USE: 'DEPRECATED_AND_UNAVAILABLE_DO_NOT_USE',
   /**
    * REST-JSON v2 API. The `canonical JSON encoding
    * <https://developers.google.com/protocol-buffers/docs/proto3#json>`_ for
    * the v2 protos is used.
    */
-  REST = 1,
+  REST: 'REST',
   /**
    * SotW gRPC service.
    */
-  GRPC = 2,
+  GRPC: 'GRPC',
   /**
    * Using the delta xDS gRPC service, i.e. DeltaDiscovery{Request,Response}
    * rather than Discovery{Request,Response}. Rather than sending Envoy the entire state
    * with every update, the xDS server only sends what has changed since the last update.
    */
-  DELTA_GRPC = 3,
+  DELTA_GRPC: 'DELTA_GRPC',
   /**
    * SotW xDS gRPC with ADS. All resources which resolve to this configuration source will be
    * multiplexed on a single connection to an ADS endpoint.
    * [#not-implemented-hide:]
    */
-  AGGREGATED_GRPC = 5,
+  AGGREGATED_GRPC: 'AGGREGATED_GRPC',
   /**
    * Delta xDS gRPC with ADS. All resources which resolve to this configuration source will be
    * multiplexed on a single connection to an ADS endpoint.
    * [#not-implemented-hide:]
    */
-  AGGREGATED_DELTA_GRPC = 6,
-}
+  AGGREGATED_DELTA_GRPC: 'AGGREGATED_DELTA_GRPC',
+} as const;
+
+/**
+ * APIs may be fetched via either REST or gRPC.
+ */
+export type _envoy_config_core_v3_ApiConfigSource_ApiType =
+  /**
+   * Ideally this would be 'reserved 0' but one can't reserve the default
+   * value. Instead we throw an exception if this is ever used.
+   */
+  | 'DEPRECATED_AND_UNAVAILABLE_DO_NOT_USE'
+  | 0
+  /**
+   * REST-JSON v2 API. The `canonical JSON encoding
+   * <https://developers.google.com/protocol-buffers/docs/proto3#json>`_ for
+   * the v2 protos is used.
+   */
+  | 'REST'
+  | 1
+  /**
+   * SotW gRPC service.
+   */
+  | 'GRPC'
+  | 2
+  /**
+   * Using the delta xDS gRPC service, i.e. DeltaDiscovery{Request,Response}
+   * rather than Discovery{Request,Response}. Rather than sending Envoy the entire state
+   * with every update, the xDS server only sends what has changed since the last update.
+   */
+  | 'DELTA_GRPC'
+  | 3
+  /**
+   * SotW xDS gRPC with ADS. All resources which resolve to this configuration source will be
+   * multiplexed on a single connection to an ADS endpoint.
+   * [#not-implemented-hide:]
+   */
+  | 'AGGREGATED_GRPC'
+  | 5
+  /**
+   * Delta xDS gRPC with ADS. All resources which resolve to this configuration source will be
+   * multiplexed on a single connection to an ADS endpoint.
+   * [#not-implemented-hide:]
+   */
+  | 'AGGREGATED_DELTA_GRPC'
+  | 6
+
+/**
+ * APIs may be fetched via either REST or gRPC.
+ */
+export type _envoy_config_core_v3_ApiConfigSource_ApiType__Output = typeof _envoy_config_core_v3_ApiConfigSource_ApiType[keyof typeof _envoy_config_core_v3_ApiConfigSource_ApiType]
 
 /**
  * API configuration source. This identifies the API type and cluster that Envoy
@@ -56,7 +106,7 @@ export interface ApiConfigSource {
   /**
    * API type (gRPC, REST, delta gRPC)
    */
-  'api_type'?: (_envoy_config_core_v3_ApiConfigSource_ApiType | keyof typeof _envoy_config_core_v3_ApiConfigSource_ApiType);
+  'api_type'?: (_envoy_config_core_v3_ApiConfigSource_ApiType);
   /**
    * Cluster names should be used only with REST. If > 1
    * cluster is defined, clusters will be cycled through if any kind of failure
@@ -94,7 +144,7 @@ export interface ApiConfigSource {
    * API version for xDS transport protocol. This describes the xDS gRPC/REST
    * endpoint and version of [Delta]DiscoveryRequest/Response used on the wire.
    */
-  'transport_api_version'?: (_envoy_config_core_v3_ApiVersion | keyof typeof _envoy_config_core_v3_ApiVersion);
+  'transport_api_version'?: (_envoy_config_core_v3_ApiVersion);
   /**
    * A list of config validators that will be executed when a new update is
    * received from the ApiConfigSource. Note that each validator handles a
@@ -117,7 +167,7 @@ export interface ApiConfigSource__Output {
   /**
    * API type (gRPC, REST, delta gRPC)
    */
-  'api_type': (keyof typeof _envoy_config_core_v3_ApiConfigSource_ApiType);
+  'api_type': (_envoy_config_core_v3_ApiConfigSource_ApiType__Output);
   /**
    * Cluster names should be used only with REST. If > 1
    * cluster is defined, clusters will be cycled through if any kind of failure
@@ -155,7 +205,7 @@ export interface ApiConfigSource__Output {
    * API version for xDS transport protocol. This describes the xDS gRPC/REST
    * endpoint and version of [Delta]DiscoveryRequest/Response used on the wire.
    */
-  'transport_api_version': (keyof typeof _envoy_config_core_v3_ApiVersion);
+  'transport_api_version': (_envoy_config_core_v3_ApiVersion__Output);
   /**
    * A list of config validators that will be executed when a new update is
    * received from the ApiConfigSource. Note that each validator handles a
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ApiVersion.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ApiVersion.ts
index b46f6ec43..d3bad5d4e 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ApiVersion.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ApiVersion.ts
@@ -4,19 +4,50 @@
  * xDS API and non-xDS services version. This is used to describe both resource and transport
  * protocol versions (in distinct configuration fields).
  */
-export enum ApiVersion {
+export const ApiVersion = {
   /**
    * When not specified, we assume v2, to ease migration to Envoy's stable API
    * versioning. If a client does not support v2 (e.g. due to deprecation), this
    * is an invalid value.
+   * @deprecated
    */
-  AUTO = 0,
+  AUTO: 'AUTO',
   /**
    * Use xDS v2 API.
+   * @deprecated
    */
-  V2 = 1,
+  V2: 'V2',
   /**
    * Use xDS v3 API.
    */
-  V3 = 2,
-}
+  V3: 'V3',
+} as const;
+
+/**
+ * xDS API and non-xDS services version. This is used to describe both resource and transport
+ * protocol versions (in distinct configuration fields).
+ */
+export type ApiVersion =
+  /**
+   * When not specified, we assume v2, to ease migration to Envoy's stable API
+   * versioning. If a client does not support v2 (e.g. due to deprecation), this
+   * is an invalid value.
+   */
+  | 'AUTO'
+  | 0
+  /**
+   * Use xDS v2 API.
+   */
+  | 'V2'
+  | 1
+  /**
+   * Use xDS v3 API.
+   */
+  | 'V3'
+  | 2
+
+/**
+ * xDS API and non-xDS services version. This is used to describe both resource and transport
+ * protocol versions (in distinct configuration fields).
+ */
+export type ApiVersion__Output = typeof ApiVersion[keyof typeof ApiVersion]
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/BindConfig.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/BindConfig.ts
index 733c609b1..54543facc 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/BindConfig.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/BindConfig.ts
@@ -31,6 +31,7 @@ export interface BindConfig {
   /**
    * Deprecated by
    * :ref:`extra_source_addresses <envoy_v3_api_field_config.core.v3.BindConfig.extra_source_addresses>`
+   * @deprecated
    */
   'additional_source_addresses'?: (_envoy_config_core_v3_SocketAddress)[];
   /**
@@ -72,6 +73,7 @@ export interface BindConfig__Output {
   /**
    * Deprecated by
    * :ref:`extra_source_addresses <envoy_v3_api_field_config.core.v3.BindConfig.extra_source_addresses>`
+   * @deprecated
    */
   'additional_source_addresses': (_envoy_config_core_v3_SocketAddress__Output)[];
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ConfigSource.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ConfigSource.ts
index 5438b6e7d..1b98848ef 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ConfigSource.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ConfigSource.ts
@@ -4,7 +4,7 @@ import type { ApiConfigSource as _envoy_config_core_v3_ApiConfigSource, ApiConfi
 import type { AggregatedConfigSource as _envoy_config_core_v3_AggregatedConfigSource, AggregatedConfigSource__Output as _envoy_config_core_v3_AggregatedConfigSource__Output } from '../../../../envoy/config/core/v3/AggregatedConfigSource';
 import type { Duration as _google_protobuf_Duration, Duration__Output as _google_protobuf_Duration__Output } from '../../../../google/protobuf/Duration';
 import type { SelfConfigSource as _envoy_config_core_v3_SelfConfigSource, SelfConfigSource__Output as _envoy_config_core_v3_SelfConfigSource__Output } from '../../../../envoy/config/core/v3/SelfConfigSource';
-import type { ApiVersion as _envoy_config_core_v3_ApiVersion } from '../../../../envoy/config/core/v3/ApiVersion';
+import type { ApiVersion as _envoy_config_core_v3_ApiVersion, ApiVersion__Output as _envoy_config_core_v3_ApiVersion__Output } from '../../../../envoy/config/core/v3/ApiVersion';
 import type { Authority as _xds_core_v3_Authority, Authority__Output as _xds_core_v3_Authority__Output } from '../../../../xds/core/v3/Authority';
 import type { PathConfigSource as _envoy_config_core_v3_PathConfigSource, PathConfigSource__Output as _envoy_config_core_v3_PathConfigSource__Output } from '../../../../envoy/config/core/v3/PathConfigSource';
 
@@ -20,6 +20,7 @@ import type { PathConfigSource as _envoy_config_core_v3_PathConfigSource, PathCo
 export interface ConfigSource {
   /**
    * Deprecated in favor of ``path_config_source``. Use that field instead.
+   * @deprecated
    */
   'path'?: (string);
   /**
@@ -60,7 +61,7 @@ export interface ConfigSource {
    * will request for resources and the resource type that the client will in
    * turn expect to be delivered.
    */
-  'resource_api_version'?: (_envoy_config_core_v3_ApiVersion | keyof typeof _envoy_config_core_v3_ApiVersion);
+  'resource_api_version'?: (_envoy_config_core_v3_ApiVersion);
   /**
    * Authorities that this config source may be used for. An authority specified in a xdstp:// URL
    * is resolved to a ``ConfigSource`` prior to configuration fetch. This field provides the
@@ -87,6 +88,7 @@ export interface ConfigSource {
 export interface ConfigSource__Output {
   /**
    * Deprecated in favor of ``path_config_source``. Use that field instead.
+   * @deprecated
    */
   'path'?: (string);
   /**
@@ -127,7 +129,7 @@ export interface ConfigSource__Output {
    * will request for resources and the resource type that the client will in
    * turn expect to be delivered.
    */
-  'resource_api_version': (keyof typeof _envoy_config_core_v3_ApiVersion);
+  'resource_api_version': (_envoy_config_core_v3_ApiVersion__Output);
   /**
    * Authorities that this config source may be used for. An authority specified in a xdstp:// URL
    * is resolved to a ``ConfigSource`` prior to configuration fetch. This field provides the
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Extension.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Extension.ts
index b25c15cce..dbbdb0cee 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Extension.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Extension.ts
@@ -24,6 +24,7 @@ export interface Extension {
    * [#not-implemented-hide:] Type descriptor of extension configuration proto.
    * [#comment:TODO(yanavlasov): Link to the doc with existing configuration protos.]
    * [#comment:TODO(yanavlasov): Add tests when PR #9391 lands.]
+   * @deprecated
    */
   'type_descriptor'?: (string);
   /**
@@ -64,6 +65,7 @@ export interface Extension__Output {
    * [#not-implemented-hide:] Type descriptor of extension configuration proto.
    * [#comment:TODO(yanavlasov): Link to the doc with existing configuration protos.]
    * [#comment:TODO(yanavlasov): Add tests when PR #9391 lands.]
+   * @deprecated
    */
   'type_descriptor': (string);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HeaderValueOption.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HeaderValueOption.ts
index efb656303..e7a0a8d87 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HeaderValueOption.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HeaderValueOption.ts
@@ -8,25 +8,55 @@ import type { BoolValue as _google_protobuf_BoolValue, BoolValue__Output as _goo
 /**
  * Describes the supported actions types for header append action.
  */
-export enum _envoy_config_core_v3_HeaderValueOption_HeaderAppendAction {
+export const _envoy_config_core_v3_HeaderValueOption_HeaderAppendAction = {
   /**
    * This action will append the specified value to the existing values if the header
    * already exists. If the header doesn't exist then this will add the header with
    * specified key and value.
    */
-  APPEND_IF_EXISTS_OR_ADD = 0,
+  APPEND_IF_EXISTS_OR_ADD: 'APPEND_IF_EXISTS_OR_ADD',
   /**
    * This action will add the header if it doesn't already exist. If the header
    * already exists then this will be a no-op.
    */
-  ADD_IF_ABSENT = 1,
+  ADD_IF_ABSENT: 'ADD_IF_ABSENT',
   /**
    * This action will overwrite the specified value by discarding any existing values if
    * the header already exists. If the header doesn't exist then this will add the header
    * with specified key and value.
    */
-  OVERWRITE_IF_EXISTS_OR_ADD = 2,
-}
+  OVERWRITE_IF_EXISTS_OR_ADD: 'OVERWRITE_IF_EXISTS_OR_ADD',
+} as const;
+
+/**
+ * Describes the supported actions types for header append action.
+ */
+export type _envoy_config_core_v3_HeaderValueOption_HeaderAppendAction =
+  /**
+   * This action will append the specified value to the existing values if the header
+   * already exists. If the header doesn't exist then this will add the header with
+   * specified key and value.
+   */
+  | 'APPEND_IF_EXISTS_OR_ADD'
+  | 0
+  /**
+   * This action will add the header if it doesn't already exist. If the header
+   * already exists then this will be a no-op.
+   */
+  | 'ADD_IF_ABSENT'
+  | 1
+  /**
+   * This action will overwrite the specified value by discarding any existing values if
+   * the header already exists. If the header doesn't exist then this will add the header
+   * with specified key and value.
+   */
+  | 'OVERWRITE_IF_EXISTS_OR_ADD'
+  | 2
+
+/**
+ * Describes the supported actions types for header append action.
+ */
+export type _envoy_config_core_v3_HeaderValueOption_HeaderAppendAction__Output = typeof _envoy_config_core_v3_HeaderValueOption_HeaderAppendAction[keyof typeof _envoy_config_core_v3_HeaderValueOption_HeaderAppendAction]
 
 /**
  * Header name/value pair plus option to control append behavior.
@@ -46,6 +76,7 @@ export interface HeaderValueOption {
    * The :ref:`external authorization service <envoy_v3_api_msg_service.auth.v3.CheckResponse>` and
    * :ref:`external processor service <envoy_v3_api_msg_service.ext_proc.v3.ProcessingResponse>` have
    * default value (``false``) for this field.
+   * @deprecated
    */
   'append'?: (_google_protobuf_BoolValue | null);
   /**
@@ -54,7 +85,7 @@ export interface HeaderValueOption {
    * Value defaults to :ref:`APPEND_IF_EXISTS_OR_ADD
    * <envoy_v3_api_enum_value_config.core.v3.HeaderValueOption.HeaderAppendAction.APPEND_IF_EXISTS_OR_ADD>`.
    */
-  'append_action'?: (_envoy_config_core_v3_HeaderValueOption_HeaderAppendAction | keyof typeof _envoy_config_core_v3_HeaderValueOption_HeaderAppendAction);
+  'append_action'?: (_envoy_config_core_v3_HeaderValueOption_HeaderAppendAction);
   /**
    * Is the header value allowed to be empty? If false (default), custom headers with empty values are dropped,
    * otherwise they are added.
@@ -80,6 +111,7 @@ export interface HeaderValueOption__Output {
    * The :ref:`external authorization service <envoy_v3_api_msg_service.auth.v3.CheckResponse>` and
    * :ref:`external processor service <envoy_v3_api_msg_service.ext_proc.v3.ProcessingResponse>` have
    * default value (``false``) for this field.
+   * @deprecated
    */
   'append': (_google_protobuf_BoolValue__Output | null);
   /**
@@ -88,7 +120,7 @@ export interface HeaderValueOption__Output {
    * Value defaults to :ref:`APPEND_IF_EXISTS_OR_ADD
    * <envoy_v3_api_enum_value_config.core.v3.HeaderValueOption.HeaderAppendAction.APPEND_IF_EXISTS_OR_ADD>`.
    */
-  'append_action': (keyof typeof _envoy_config_core_v3_HeaderValueOption_HeaderAppendAction);
+  'append_action': (_envoy_config_core_v3_HeaderValueOption_HeaderAppendAction__Output);
   /**
    * Is the header value allowed to be empty? If false (default), custom headers with empty values are dropped,
    * otherwise they are added.
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthCheck.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthCheck.ts
index e0638df7d..f6605412e 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthCheck.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthCheck.ts
@@ -9,11 +9,10 @@ import type { TypedExtensionConfig as _envoy_config_core_v3_TypedExtensionConfig
 import type { UInt64Value as _google_protobuf_UInt64Value, UInt64Value__Output as _google_protobuf_UInt64Value__Output } from '../../../../google/protobuf/UInt64Value';
 import type { HeaderValueOption as _envoy_config_core_v3_HeaderValueOption, HeaderValueOption__Output as _envoy_config_core_v3_HeaderValueOption__Output } from '../../../../envoy/config/core/v3/HeaderValueOption';
 import type { Int64Range as _envoy_type_v3_Int64Range, Int64Range__Output as _envoy_type_v3_Int64Range__Output } from '../../../../envoy/type/v3/Int64Range';
-import type { CodecClientType as _envoy_type_v3_CodecClientType } from '../../../../envoy/type/v3/CodecClientType';
+import type { CodecClientType as _envoy_type_v3_CodecClientType, CodecClientType__Output as _envoy_type_v3_CodecClientType__Output } from '../../../../envoy/type/v3/CodecClientType';
 import type { StringMatcher as _envoy_type_matcher_v3_StringMatcher, StringMatcher__Output as _envoy_type_matcher_v3_StringMatcher__Output } from '../../../../envoy/type/matcher/v3/StringMatcher';
-import type { RequestMethod as _envoy_config_core_v3_RequestMethod } from '../../../../envoy/config/core/v3/RequestMethod';
+import type { RequestMethod as _envoy_config_core_v3_RequestMethod, RequestMethod__Output as _envoy_config_core_v3_RequestMethod__Output } from '../../../../envoy/config/core/v3/RequestMethod';
 import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../../google/protobuf/Any';
-import type { Long } from '@grpc/proto-loader';
 
 /**
  * Custom health check.
@@ -183,7 +182,7 @@ export interface _envoy_config_core_v3_HealthCheck_HttpHealthCheck {
   /**
    * Use specified application protocol for health checks.
    */
-  'codec_client_type'?: (_envoy_type_v3_CodecClientType | keyof typeof _envoy_type_v3_CodecClientType);
+  'codec_client_type'?: (_envoy_type_v3_CodecClientType);
   /**
    * An optional service name parameter which is used to validate the identity of
    * the health checked cluster using a :ref:`StringMatcher
@@ -197,7 +196,7 @@ export interface _envoy_config_core_v3_HealthCheck_HttpHealthCheck {
    * CONNECT method is disallowed because it is not appropriate for health check request.
    * If a non-200 response is expected by the method, it needs to be set in :ref:`expected_statuses <envoy_v3_api_field_config.core.v3.HealthCheck.HttpHealthCheck.expected_statuses>`.
    */
-  'method'?: (_envoy_config_core_v3_RequestMethod | keyof typeof _envoy_config_core_v3_RequestMethod);
+  'method'?: (_envoy_config_core_v3_RequestMethod);
 }
 
 /**
@@ -272,7 +271,7 @@ export interface _envoy_config_core_v3_HealthCheck_HttpHealthCheck__Output {
   /**
    * Use specified application protocol for health checks.
    */
-  'codec_client_type': (keyof typeof _envoy_type_v3_CodecClientType);
+  'codec_client_type': (_envoy_type_v3_CodecClientType__Output);
   /**
    * An optional service name parameter which is used to validate the identity of
    * the health checked cluster using a :ref:`StringMatcher
@@ -286,7 +285,7 @@ export interface _envoy_config_core_v3_HealthCheck_HttpHealthCheck__Output {
    * CONNECT method is disallowed because it is not appropriate for health check request.
    * If a non-200 response is expected by the method, it needs to be set in :ref:`expected_statuses <envoy_v3_api_field_config.core.v3.HealthCheck.HttpHealthCheck.expected_statuses>`.
    */
-  'method': (keyof typeof _envoy_config_core_v3_RequestMethod);
+  'method': (_envoy_config_core_v3_RequestMethod__Output);
 }
 
 /**
@@ -497,6 +496,7 @@ export interface HealthCheck {
    * in the file sink extension.
    * 
    * Specifies the path to the :ref:`health check event log <arch_overview_health_check_logging>`.
+   * @deprecated
    */
   'event_log_path'?: (string);
   /**
@@ -687,6 +687,7 @@ export interface HealthCheck__Output {
    * in the file sink extension.
    * 
    * Specifies the path to the :ref:`health check event log <arch_overview_health_check_logging>`.
+   * @deprecated
    */
   'event_log_path': (string);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthStatus.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthStatus.ts
index 7d3d76569..54298f59b 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthStatus.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthStatus.ts
@@ -3,19 +3,19 @@
 /**
  * Endpoint health status.
  */
-export enum HealthStatus {
+export const HealthStatus = {
   /**
    * The health status is not known. This is interpreted by Envoy as ``HEALTHY``.
    */
-  UNKNOWN = 0,
+  UNKNOWN: 'UNKNOWN',
   /**
    * Healthy.
    */
-  HEALTHY = 1,
+  HEALTHY: 'HEALTHY',
   /**
    * Unhealthy.
    */
-  UNHEALTHY = 2,
+  UNHEALTHY: 'UNHEALTHY',
   /**
    * Connection draining in progress. E.g.,
    * `<https://aws.amazon.com/blogs/aws/elb-connection-draining-remove-instances-from-service-with-care/>`_
@@ -23,14 +23,59 @@ export enum HealthStatus {
    * `<https://cloud.google.com/compute/docs/load-balancing/enabling-connection-draining>`_.
    * This is interpreted by Envoy as ``UNHEALTHY``.
    */
-  DRAINING = 3,
+  DRAINING: 'DRAINING',
   /**
    * Health check timed out. This is part of HDS and is interpreted by Envoy as
    * ``UNHEALTHY``.
    */
-  TIMEOUT = 4,
+  TIMEOUT: 'TIMEOUT',
   /**
    * Degraded.
    */
-  DEGRADED = 5,
-}
+  DEGRADED: 'DEGRADED',
+} as const;
+
+/**
+ * Endpoint health status.
+ */
+export type HealthStatus =
+  /**
+   * The health status is not known. This is interpreted by Envoy as ``HEALTHY``.
+   */
+  | 'UNKNOWN'
+  | 0
+  /**
+   * Healthy.
+   */
+  | 'HEALTHY'
+  | 1
+  /**
+   * Unhealthy.
+   */
+  | 'UNHEALTHY'
+  | 2
+  /**
+   * Connection draining in progress. E.g.,
+   * `<https://aws.amazon.com/blogs/aws/elb-connection-draining-remove-instances-from-service-with-care/>`_
+   * or
+   * `<https://cloud.google.com/compute/docs/load-balancing/enabling-connection-draining>`_.
+   * This is interpreted by Envoy as ``UNHEALTHY``.
+   */
+  | 'DRAINING'
+  | 3
+  /**
+   * Health check timed out. This is part of HDS and is interpreted by Envoy as
+   * ``UNHEALTHY``.
+   */
+  | 'TIMEOUT'
+  | 4
+  /**
+   * Degraded.
+   */
+  | 'DEGRADED'
+  | 5
+
+/**
+ * Endpoint health status.
+ */
+export type HealthStatus__Output = typeof HealthStatus[keyof typeof HealthStatus]
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthStatusSet.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthStatusSet.ts
index c518192d7..c94bf049c 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthStatusSet.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HealthStatusSet.ts
@@ -1,17 +1,17 @@
 // Original file: deps/envoy-api/envoy/config/core/v3/health_check.proto
 
-import type { HealthStatus as _envoy_config_core_v3_HealthStatus } from '../../../../envoy/config/core/v3/HealthStatus';
+import type { HealthStatus as _envoy_config_core_v3_HealthStatus, HealthStatus__Output as _envoy_config_core_v3_HealthStatus__Output } from '../../../../envoy/config/core/v3/HealthStatus';
 
 export interface HealthStatusSet {
   /**
    * An order-independent set of health status.
    */
-  'statuses'?: (_envoy_config_core_v3_HealthStatus | keyof typeof _envoy_config_core_v3_HealthStatus)[];
+  'statuses'?: (_envoy_config_core_v3_HealthStatus)[];
 }
 
 export interface HealthStatusSet__Output {
   /**
    * An order-independent set of health status.
    */
-  'statuses': (keyof typeof _envoy_config_core_v3_HealthStatus)[];
+  'statuses': (_envoy_config_core_v3_HealthStatus__Output)[];
 }
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Http2ProtocolOptions.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Http2ProtocolOptions.ts
index cc22ce44c..9e0ae3d6e 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Http2ProtocolOptions.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Http2ProtocolOptions.ts
@@ -159,6 +159,7 @@ export interface Http2ProtocolOptions {
    * <envoy_v3_api_field_config.core.v3.Http2ProtocolOptions.override_stream_error_on_invalid_http_message>`
    * 
    * See `RFC7540, sec. 8.1 <https://tools.ietf.org/html/rfc7540#section-8.1>`_ for details.
+   * @deprecated
    */
   'stream_error_on_invalid_http_messaging'?: (boolean);
   /**
@@ -339,6 +340,7 @@ export interface Http2ProtocolOptions__Output {
    * <envoy_v3_api_field_config.core.v3.Http2ProtocolOptions.override_stream_error_on_invalid_http_message>`
    * 
    * See `RFC7540, sec. 8.1 <https://tools.ietf.org/html/rfc7540#section-8.1>`_ for details.
+   * @deprecated
    */
   'stream_error_on_invalid_http_messaging': (boolean);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HttpProtocolOptions.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HttpProtocolOptions.ts
index a3064110f..dfa800c3b 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HttpProtocolOptions.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/HttpProtocolOptions.ts
@@ -12,24 +12,61 @@ import type { UInt32Value as _google_protobuf_UInt32Value, UInt32Value__Output a
  * as a security measure due to systems that treat '_' and '-' as interchangeable. Envoy by default allows client request headers with underscore
  * characters.
  */
-export enum _envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction {
+export const _envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction = {
   /**
    * Allow headers with underscores. This is the default behavior.
    */
-  ALLOW = 0,
+  ALLOW: 'ALLOW',
   /**
    * Reject client request. HTTP/1 requests are rejected with the 400 status. HTTP/2 requests
    * end with the stream reset. The "httpN.requests_rejected_with_underscores_in_headers" counter
    * is incremented for each rejected request.
    */
-  REJECT_REQUEST = 1,
+  REJECT_REQUEST: 'REJECT_REQUEST',
   /**
    * Drop the client header with name containing underscores. The header is dropped before the filter chain is
    * invoked and as such filters will not see dropped headers. The
    * "httpN.dropped_headers_with_underscores" is incremented for each dropped header.
    */
-  DROP_HEADER = 2,
-}
+  DROP_HEADER: 'DROP_HEADER',
+} as const;
+
+/**
+ * Action to take when Envoy receives client request with header names containing underscore
+ * characters.
+ * Underscore character is allowed in header names by the RFC-7230 and this behavior is implemented
+ * as a security measure due to systems that treat '_' and '-' as interchangeable. Envoy by default allows client request headers with underscore
+ * characters.
+ */
+export type _envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction =
+  /**
+   * Allow headers with underscores. This is the default behavior.
+   */
+  | 'ALLOW'
+  | 0
+  /**
+   * Reject client request. HTTP/1 requests are rejected with the 400 status. HTTP/2 requests
+   * end with the stream reset. The "httpN.requests_rejected_with_underscores_in_headers" counter
+   * is incremented for each rejected request.
+   */
+  | 'REJECT_REQUEST'
+  | 1
+  /**
+   * Drop the client header with name containing underscores. The header is dropped before the filter chain is
+   * invoked and as such filters will not see dropped headers. The
+   * "httpN.dropped_headers_with_underscores" is incremented for each dropped header.
+   */
+  | 'DROP_HEADER'
+  | 2
+
+/**
+ * Action to take when Envoy receives client request with header names containing underscore
+ * characters.
+ * Underscore character is allowed in header names by the RFC-7230 and this behavior is implemented
+ * as a security measure due to systems that treat '_' and '-' as interchangeable. Envoy by default allows client request headers with underscore
+ * characters.
+ */
+export type _envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction__Output = typeof _envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction[keyof typeof _envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction]
 
 /**
  * [#next-free-field: 7]
@@ -81,7 +118,7 @@ export interface HttpProtocolOptions {
    * Note: this only affects client headers. It does not affect headers added
    * by Envoy filters and does not have any impact if added to cluster config.
    */
-  'headers_with_underscores_action'?: (_envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction | keyof typeof _envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction);
+  'headers_with_underscores_action'?: (_envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction);
   /**
    * Optional maximum requests for both upstream and downstream connections.
    * If not specified, there is no limit.
@@ -141,7 +178,7 @@ export interface HttpProtocolOptions__Output {
    * Note: this only affects client headers. It does not affect headers added
    * by Envoy filters and does not have any impact if added to cluster config.
    */
-  'headers_with_underscores_action': (keyof typeof _envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction);
+  'headers_with_underscores_action': (_envoy_config_core_v3_HttpProtocolOptions_HeadersWithUnderscoresAction__Output);
   /**
    * Optional maximum requests for both upstream and downstream connections.
    * If not specified, there is no limit.
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Node.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Node.ts
index 6aef94d8e..b29b68502 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Node.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/Node.ts
@@ -78,6 +78,7 @@ export interface Node {
    * for filtering :ref:`listeners <config_listeners>` to be returned. For example,
    * if there is a listener bound to port 80, the list can optionally contain the
    * SocketAddress ``(0.0.0.0,80)``. The field is optional and just a hint.
+   * @deprecated
    */
   'listening_addresses'?: (_envoy_config_core_v3_Address)[];
   /**
@@ -162,6 +163,7 @@ export interface Node__Output {
    * for filtering :ref:`listeners <config_listeners>` to be returned. For example,
    * if there is a listener bound to port 80, the list can optionally contain the
    * SocketAddress ``(0.0.0.0,80)``. The field is optional and just a hint.
+   * @deprecated
    */
   'listening_addresses': (_envoy_config_core_v3_Address__Output)[];
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ProxyProtocolConfig.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ProxyProtocolConfig.ts
index 7da9d569e..34cf7475f 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ProxyProtocolConfig.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ProxyProtocolConfig.ts
@@ -4,22 +4,36 @@ import type { ProxyProtocolPassThroughTLVs as _envoy_config_core_v3_ProxyProtoco
 
 // Original file: deps/envoy-api/envoy/config/core/v3/proxy_protocol.proto
 
-export enum _envoy_config_core_v3_ProxyProtocolConfig_Version {
+export const _envoy_config_core_v3_ProxyProtocolConfig_Version = {
   /**
    * PROXY protocol version 1. Human readable format.
    */
-  V1 = 0,
+  V1: 'V1',
   /**
    * PROXY protocol version 2. Binary format.
    */
-  V2 = 1,
-}
+  V2: 'V2',
+} as const;
+
+export type _envoy_config_core_v3_ProxyProtocolConfig_Version =
+  /**
+   * PROXY protocol version 1. Human readable format.
+   */
+  | 'V1'
+  | 0
+  /**
+   * PROXY protocol version 2. Binary format.
+   */
+  | 'V2'
+  | 1
+
+export type _envoy_config_core_v3_ProxyProtocolConfig_Version__Output = typeof _envoy_config_core_v3_ProxyProtocolConfig_Version[keyof typeof _envoy_config_core_v3_ProxyProtocolConfig_Version]
 
 export interface ProxyProtocolConfig {
   /**
    * The PROXY protocol version to use. See https://www.haproxy.org/download/2.1/doc/proxy-protocol.txt for details
    */
-  'version'?: (_envoy_config_core_v3_ProxyProtocolConfig_Version | keyof typeof _envoy_config_core_v3_ProxyProtocolConfig_Version);
+  'version'?: (_envoy_config_core_v3_ProxyProtocolConfig_Version);
   /**
    * This config controls which TLVs can be passed to upstream if it is Proxy Protocol
    * V2 header. If there is no setting for this field, no TLVs will be passed through.
@@ -31,7 +45,7 @@ export interface ProxyProtocolConfig__Output {
   /**
    * The PROXY protocol version to use. See https://www.haproxy.org/download/2.1/doc/proxy-protocol.txt for details
    */
-  'version': (keyof typeof _envoy_config_core_v3_ProxyProtocolConfig_Version);
+  'version': (_envoy_config_core_v3_ProxyProtocolConfig_Version__Output);
   /**
    * This config controls which TLVs can be passed to upstream if it is Proxy Protocol
    * V2 header. If there is no setting for this field, no TLVs will be passed through.
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ProxyProtocolPassThroughTLVs.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ProxyProtocolPassThroughTLVs.ts
index 0dddbf79f..9f253ceff 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ProxyProtocolPassThroughTLVs.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/ProxyProtocolPassThroughTLVs.ts
@@ -3,23 +3,37 @@
 
 // Original file: deps/envoy-api/envoy/config/core/v3/proxy_protocol.proto
 
-export enum _envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType {
+export const _envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType = {
   /**
    * Pass all TLVs.
    */
-  INCLUDE_ALL = 0,
+  INCLUDE_ALL: 'INCLUDE_ALL',
   /**
    * Pass specific TLVs defined in tlv_type.
    */
-  INCLUDE = 1,
-}
+  INCLUDE: 'INCLUDE',
+} as const;
+
+export type _envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType =
+  /**
+   * Pass all TLVs.
+   */
+  | 'INCLUDE_ALL'
+  | 0
+  /**
+   * Pass specific TLVs defined in tlv_type.
+   */
+  | 'INCLUDE'
+  | 1
+
+export type _envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType__Output = typeof _envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType[keyof typeof _envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType]
 
 export interface ProxyProtocolPassThroughTLVs {
   /**
    * The strategy to pass through TLVs. Default is INCLUDE_ALL.
    * If INCLUDE_ALL is set, all TLVs will be passed through no matter the tlv_type field.
    */
-  'match_type'?: (_envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType | keyof typeof _envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType);
+  'match_type'?: (_envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType);
   /**
    * The TLV types that are applied based on match_type.
    * TLV type is defined as uint8_t in proxy protocol. See `the spec
@@ -33,7 +47,7 @@ export interface ProxyProtocolPassThroughTLVs__Output {
    * The strategy to pass through TLVs. Default is INCLUDE_ALL.
    * If INCLUDE_ALL is set, all TLVs will be passed through no matter the tlv_type field.
    */
-  'match_type': (keyof typeof _envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType);
+  'match_type': (_envoy_config_core_v3_ProxyProtocolPassThroughTLVs_PassTLVsMatchType__Output);
   /**
    * The TLV types that are applied based on match_type.
    * TLV type is defined as uint8_t in proxy protocol. See `the spec
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/RequestMethod.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/RequestMethod.ts
index 9be1aa6d1..67d40fda6 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/RequestMethod.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/RequestMethod.ts
@@ -3,15 +3,45 @@
 /**
  * HTTP request method.
  */
-export enum RequestMethod {
-  METHOD_UNSPECIFIED = 0,
-  GET = 1,
-  HEAD = 2,
-  POST = 3,
-  PUT = 4,
-  DELETE = 5,
-  CONNECT = 6,
-  OPTIONS = 7,
-  TRACE = 8,
-  PATCH = 9,
-}
+export const RequestMethod = {
+  METHOD_UNSPECIFIED: 'METHOD_UNSPECIFIED',
+  GET: 'GET',
+  HEAD: 'HEAD',
+  POST: 'POST',
+  PUT: 'PUT',
+  DELETE: 'DELETE',
+  CONNECT: 'CONNECT',
+  OPTIONS: 'OPTIONS',
+  TRACE: 'TRACE',
+  PATCH: 'PATCH',
+} as const;
+
+/**
+ * HTTP request method.
+ */
+export type RequestMethod =
+  | 'METHOD_UNSPECIFIED'
+  | 0
+  | 'GET'
+  | 1
+  | 'HEAD'
+  | 2
+  | 'POST'
+  | 3
+  | 'PUT'
+  | 4
+  | 'DELETE'
+  | 5
+  | 'CONNECT'
+  | 6
+  | 'OPTIONS'
+  | 7
+  | 'TRACE'
+  | 8
+  | 'PATCH'
+  | 9
+
+/**
+ * HTTP request method.
+ */
+export type RequestMethod__Output = typeof RequestMethod[keyof typeof RequestMethod]
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/RoutingPriority.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/RoutingPriority.ts
index 917d8a3df..41172d92f 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/RoutingPriority.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/RoutingPriority.ts
@@ -9,7 +9,33 @@
  * upstream host. In the future Envoy will likely support true HTTP/2 priority
  * over a single upstream connection.
  */
-export enum RoutingPriority {
-  DEFAULT = 0,
-  HIGH = 1,
-}
+export const RoutingPriority = {
+  DEFAULT: 'DEFAULT',
+  HIGH: 'HIGH',
+} as const;
+
+/**
+ * Envoy supports :ref:`upstream priority routing
+ * <arch_overview_http_routing_priority>` both at the route and the virtual
+ * cluster level. The current priority implementation uses different connection
+ * pool and circuit breaking settings for each priority level. This means that
+ * even for HTTP/2 requests, two physical connections will be used to an
+ * upstream host. In the future Envoy will likely support true HTTP/2 priority
+ * over a single upstream connection.
+ */
+export type RoutingPriority =
+  | 'DEFAULT'
+  | 0
+  | 'HIGH'
+  | 1
+
+/**
+ * Envoy supports :ref:`upstream priority routing
+ * <arch_overview_http_routing_priority>` both at the route and the virtual
+ * cluster level. The current priority implementation uses different connection
+ * pool and circuit breaking settings for each priority level. This means that
+ * even for HTTP/2 requests, two physical connections will be used to an
+ * upstream host. In the future Envoy will likely support true HTTP/2 priority
+ * over a single upstream connection.
+ */
+export type RoutingPriority__Output = typeof RoutingPriority[keyof typeof RoutingPriority]
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SelfConfigSource.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SelfConfigSource.ts
index 3912fd1cf..939c4fd3d 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SelfConfigSource.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SelfConfigSource.ts
@@ -1,6 +1,6 @@
 // Original file: deps/envoy-api/envoy/config/core/v3/config_source.proto
 
-import type { ApiVersion as _envoy_config_core_v3_ApiVersion } from '../../../../envoy/config/core/v3/ApiVersion';
+import type { ApiVersion as _envoy_config_core_v3_ApiVersion, ApiVersion__Output as _envoy_config_core_v3_ApiVersion__Output } from '../../../../envoy/config/core/v3/ApiVersion';
 
 /**
  * [#not-implemented-hide:]
@@ -13,7 +13,7 @@ export interface SelfConfigSource {
    * API version for xDS transport protocol. This describes the xDS gRPC/REST
    * endpoint and version of [Delta]DiscoveryRequest/Response used on the wire.
    */
-  'transport_api_version'?: (_envoy_config_core_v3_ApiVersion | keyof typeof _envoy_config_core_v3_ApiVersion);
+  'transport_api_version'?: (_envoy_config_core_v3_ApiVersion);
 }
 
 /**
@@ -27,5 +27,5 @@ export interface SelfConfigSource__Output {
    * API version for xDS transport protocol. This describes the xDS gRPC/REST
    * endpoint and version of [Delta]DiscoveryRequest/Response used on the wire.
    */
-  'transport_api_version': (keyof typeof _envoy_config_core_v3_ApiVersion);
+  'transport_api_version': (_envoy_config_core_v3_ApiVersion__Output);
 }
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SocketAddress.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SocketAddress.ts
index ae87b9edd..f939393fb 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SocketAddress.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SocketAddress.ts
@@ -3,16 +3,24 @@
 
 // Original file: deps/envoy-api/envoy/config/core/v3/address.proto
 
-export enum _envoy_config_core_v3_SocketAddress_Protocol {
-  TCP = 0,
-  UDP = 1,
-}
+export const _envoy_config_core_v3_SocketAddress_Protocol = {
+  TCP: 'TCP',
+  UDP: 'UDP',
+} as const;
+
+export type _envoy_config_core_v3_SocketAddress_Protocol =
+  | 'TCP'
+  | 0
+  | 'UDP'
+  | 1
+
+export type _envoy_config_core_v3_SocketAddress_Protocol__Output = typeof _envoy_config_core_v3_SocketAddress_Protocol[keyof typeof _envoy_config_core_v3_SocketAddress_Protocol]
 
 /**
  * [#next-free-field: 7]
  */
 export interface SocketAddress {
-  'protocol'?: (_envoy_config_core_v3_SocketAddress_Protocol | keyof typeof _envoy_config_core_v3_SocketAddress_Protocol);
+  'protocol'?: (_envoy_config_core_v3_SocketAddress_Protocol);
   /**
    * The address for this socket. :ref:`Listeners <config_listeners>` will bind
    * to the address. An empty address is not allowed. Specify ``0.0.0.0`` or ``::``
@@ -56,7 +64,7 @@ export interface SocketAddress {
  * [#next-free-field: 7]
  */
 export interface SocketAddress__Output {
-  'protocol': (keyof typeof _envoy_config_core_v3_SocketAddress_Protocol);
+  'protocol': (_envoy_config_core_v3_SocketAddress_Protocol__Output);
   /**
    * The address for this socket. :ref:`Listeners <config_listeners>` will bind
    * to the address. An empty address is not allowed. Specify ``0.0.0.0`` or ``::``
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SocketOption.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SocketOption.ts
index edff50a63..9b3bc0019 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SocketOption.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SocketOption.ts
@@ -4,20 +4,39 @@ import type { Long } from '@grpc/proto-loader';
 
 // Original file: deps/envoy-api/envoy/config/core/v3/socket_option.proto
 
-export enum _envoy_config_core_v3_SocketOption_SocketState {
+export const _envoy_config_core_v3_SocketOption_SocketState = {
   /**
    * Socket options are applied after socket creation but before binding the socket to a port
    */
-  STATE_PREBIND = 0,
+  STATE_PREBIND: 'STATE_PREBIND',
   /**
    * Socket options are applied after binding the socket to a port but before calling listen()
    */
-  STATE_BOUND = 1,
+  STATE_BOUND: 'STATE_BOUND',
   /**
    * Socket options are applied after calling listen()
    */
-  STATE_LISTENING = 2,
-}
+  STATE_LISTENING: 'STATE_LISTENING',
+} as const;
+
+export type _envoy_config_core_v3_SocketOption_SocketState =
+  /**
+   * Socket options are applied after socket creation but before binding the socket to a port
+   */
+  | 'STATE_PREBIND'
+  | 0
+  /**
+   * Socket options are applied after binding the socket to a port but before calling listen()
+   */
+  | 'STATE_BOUND'
+  | 1
+  /**
+   * Socket options are applied after calling listen()
+   */
+  | 'STATE_LISTENING'
+  | 2
+
+export type _envoy_config_core_v3_SocketOption_SocketState__Output = typeof _envoy_config_core_v3_SocketOption_SocketState[keyof typeof _envoy_config_core_v3_SocketOption_SocketState]
 
 /**
  * Generic socket option message. This would be used to set socket options that
@@ -70,7 +89,7 @@ export interface SocketOption {
    * The state in which the option will be applied. When used in BindConfig
    * STATE_PREBIND is currently the only valid value.
    */
-  'state'?: (_envoy_config_core_v3_SocketOption_SocketState | keyof typeof _envoy_config_core_v3_SocketOption_SocketState);
+  'state'?: (_envoy_config_core_v3_SocketOption_SocketState);
   'value'?: "int_value"|"buf_value";
 }
 
@@ -125,6 +144,6 @@ export interface SocketOption__Output {
    * The state in which the option will be applied. When used in BindConfig
    * STATE_PREBIND is currently the only valid value.
    */
-  'state': (keyof typeof _envoy_config_core_v3_SocketOption_SocketState);
+  'state': (_envoy_config_core_v3_SocketOption_SocketState__Output);
   'value': "int_value"|"buf_value";
 }
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SubstitutionFormatString.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SubstitutionFormatString.ts
index be0237e38..01a97441c 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SubstitutionFormatString.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/SubstitutionFormatString.ts
@@ -28,6 +28,7 @@ export interface SubstitutionFormatString {
    * upstream connect error:503:path=/foo
    * 
    * Deprecated in favor of :ref:`text_format_source <envoy_v3_api_field_config.core.v3.SubstitutionFormatString.text_format_source>`. To migrate text format strings, use the :ref:`inline_string <envoy_v3_api_field_config.core.v3.DataSource.inline_string>` field.
+   * @deprecated
    */
   'text_format'?: (string);
   /**
@@ -125,6 +126,7 @@ export interface SubstitutionFormatString__Output {
    * upstream connect error:503:path=/foo
    * 
    * Deprecated in favor of :ref:`text_format_source <envoy_v3_api_field_config.core.v3.SubstitutionFormatString.text_format_source>`. To migrate text format strings, use the :ref:`inline_string <envoy_v3_api_field_config.core.v3.DataSource.inline_string>` field.
+   * @deprecated
    */
   'text_format'?: (string);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/TrafficDirection.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/TrafficDirection.ts
index b68323b09..e450d43cb 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/TrafficDirection.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/TrafficDirection.ts
@@ -3,17 +3,42 @@
 /**
  * Identifies the direction of the traffic relative to the local Envoy.
  */
-export enum TrafficDirection {
+export const TrafficDirection = {
   /**
    * Default option is unspecified.
    */
-  UNSPECIFIED = 0,
+  UNSPECIFIED: 'UNSPECIFIED',
   /**
    * The transport is used for incoming traffic.
    */
-  INBOUND = 1,
+  INBOUND: 'INBOUND',
   /**
    * The transport is used for outgoing traffic.
    */
-  OUTBOUND = 2,
-}
+  OUTBOUND: 'OUTBOUND',
+} as const;
+
+/**
+ * Identifies the direction of the traffic relative to the local Envoy.
+ */
+export type TrafficDirection =
+  /**
+   * Default option is unspecified.
+   */
+  | 'UNSPECIFIED'
+  | 0
+  /**
+   * The transport is used for incoming traffic.
+   */
+  | 'INBOUND'
+  | 1
+  /**
+   * The transport is used for outgoing traffic.
+   */
+  | 'OUTBOUND'
+  | 2
+
+/**
+ * Identifies the direction of the traffic relative to the local Envoy.
+ */
+export type TrafficDirection__Output = typeof TrafficDirection[keyof typeof TrafficDirection]
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/UdpSocketConfig.ts b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/UdpSocketConfig.ts
index fe1b038db..f5e38b2b4 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/core/v3/UdpSocketConfig.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/core/v3/UdpSocketConfig.ts
@@ -2,7 +2,6 @@
 
 import type { UInt64Value as _google_protobuf_UInt64Value, UInt64Value__Output as _google_protobuf_UInt64Value__Output } from '../../../../google/protobuf/UInt64Value';
 import type { BoolValue as _google_protobuf_BoolValue, BoolValue__Output as _google_protobuf_BoolValue__Output } from '../../../../google/protobuf/BoolValue';
-import type { Long } from '@grpc/proto-loader';
 
 /**
  * Generic UDP socket configuration.
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/endpoint/v3/LbEndpoint.ts b/packages/grpc-js-xds/src/generated/envoy/config/endpoint/v3/LbEndpoint.ts
index 8d184b8a0..4130eb838 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/endpoint/v3/LbEndpoint.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/endpoint/v3/LbEndpoint.ts
@@ -1,7 +1,7 @@
 // Original file: deps/envoy-api/envoy/config/endpoint/v3/endpoint_components.proto
 
 import type { Endpoint as _envoy_config_endpoint_v3_Endpoint, Endpoint__Output as _envoy_config_endpoint_v3_Endpoint__Output } from '../../../../envoy/config/endpoint/v3/Endpoint';
-import type { HealthStatus as _envoy_config_core_v3_HealthStatus } from '../../../../envoy/config/core/v3/HealthStatus';
+import type { HealthStatus as _envoy_config_core_v3_HealthStatus, HealthStatus__Output as _envoy_config_core_v3_HealthStatus__Output } from '../../../../envoy/config/core/v3/HealthStatus';
 import type { Metadata as _envoy_config_core_v3_Metadata, Metadata__Output as _envoy_config_core_v3_Metadata__Output } from '../../../../envoy/config/core/v3/Metadata';
 import type { UInt32Value as _google_protobuf_UInt32Value, UInt32Value__Output as _google_protobuf_UInt32Value__Output } from '../../../../google/protobuf/UInt32Value';
 
@@ -14,7 +14,7 @@ export interface LbEndpoint {
   /**
    * Optional health status when known and supplied by EDS server.
    */
-  'health_status'?: (_envoy_config_core_v3_HealthStatus | keyof typeof _envoy_config_core_v3_HealthStatus);
+  'health_status'?: (_envoy_config_core_v3_HealthStatus);
   /**
    * The endpoint metadata specifies values that may be used by the load
    * balancer to select endpoints in a cluster for a given request. The filter
@@ -56,7 +56,7 @@ export interface LbEndpoint__Output {
   /**
    * Optional health status when known and supplied by EDS server.
    */
-  'health_status': (keyof typeof _envoy_config_core_v3_HealthStatus);
+  'health_status': (_envoy_config_core_v3_HealthStatus__Output);
   /**
    * The endpoint metadata specifies values that may be used by the load
    * balancer to select endpoints in a cluster for a given request. The filter
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/FilterChain.ts b/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/FilterChain.ts
index f27000d71..77b08f48e 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/FilterChain.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/FilterChain.ts
@@ -79,6 +79,7 @@ export interface FilterChain {
    * This field is deprecated. Add a
    * :ref:`PROXY protocol listener filter <config_listener_filters_proxy_protocol>`
    * explicitly instead.
+   * @deprecated
    */
   'use_proxy_proto'?: (_google_protobuf_BoolValue | null);
   /**
@@ -149,6 +150,7 @@ export interface FilterChain__Output {
    * This field is deprecated. Add a
    * :ref:`PROXY protocol listener filter <config_listener_filters_proxy_protocol>`
    * explicitly instead.
+   * @deprecated
    */
   'use_proxy_proto': (_google_protobuf_BoolValue__Output | null);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/FilterChainMatch.ts b/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/FilterChainMatch.ts
index 87b1503cb..fcbfc1b3e 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/FilterChainMatch.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/FilterChainMatch.ts
@@ -5,20 +5,39 @@ import type { UInt32Value as _google_protobuf_UInt32Value, UInt32Value__Output a
 
 // Original file: deps/envoy-api/envoy/config/listener/v3/listener_components.proto
 
-export enum _envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType {
+export const _envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType = {
   /**
    * Any connection source matches.
    */
-  ANY = 0,
+  ANY: 'ANY',
   /**
    * Match a connection originating from the same host.
    */
-  SAME_IP_OR_LOOPBACK = 1,
+  SAME_IP_OR_LOOPBACK: 'SAME_IP_OR_LOOPBACK',
   /**
    * Match a connection originating from a different host.
    */
-  EXTERNAL = 2,
-}
+  EXTERNAL: 'EXTERNAL',
+} as const;
+
+export type _envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType =
+  /**
+   * Any connection source matches.
+   */
+  | 'ANY'
+  | 0
+  /**
+   * Match a connection originating from the same host.
+   */
+  | 'SAME_IP_OR_LOOPBACK'
+  | 1
+  /**
+   * Match a connection originating from a different host.
+   */
+  | 'EXTERNAL'
+  | 2
+
+export type _envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType__Output = typeof _envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType[keyof typeof _envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType]
 
 /**
  * Specifies the match criteria for selecting a specific filter chain for a
@@ -154,7 +173,7 @@ export interface FilterChainMatch {
   /**
    * Specifies the connection source IP match type. Can be any, local or external network.
    */
-  'source_type'?: (_envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType | keyof typeof _envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType);
+  'source_type'?: (_envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType);
   /**
    * The criteria is satisfied if the directly connected source IP address of the downstream
    * connection is contained in at least one of the specified subnets. If the parameter is not
@@ -297,7 +316,7 @@ export interface FilterChainMatch__Output {
   /**
    * Specifies the connection source IP match type. Can be any, local or external network.
    */
-  'source_type': (keyof typeof _envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType);
+  'source_type': (_envoy_config_listener_v3_FilterChainMatch_ConnectionSourceType__Output);
   /**
    * The criteria is satisfied if the directly connected source IP address of the downstream
    * connection is contained in at least one of the specified subnets. If the parameter is not
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/Listener.ts b/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/Listener.ts
index ca12fc6de..8897eacf5 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/Listener.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/listener/v3/Listener.ts
@@ -8,7 +8,7 @@ import type { Metadata as _envoy_config_core_v3_Metadata, Metadata__Output as _e
 import type { ListenerFilter as _envoy_config_listener_v3_ListenerFilter, ListenerFilter__Output as _envoy_config_listener_v3_ListenerFilter__Output } from '../../../../envoy/config/listener/v3/ListenerFilter';
 import type { SocketOption as _envoy_config_core_v3_SocketOption, SocketOption__Output as _envoy_config_core_v3_SocketOption__Output } from '../../../../envoy/config/core/v3/SocketOption';
 import type { Duration as _google_protobuf_Duration, Duration__Output as _google_protobuf_Duration__Output } from '../../../../google/protobuf/Duration';
-import type { TrafficDirection as _envoy_config_core_v3_TrafficDirection } from '../../../../envoy/config/core/v3/TrafficDirection';
+import type { TrafficDirection as _envoy_config_core_v3_TrafficDirection, TrafficDirection__Output as _envoy_config_core_v3_TrafficDirection__Output } from '../../../../envoy/config/core/v3/TrafficDirection';
 import type { UdpListenerConfig as _envoy_config_listener_v3_UdpListenerConfig, UdpListenerConfig__Output as _envoy_config_listener_v3_UdpListenerConfig__Output } from '../../../../envoy/config/listener/v3/UdpListenerConfig';
 import type { ApiListener as _envoy_config_listener_v3_ApiListener, ApiListener__Output as _envoy_config_listener_v3_ApiListener__Output } from '../../../../envoy/config/listener/v3/ApiListener';
 import type { AccessLog as _envoy_config_accesslog_v3_AccessLog, AccessLog__Output as _envoy_config_accesslog_v3_AccessLog__Output } from '../../../../envoy/config/accesslog/v3/AccessLog';
@@ -82,19 +82,36 @@ export interface _envoy_config_listener_v3_Listener_DeprecatedV1__Output {
 
 // Original file: deps/envoy-api/envoy/config/listener/v3/listener.proto
 
-export enum _envoy_config_listener_v3_Listener_DrainType {
+export const _envoy_config_listener_v3_Listener_DrainType = {
   /**
    * Drain in response to calling /healthcheck/fail admin endpoint (along with the health check
    * filter), listener removal/modification, and hot restart.
    */
-  DEFAULT = 0,
+  DEFAULT: 'DEFAULT',
   /**
    * Drain in response to listener removal/modification and hot restart. This setting does not
    * include /healthcheck/fail. This setting may be desirable if Envoy is hosting both ingress
    * and egress listeners.
    */
-  MODIFY_ONLY = 1,
-}
+  MODIFY_ONLY: 'MODIFY_ONLY',
+} as const;
+
+export type _envoy_config_listener_v3_Listener_DrainType =
+  /**
+   * Drain in response to calling /healthcheck/fail admin endpoint (along with the health check
+   * filter), listener removal/modification, and hot restart.
+   */
+  | 'DEFAULT'
+  | 0
+  /**
+   * Drain in response to listener removal/modification and hot restart. This setting does not
+   * include /healthcheck/fail. This setting may be desirable if Envoy is hosting both ingress
+   * and egress listeners.
+   */
+  | 'MODIFY_ONLY'
+  | 1
+
+export type _envoy_config_listener_v3_Listener_DrainType__Output = typeof _envoy_config_listener_v3_Listener_DrainType[keyof typeof _envoy_config_listener_v3_Listener_DrainType]
 
 /**
  * A connection balancer implementation that does exact balancing. This means that a lock is
@@ -176,12 +193,13 @@ export interface Listener {
   'metadata'?: (_envoy_config_core_v3_Metadata | null);
   /**
    * [#not-implemented-hide:]
+   * @deprecated
    */
   'deprecated_v1'?: (_envoy_config_listener_v3_Listener_DeprecatedV1 | null);
   /**
    * The type of draining to perform at a listener-wide level.
    */
-  'drain_type'?: (_envoy_config_listener_v3_Listener_DrainType | keyof typeof _envoy_config_listener_v3_Listener_DrainType);
+  'drain_type'?: (_envoy_config_listener_v3_Listener_DrainType);
   /**
    * Listener filters have the opportunity to manipulate and augment the connection metadata that
    * is used in connection filter chain matching, for example. These filters are run before any in
@@ -256,7 +274,7 @@ export interface Listener {
    * This property is required on Windows for listeners using the original destination filter,
    * see :ref:`Original Destination <config_listener_filters_original_dst>`.
    */
-  'traffic_direction'?: (_envoy_config_core_v3_TrafficDirection | keyof typeof _envoy_config_core_v3_TrafficDirection);
+  'traffic_direction'?: (_envoy_config_core_v3_TrafficDirection);
   /**
    * Whether a connection should be created when listener filters timeout. Default is false.
    * 
@@ -307,6 +325,7 @@ export interface Listener {
   'connection_balance_config'?: (_envoy_config_listener_v3_Listener_ConnectionBalanceConfig | null);
   /**
    * Deprecated. Use ``enable_reuse_port`` instead.
+   * @deprecated
    */
   'reuse_port'?: (boolean);
   /**
@@ -466,12 +485,13 @@ export interface Listener__Output {
   'metadata': (_envoy_config_core_v3_Metadata__Output | null);
   /**
    * [#not-implemented-hide:]
+   * @deprecated
    */
   'deprecated_v1': (_envoy_config_listener_v3_Listener_DeprecatedV1__Output | null);
   /**
    * The type of draining to perform at a listener-wide level.
    */
-  'drain_type': (keyof typeof _envoy_config_listener_v3_Listener_DrainType);
+  'drain_type': (_envoy_config_listener_v3_Listener_DrainType__Output);
   /**
    * Listener filters have the opportunity to manipulate and augment the connection metadata that
    * is used in connection filter chain matching, for example. These filters are run before any in
@@ -546,7 +566,7 @@ export interface Listener__Output {
    * This property is required on Windows for listeners using the original destination filter,
    * see :ref:`Original Destination <config_listener_filters_original_dst>`.
    */
-  'traffic_direction': (keyof typeof _envoy_config_core_v3_TrafficDirection);
+  'traffic_direction': (_envoy_config_core_v3_TrafficDirection__Output);
   /**
    * Whether a connection should be created when listener filters timeout. Default is false.
    * 
@@ -597,6 +617,7 @@ export interface Listener__Output {
   'connection_balance_config': (_envoy_config_listener_v3_Listener_ConnectionBalanceConfig__Output | null);
   /**
    * Deprecated. Use ``enable_reuse_port`` instead.
+   * @deprecated
    */
   'reuse_port': (boolean);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/DogStatsdSink.ts b/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/DogStatsdSink.ts
deleted file mode 100644
index 4cf705f10..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/DogStatsdSink.ts
+++ /dev/null
@@ -1,65 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/metrics/v3/stats.proto
-
-import type { Address as _envoy_config_core_v3_Address, Address__Output as _envoy_config_core_v3_Address__Output } from '../../../../envoy/config/core/v3/Address';
-import type { UInt64Value as _google_protobuf_UInt64Value, UInt64Value__Output as _google_protobuf_UInt64Value__Output } from '../../../../google/protobuf/UInt64Value';
-import type { Long } from '@grpc/proto-loader';
-
-/**
- * Stats configuration proto schema for built-in *envoy.stat_sinks.dog_statsd* sink.
- * The sink emits stats with `DogStatsD <https://docs.datadoghq.com/guides/dogstatsd/>`_
- * compatible tags. Tags are configurable via :ref:`StatsConfig
- * <envoy_v3_api_msg_config.metrics.v3.StatsConfig>`.
- * [#extension: envoy.stat_sinks.dog_statsd]
- */
-export interface DogStatsdSink {
-  /**
-   * The UDP address of a running DogStatsD compliant listener. If specified,
-   * statistics will be flushed to this address.
-   */
-  'address'?: (_envoy_config_core_v3_Address | null);
-  /**
-   * Optional custom metric name prefix. See :ref:`StatsdSink's prefix field
-   * <envoy_v3_api_field_config.metrics.v3.StatsdSink.prefix>` for more details.
-   */
-  'prefix'?: (string);
-  /**
-   * Optional max datagram size to use when sending UDP messages. By default Envoy
-   * will emit one metric per datagram. By specifying a max-size larger than a single
-   * metric, Envoy will emit multiple, new-line separated metrics. The max datagram
-   * size should not exceed your network's MTU.
-   * 
-   * Note that this value may not be respected if smaller than a single metric.
-   */
-  'max_bytes_per_datagram'?: (_google_protobuf_UInt64Value | null);
-  'dog_statsd_specifier'?: "address";
-}
-
-/**
- * Stats configuration proto schema for built-in *envoy.stat_sinks.dog_statsd* sink.
- * The sink emits stats with `DogStatsD <https://docs.datadoghq.com/guides/dogstatsd/>`_
- * compatible tags. Tags are configurable via :ref:`StatsConfig
- * <envoy_v3_api_msg_config.metrics.v3.StatsConfig>`.
- * [#extension: envoy.stat_sinks.dog_statsd]
- */
-export interface DogStatsdSink__Output {
-  /**
-   * The UDP address of a running DogStatsD compliant listener. If specified,
-   * statistics will be flushed to this address.
-   */
-  'address'?: (_envoy_config_core_v3_Address__Output | null);
-  /**
-   * Optional custom metric name prefix. See :ref:`StatsdSink's prefix field
-   * <envoy_v3_api_field_config.metrics.v3.StatsdSink.prefix>` for more details.
-   */
-  'prefix': (string);
-  /**
-   * Optional max datagram size to use when sending UDP messages. By default Envoy
-   * will emit one metric per datagram. By specifying a max-size larger than a single
-   * metric, Envoy will emit multiple, new-line separated metrics. The max datagram
-   * size should not exceed your network's MTU.
-   * 
-   * Note that this value may not be respected if smaller than a single metric.
-   */
-  'max_bytes_per_datagram': (_google_protobuf_UInt64Value__Output | null);
-  'dog_statsd_specifier': "address";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/HistogramBucketSettings.ts b/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/HistogramBucketSettings.ts
deleted file mode 100644
index 036958a49..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/HistogramBucketSettings.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/metrics/v3/stats.proto
-
-import type { StringMatcher as _envoy_type_matcher_v3_StringMatcher, StringMatcher__Output as _envoy_type_matcher_v3_StringMatcher__Output } from '../../../../envoy/type/matcher/v3/StringMatcher';
-
-/**
- * Specifies a matcher for stats and the buckets that matching stats should use.
- */
-export interface HistogramBucketSettings {
-  /**
-   * The stats that this rule applies to. The match is applied to the original stat name
-   * before tag-extraction, for example `cluster.exampleclustername.upstream_cx_length_ms`.
-   */
-  'match'?: (_envoy_type_matcher_v3_StringMatcher | null);
-  /**
-   * Each value is the upper bound of a bucket. Each bucket must be greater than 0 and unique.
-   * The order of the buckets does not matter.
-   */
-  'buckets'?: (number | string)[];
-}
-
-/**
- * Specifies a matcher for stats and the buckets that matching stats should use.
- */
-export interface HistogramBucketSettings__Output {
-  /**
-   * The stats that this rule applies to. The match is applied to the original stat name
-   * before tag-extraction, for example `cluster.exampleclustername.upstream_cx_length_ms`.
-   */
-  'match': (_envoy_type_matcher_v3_StringMatcher__Output | null);
-  /**
-   * Each value is the upper bound of a bucket. Each bucket must be greater than 0 and unique.
-   * The order of the buckets does not matter.
-   */
-  'buckets': (number)[];
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/HystrixSink.ts b/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/HystrixSink.ts
deleted file mode 100644
index b8fb2ed8e..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/HystrixSink.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/metrics/v3/stats.proto
-
-import type { Long } from '@grpc/proto-loader';
-
-/**
- * Stats configuration proto schema for built-in *envoy.stat_sinks.hystrix* sink.
- * The sink emits stats in `text/event-stream
- * <https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events>`_
- * formatted stream for use by `Hystrix dashboard
- * <https://github.com/Netflix-Skunkworks/hystrix-dashboard/wiki>`_.
- * 
- * Note that only a single HystrixSink should be configured.
- * 
- * Streaming is started through an admin endpoint :http:get:`/hystrix_event_stream`.
- * [#extension: envoy.stat_sinks.hystrix]
- */
-export interface HystrixSink {
-  /**
-   * The number of buckets the rolling statistical window is divided into.
-   * 
-   * Each time the sink is flushed, all relevant Envoy statistics are sampled and
-   * added to the rolling window (removing the oldest samples in the window
-   * in the process). The sink then outputs the aggregate statistics across the
-   * current rolling window to the event stream(s).
-   * 
-   * rolling_window(ms) = stats_flush_interval(ms) * num_of_buckets
-   * 
-   * More detailed explanation can be found in `Hystrix wiki
-   * <https://github.com/Netflix/Hystrix/wiki/Metrics-and-Monitoring#hystrixrollingnumber>`_.
-   */
-  'num_buckets'?: (number | string | Long);
-}
-
-/**
- * Stats configuration proto schema for built-in *envoy.stat_sinks.hystrix* sink.
- * The sink emits stats in `text/event-stream
- * <https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events>`_
- * formatted stream for use by `Hystrix dashboard
- * <https://github.com/Netflix-Skunkworks/hystrix-dashboard/wiki>`_.
- * 
- * Note that only a single HystrixSink should be configured.
- * 
- * Streaming is started through an admin endpoint :http:get:`/hystrix_event_stream`.
- * [#extension: envoy.stat_sinks.hystrix]
- */
-export interface HystrixSink__Output {
-  /**
-   * The number of buckets the rolling statistical window is divided into.
-   * 
-   * Each time the sink is flushed, all relevant Envoy statistics are sampled and
-   * added to the rolling window (removing the oldest samples in the window
-   * in the process). The sink then outputs the aggregate statistics across the
-   * current rolling window to the event stream(s).
-   * 
-   * rolling_window(ms) = stats_flush_interval(ms) * num_of_buckets
-   * 
-   * More detailed explanation can be found in `Hystrix wiki
-   * <https://github.com/Netflix/Hystrix/wiki/Metrics-and-Monitoring#hystrixrollingnumber>`_.
-   */
-  'num_buckets': (string);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsConfig.ts b/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsConfig.ts
deleted file mode 100644
index df5d7c7e4..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsConfig.ts
+++ /dev/null
@@ -1,148 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/metrics/v3/stats.proto
-
-import type { TagSpecifier as _envoy_config_metrics_v3_TagSpecifier, TagSpecifier__Output as _envoy_config_metrics_v3_TagSpecifier__Output } from '../../../../envoy/config/metrics/v3/TagSpecifier';
-import type { BoolValue as _google_protobuf_BoolValue, BoolValue__Output as _google_protobuf_BoolValue__Output } from '../../../../google/protobuf/BoolValue';
-import type { StatsMatcher as _envoy_config_metrics_v3_StatsMatcher, StatsMatcher__Output as _envoy_config_metrics_v3_StatsMatcher__Output } from '../../../../envoy/config/metrics/v3/StatsMatcher';
-import type { HistogramBucketSettings as _envoy_config_metrics_v3_HistogramBucketSettings, HistogramBucketSettings__Output as _envoy_config_metrics_v3_HistogramBucketSettings__Output } from '../../../../envoy/config/metrics/v3/HistogramBucketSettings';
-
-/**
- * Statistics configuration such as tagging.
- */
-export interface StatsConfig {
-  /**
-   * Each stat name is iteratively processed through these tag specifiers.
-   * When a tag is matched, the first capture group is removed from the name so
-   * later :ref:`TagSpecifiers <envoy_v3_api_msg_config.metrics.v3.TagSpecifier>` cannot match that
-   * same portion of the match.
-   */
-  'stats_tags'?: (_envoy_config_metrics_v3_TagSpecifier)[];
-  /**
-   * Use all default tag regexes specified in Envoy. These can be combined with
-   * custom tags specified in :ref:`stats_tags
-   * <envoy_v3_api_field_config.metrics.v3.StatsConfig.stats_tags>`. They will be processed before
-   * the custom tags.
-   * 
-   * .. note::
-   * 
-   * If any default tags are specified twice, the config will be considered
-   * invalid.
-   * 
-   * See :repo:`well_known_names.h <source/common/config/well_known_names.h>` for a list of the
-   * default tags in Envoy.
-   * 
-   * If not provided, the value is assumed to be true.
-   */
-  'use_all_default_tags'?: (_google_protobuf_BoolValue | null);
-  /**
-   * Inclusion/exclusion matcher for stat name creation. If not provided, all stats are instantiated
-   * as normal. Preventing the instantiation of certain families of stats can improve memory
-   * performance for Envoys running especially large configs.
-   * 
-   * .. warning::
-   * Excluding stats may affect Envoy's behavior in undocumented ways. See
-   * `issue #8771 <https://github.com/envoyproxy/envoy/issues/8771>`_ for more information.
-   * If any unexpected behavior changes are observed, please open a new issue immediately.
-   */
-  'stats_matcher'?: (_envoy_config_metrics_v3_StatsMatcher | null);
-  /**
-   * Defines rules for setting the histogram buckets. Rules are evaluated in order, and the first
-   * match is applied. If no match is found (or if no rules are set), the following default buckets
-   * are used:
-   * 
-   * .. code-block:: json
-   * 
-   * [
-   * 0.5,
-   * 1,
-   * 5,
-   * 10,
-   * 25,
-   * 50,
-   * 100,
-   * 250,
-   * 500,
-   * 1000,
-   * 2500,
-   * 5000,
-   * 10000,
-   * 30000,
-   * 60000,
-   * 300000,
-   * 600000,
-   * 1800000,
-   * 3600000
-   * ]
-   */
-  'histogram_bucket_settings'?: (_envoy_config_metrics_v3_HistogramBucketSettings)[];
-}
-
-/**
- * Statistics configuration such as tagging.
- */
-export interface StatsConfig__Output {
-  /**
-   * Each stat name is iteratively processed through these tag specifiers.
-   * When a tag is matched, the first capture group is removed from the name so
-   * later :ref:`TagSpecifiers <envoy_v3_api_msg_config.metrics.v3.TagSpecifier>` cannot match that
-   * same portion of the match.
-   */
-  'stats_tags': (_envoy_config_metrics_v3_TagSpecifier__Output)[];
-  /**
-   * Use all default tag regexes specified in Envoy. These can be combined with
-   * custom tags specified in :ref:`stats_tags
-   * <envoy_v3_api_field_config.metrics.v3.StatsConfig.stats_tags>`. They will be processed before
-   * the custom tags.
-   * 
-   * .. note::
-   * 
-   * If any default tags are specified twice, the config will be considered
-   * invalid.
-   * 
-   * See :repo:`well_known_names.h <source/common/config/well_known_names.h>` for a list of the
-   * default tags in Envoy.
-   * 
-   * If not provided, the value is assumed to be true.
-   */
-  'use_all_default_tags': (_google_protobuf_BoolValue__Output | null);
-  /**
-   * Inclusion/exclusion matcher for stat name creation. If not provided, all stats are instantiated
-   * as normal. Preventing the instantiation of certain families of stats can improve memory
-   * performance for Envoys running especially large configs.
-   * 
-   * .. warning::
-   * Excluding stats may affect Envoy's behavior in undocumented ways. See
-   * `issue #8771 <https://github.com/envoyproxy/envoy/issues/8771>`_ for more information.
-   * If any unexpected behavior changes are observed, please open a new issue immediately.
-   */
-  'stats_matcher': (_envoy_config_metrics_v3_StatsMatcher__Output | null);
-  /**
-   * Defines rules for setting the histogram buckets. Rules are evaluated in order, and the first
-   * match is applied. If no match is found (or if no rules are set), the following default buckets
-   * are used:
-   * 
-   * .. code-block:: json
-   * 
-   * [
-   * 0.5,
-   * 1,
-   * 5,
-   * 10,
-   * 25,
-   * 50,
-   * 100,
-   * 250,
-   * 500,
-   * 1000,
-   * 2500,
-   * 5000,
-   * 10000,
-   * 30000,
-   * 60000,
-   * 300000,
-   * 600000,
-   * 1800000,
-   * 3600000
-   * ]
-   */
-  'histogram_bucket_settings': (_envoy_config_metrics_v3_HistogramBucketSettings__Output)[];
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsMatcher.ts b/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsMatcher.ts
deleted file mode 100644
index 9df9e9529..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsMatcher.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/metrics/v3/stats.proto
-
-import type { ListStringMatcher as _envoy_type_matcher_v3_ListStringMatcher, ListStringMatcher__Output as _envoy_type_matcher_v3_ListStringMatcher__Output } from '../../../../envoy/type/matcher/v3/ListStringMatcher';
-
-/**
- * Configuration for disabling stat instantiation.
- */
-export interface StatsMatcher {
-  /**
-   * If `reject_all` is true, then all stats are disabled. If `reject_all` is false, then all
-   * stats are enabled.
-   */
-  'reject_all'?: (boolean);
-  /**
-   * Exclusive match. All stats are enabled except for those matching one of the supplied
-   * StringMatcher protos.
-   */
-  'exclusion_list'?: (_envoy_type_matcher_v3_ListStringMatcher | null);
-  /**
-   * Inclusive match. No stats are enabled except for those matching one of the supplied
-   * StringMatcher protos.
-   */
-  'inclusion_list'?: (_envoy_type_matcher_v3_ListStringMatcher | null);
-  'stats_matcher'?: "reject_all"|"exclusion_list"|"inclusion_list";
-}
-
-/**
- * Configuration for disabling stat instantiation.
- */
-export interface StatsMatcher__Output {
-  /**
-   * If `reject_all` is true, then all stats are disabled. If `reject_all` is false, then all
-   * stats are enabled.
-   */
-  'reject_all'?: (boolean);
-  /**
-   * Exclusive match. All stats are enabled except for those matching one of the supplied
-   * StringMatcher protos.
-   */
-  'exclusion_list'?: (_envoy_type_matcher_v3_ListStringMatcher__Output | null);
-  /**
-   * Inclusive match. No stats are enabled except for those matching one of the supplied
-   * StringMatcher protos.
-   */
-  'inclusion_list'?: (_envoy_type_matcher_v3_ListStringMatcher__Output | null);
-  'stats_matcher': "reject_all"|"exclusion_list"|"inclusion_list";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsSink.ts b/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsSink.ts
deleted file mode 100644
index 3eb8926fa..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsSink.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/metrics/v3/stats.proto
-
-import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../../google/protobuf/Any';
-
-/**
- * Configuration for pluggable stats sinks.
- */
-export interface StatsSink {
-  /**
-   * The name of the stats sink to instantiate. The name must match a supported
-   * stats sink.
-   * See the :ref:`extensions listed in typed_config below <extension_category_envoy.stats_sinks>` for the default list of available stats sink.
-   * Sinks optionally support tagged/multiple dimensional metrics.
-   */
-  'name'?: (string);
-  'typed_config'?: (_google_protobuf_Any | null);
-  /**
-   * Stats sink specific configuration which depends on the sink being instantiated. See
-   * :ref:`StatsdSink <envoy_v3_api_msg_config.metrics.v3.StatsdSink>` for an example.
-   * [#extension-category: envoy.stats_sinks]
-   */
-  'config_type'?: "typed_config";
-}
-
-/**
- * Configuration for pluggable stats sinks.
- */
-export interface StatsSink__Output {
-  /**
-   * The name of the stats sink to instantiate. The name must match a supported
-   * stats sink.
-   * See the :ref:`extensions listed in typed_config below <extension_category_envoy.stats_sinks>` for the default list of available stats sink.
-   * Sinks optionally support tagged/multiple dimensional metrics.
-   */
-  'name': (string);
-  'typed_config'?: (_google_protobuf_Any__Output | null);
-  /**
-   * Stats sink specific configuration which depends on the sink being instantiated. See
-   * :ref:`StatsdSink <envoy_v3_api_msg_config.metrics.v3.StatsdSink>` for an example.
-   * [#extension-category: envoy.stats_sinks]
-   */
-  'config_type': "typed_config";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsdSink.ts b/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsdSink.ts
deleted file mode 100644
index 69d978920..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/StatsdSink.ts
+++ /dev/null
@@ -1,103 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/metrics/v3/stats.proto
-
-import type { Address as _envoy_config_core_v3_Address, Address__Output as _envoy_config_core_v3_Address__Output } from '../../../../envoy/config/core/v3/Address';
-
-/**
- * Stats configuration proto schema for built-in *envoy.stat_sinks.statsd* sink. This sink does not support
- * tagged metrics.
- * [#extension: envoy.stat_sinks.statsd]
- */
-export interface StatsdSink {
-  /**
-   * The UDP address of a running `statsd <https://github.com/etsy/statsd>`_
-   * compliant listener. If specified, statistics will be flushed to this
-   * address.
-   */
-  'address'?: (_envoy_config_core_v3_Address | null);
-  /**
-   * The name of a cluster that is running a TCP `statsd
-   * <https://github.com/etsy/statsd>`_ compliant listener. If specified,
-   * Envoy will connect to this cluster to flush statistics.
-   */
-  'tcp_cluster_name'?: (string);
-  /**
-   * Optional custom prefix for StatsdSink. If
-   * specified, this will override the default prefix.
-   * For example:
-   * 
-   * .. code-block:: json
-   * 
-   * {
-   * "prefix" : "envoy-prod"
-   * }
-   * 
-   * will change emitted stats to
-   * 
-   * .. code-block:: cpp
-   * 
-   * envoy-prod.test_counter:1|c
-   * envoy-prod.test_timer:5|ms
-   * 
-   * Note that the default prefix, "envoy", will be used if a prefix is not
-   * specified.
-   * 
-   * Stats with default prefix:
-   * 
-   * .. code-block:: cpp
-   * 
-   * envoy.test_counter:1|c
-   * envoy.test_timer:5|ms
-   */
-  'prefix'?: (string);
-  'statsd_specifier'?: "address"|"tcp_cluster_name";
-}
-
-/**
- * Stats configuration proto schema for built-in *envoy.stat_sinks.statsd* sink. This sink does not support
- * tagged metrics.
- * [#extension: envoy.stat_sinks.statsd]
- */
-export interface StatsdSink__Output {
-  /**
-   * The UDP address of a running `statsd <https://github.com/etsy/statsd>`_
-   * compliant listener. If specified, statistics will be flushed to this
-   * address.
-   */
-  'address'?: (_envoy_config_core_v3_Address__Output | null);
-  /**
-   * The name of a cluster that is running a TCP `statsd
-   * <https://github.com/etsy/statsd>`_ compliant listener. If specified,
-   * Envoy will connect to this cluster to flush statistics.
-   */
-  'tcp_cluster_name'?: (string);
-  /**
-   * Optional custom prefix for StatsdSink. If
-   * specified, this will override the default prefix.
-   * For example:
-   * 
-   * .. code-block:: json
-   * 
-   * {
-   * "prefix" : "envoy-prod"
-   * }
-   * 
-   * will change emitted stats to
-   * 
-   * .. code-block:: cpp
-   * 
-   * envoy-prod.test_counter:1|c
-   * envoy-prod.test_timer:5|ms
-   * 
-   * Note that the default prefix, "envoy", will be used if a prefix is not
-   * specified.
-   * 
-   * Stats with default prefix:
-   * 
-   * .. code-block:: cpp
-   * 
-   * envoy.test_counter:1|c
-   * envoy.test_timer:5|ms
-   */
-  'prefix': (string);
-  'statsd_specifier': "address"|"tcp_cluster_name";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/TagSpecifier.ts b/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/TagSpecifier.ts
deleted file mode 100644
index 9b0bb2467..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/metrics/v3/TagSpecifier.ts
+++ /dev/null
@@ -1,174 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/metrics/v3/stats.proto
-
-
-/**
- * Designates a tag name and value pair. The value may be either a fixed value
- * or a regex providing the value via capture groups. The specified tag will be
- * unconditionally set if a fixed value, otherwise it will only be set if one
- * or more capture groups in the regex match.
- */
-export interface TagSpecifier {
-  /**
-   * Attaches an identifier to the tag values to identify the tag being in the
-   * sink. Envoy has a set of default names and regexes to extract dynamic
-   * portions of existing stats, which can be found in :repo:`well_known_names.h
-   * <source/common/config/well_known_names.h>` in the Envoy repository. If a :ref:`tag_name
-   * <envoy_v3_api_field_config.metrics.v3.TagSpecifier.tag_name>` is provided in the config and
-   * neither :ref:`regex <envoy_v3_api_field_config.metrics.v3.TagSpecifier.regex>` or
-   * :ref:`fixed_value <envoy_v3_api_field_config.metrics.v3.TagSpecifier.fixed_value>` were specified,
-   * Envoy will attempt to find that name in its set of defaults and use the accompanying regex.
-   * 
-   * .. note::
-   * 
-   * It is invalid to specify the same tag name twice in a config.
-   */
-  'tag_name'?: (string);
-  /**
-   * Designates a tag to strip from the tag extracted name and provide as a named
-   * tag value for all statistics. This will only occur if any part of the name
-   * matches the regex provided with one or more capture groups.
-   * 
-   * The first capture group identifies the portion of the name to remove. The
-   * second capture group (which will normally be nested inside the first) will
-   * designate the value of the tag for the statistic. If no second capture
-   * group is provided, the first will also be used to set the value of the tag.
-   * All other capture groups will be ignored.
-   * 
-   * Example 1. a stat name ``cluster.foo_cluster.upstream_rq_timeout`` and
-   * one tag specifier:
-   * 
-   * .. code-block:: json
-   * 
-   * {
-   * "tag_name": "envoy.cluster_name",
-   * "regex": "^cluster\\.((.+?)\\.)"
-   * }
-   * 
-   * Note that the regex will remove ``foo_cluster.`` making the tag extracted
-   * name ``cluster.upstream_rq_timeout`` and the tag value for
-   * ``envoy.cluster_name`` will be ``foo_cluster`` (note: there will be no
-   * ``.`` character because of the second capture group).
-   * 
-   * Example 2. a stat name
-   * ``http.connection_manager_1.user_agent.ios.downstream_cx_total`` and two
-   * tag specifiers:
-   * 
-   * .. code-block:: json
-   * 
-   * [
-   * {
-   * "tag_name": "envoy.http_user_agent",
-   * "regex": "^http(?=\\.).*?\\.user_agent\\.((.+?)\\.)\\w+?$"
-   * },
-   * {
-   * "tag_name": "envoy.http_conn_manager_prefix",
-   * "regex": "^http\\.((.*?)\\.)"
-   * }
-   * ]
-   * 
-   * The two regexes of the specifiers will be processed in the definition order.
-   * 
-   * The first regex will remove ``ios.``, leaving the tag extracted name
-   * ``http.connection_manager_1.user_agent.downstream_cx_total``. The tag
-   * ``envoy.http_user_agent`` will be added with tag value ``ios``.
-   * 
-   * The second regex will remove ``connection_manager_1.`` from the tag
-   * extracted name produced by the first regex
-   * ``http.connection_manager_1.user_agent.downstream_cx_total``, leaving
-   * ``http.user_agent.downstream_cx_total`` as the tag extracted name. The tag
-   * ``envoy.http_conn_manager_prefix`` will be added with the tag value
-   * ``connection_manager_1``.
-   */
-  'regex'?: (string);
-  /**
-   * Specifies a fixed tag value for the ``tag_name``.
-   */
-  'fixed_value'?: (string);
-  'tag_value'?: "regex"|"fixed_value";
-}
-
-/**
- * Designates a tag name and value pair. The value may be either a fixed value
- * or a regex providing the value via capture groups. The specified tag will be
- * unconditionally set if a fixed value, otherwise it will only be set if one
- * or more capture groups in the regex match.
- */
-export interface TagSpecifier__Output {
-  /**
-   * Attaches an identifier to the tag values to identify the tag being in the
-   * sink. Envoy has a set of default names and regexes to extract dynamic
-   * portions of existing stats, which can be found in :repo:`well_known_names.h
-   * <source/common/config/well_known_names.h>` in the Envoy repository. If a :ref:`tag_name
-   * <envoy_v3_api_field_config.metrics.v3.TagSpecifier.tag_name>` is provided in the config and
-   * neither :ref:`regex <envoy_v3_api_field_config.metrics.v3.TagSpecifier.regex>` or
-   * :ref:`fixed_value <envoy_v3_api_field_config.metrics.v3.TagSpecifier.fixed_value>` were specified,
-   * Envoy will attempt to find that name in its set of defaults and use the accompanying regex.
-   * 
-   * .. note::
-   * 
-   * It is invalid to specify the same tag name twice in a config.
-   */
-  'tag_name': (string);
-  /**
-   * Designates a tag to strip from the tag extracted name and provide as a named
-   * tag value for all statistics. This will only occur if any part of the name
-   * matches the regex provided with one or more capture groups.
-   * 
-   * The first capture group identifies the portion of the name to remove. The
-   * second capture group (which will normally be nested inside the first) will
-   * designate the value of the tag for the statistic. If no second capture
-   * group is provided, the first will also be used to set the value of the tag.
-   * All other capture groups will be ignored.
-   * 
-   * Example 1. a stat name ``cluster.foo_cluster.upstream_rq_timeout`` and
-   * one tag specifier:
-   * 
-   * .. code-block:: json
-   * 
-   * {
-   * "tag_name": "envoy.cluster_name",
-   * "regex": "^cluster\\.((.+?)\\.)"
-   * }
-   * 
-   * Note that the regex will remove ``foo_cluster.`` making the tag extracted
-   * name ``cluster.upstream_rq_timeout`` and the tag value for
-   * ``envoy.cluster_name`` will be ``foo_cluster`` (note: there will be no
-   * ``.`` character because of the second capture group).
-   * 
-   * Example 2. a stat name
-   * ``http.connection_manager_1.user_agent.ios.downstream_cx_total`` and two
-   * tag specifiers:
-   * 
-   * .. code-block:: json
-   * 
-   * [
-   * {
-   * "tag_name": "envoy.http_user_agent",
-   * "regex": "^http(?=\\.).*?\\.user_agent\\.((.+?)\\.)\\w+?$"
-   * },
-   * {
-   * "tag_name": "envoy.http_conn_manager_prefix",
-   * "regex": "^http\\.((.*?)\\.)"
-   * }
-   * ]
-   * 
-   * The two regexes of the specifiers will be processed in the definition order.
-   * 
-   * The first regex will remove ``ios.``, leaving the tag extracted name
-   * ``http.connection_manager_1.user_agent.downstream_cx_total``. The tag
-   * ``envoy.http_user_agent`` will be added with tag value ``ios``.
-   * 
-   * The second regex will remove ``connection_manager_1.`` from the tag
-   * extracted name produced by the first regex
-   * ``http.connection_manager_1.user_agent.downstream_cx_total``, leaving
-   * ``http.user_agent.downstream_cx_total`` as the tag extracted name. The tag
-   * ``envoy.http_conn_manager_prefix`` will be added with the tag value
-   * ``connection_manager_1``.
-   */
-  'regex'?: (string);
-  /**
-   * Specifies a fixed tag value for the ``tag_name``.
-   */
-  'fixed_value'?: (string);
-  'tag_value': "regex"|"fixed_value";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/BufferFactoryConfig.ts b/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/BufferFactoryConfig.ts
deleted file mode 100644
index b3fbe1459..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/BufferFactoryConfig.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/overload/v3/overload.proto
-
-
-/**
- * Configuration for which accounts the WatermarkBuffer Factories should
- * track.
- */
-export interface BufferFactoryConfig {
-  /**
-   * The minimum power of two at which Envoy starts tracking an account.
-   * 
-   * Envoy has 8 power of two buckets starting with the provided exponent below.
-   * Concretely the 1st bucket contains accounts for streams that use
-   * [2^minimum_account_to_track_power_of_two,
-   * 2^(minimum_account_to_track_power_of_two + 1)) bytes.
-   * With the 8th bucket tracking accounts
-   * >= 128 * 2^minimum_account_to_track_power_of_two.
-   * 
-   * The maximum value is 56, since we're using uint64_t for bytes counting,
-   * and that's the last value that would use the 8 buckets. In practice,
-   * we don't expect the proxy to be holding 2^56 bytes.
-   * 
-   * If omitted, Envoy should not do any tracking.
-   */
-  'minimum_account_to_track_power_of_two'?: (number);
-}
-
-/**
- * Configuration for which accounts the WatermarkBuffer Factories should
- * track.
- */
-export interface BufferFactoryConfig__Output {
-  /**
-   * The minimum power of two at which Envoy starts tracking an account.
-   * 
-   * Envoy has 8 power of two buckets starting with the provided exponent below.
-   * Concretely the 1st bucket contains accounts for streams that use
-   * [2^minimum_account_to_track_power_of_two,
-   * 2^(minimum_account_to_track_power_of_two + 1)) bytes.
-   * With the 8th bucket tracking accounts
-   * >= 128 * 2^minimum_account_to_track_power_of_two.
-   * 
-   * The maximum value is 56, since we're using uint64_t for bytes counting,
-   * and that's the last value that would use the 8 buckets. In practice,
-   * we don't expect the proxy to be holding 2^56 bytes.
-   * 
-   * If omitted, Envoy should not do any tracking.
-   */
-  'minimum_account_to_track_power_of_two': (number);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/OverloadAction.ts b/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/OverloadAction.ts
deleted file mode 100644
index 84f4db34b..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/OverloadAction.ts
+++ /dev/null
@@ -1,42 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/overload/v3/overload.proto
-
-import type { Trigger as _envoy_config_overload_v3_Trigger, Trigger__Output as _envoy_config_overload_v3_Trigger__Output } from '../../../../envoy/config/overload/v3/Trigger';
-import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../../google/protobuf/Any';
-
-export interface OverloadAction {
-  /**
-   * The name of the overload action. This is just a well-known string that listeners can
-   * use for registering callbacks. Custom overload actions should be named using reverse
-   * DNS to ensure uniqueness.
-   */
-  'name'?: (string);
-  /**
-   * A set of triggers for this action. The state of the action is the maximum
-   * state of all triggers, which can be scaling between 0 and 1 or saturated. Listeners
-   * are notified when the overload action changes state.
-   */
-  'triggers'?: (_envoy_config_overload_v3_Trigger)[];
-  /**
-   * Configuration for the action being instantiated.
-   */
-  'typed_config'?: (_google_protobuf_Any | null);
-}
-
-export interface OverloadAction__Output {
-  /**
-   * The name of the overload action. This is just a well-known string that listeners can
-   * use for registering callbacks. Custom overload actions should be named using reverse
-   * DNS to ensure uniqueness.
-   */
-  'name': (string);
-  /**
-   * A set of triggers for this action. The state of the action is the maximum
-   * state of all triggers, which can be scaling between 0 and 1 or saturated. Listeners
-   * are notified when the overload action changes state.
-   */
-  'triggers': (_envoy_config_overload_v3_Trigger__Output)[];
-  /**
-   * Configuration for the action being instantiated.
-   */
-  'typed_config': (_google_protobuf_Any__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/OverloadManager.ts b/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/OverloadManager.ts
deleted file mode 100644
index e7f75b8e9..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/OverloadManager.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/overload/v3/overload.proto
-
-import type { Duration as _google_protobuf_Duration, Duration__Output as _google_protobuf_Duration__Output } from '../../../../google/protobuf/Duration';
-import type { ResourceMonitor as _envoy_config_overload_v3_ResourceMonitor, ResourceMonitor__Output as _envoy_config_overload_v3_ResourceMonitor__Output } from '../../../../envoy/config/overload/v3/ResourceMonitor';
-import type { OverloadAction as _envoy_config_overload_v3_OverloadAction, OverloadAction__Output as _envoy_config_overload_v3_OverloadAction__Output } from '../../../../envoy/config/overload/v3/OverloadAction';
-import type { BufferFactoryConfig as _envoy_config_overload_v3_BufferFactoryConfig, BufferFactoryConfig__Output as _envoy_config_overload_v3_BufferFactoryConfig__Output } from '../../../../envoy/config/overload/v3/BufferFactoryConfig';
-
-export interface OverloadManager {
-  /**
-   * The interval for refreshing resource usage.
-   */
-  'refresh_interval'?: (_google_protobuf_Duration | null);
-  /**
-   * The set of resources to monitor.
-   */
-  'resource_monitors'?: (_envoy_config_overload_v3_ResourceMonitor)[];
-  /**
-   * The set of overload actions.
-   */
-  'actions'?: (_envoy_config_overload_v3_OverloadAction)[];
-  /**
-   * Configuration for buffer factory.
-   */
-  'buffer_factory_config'?: (_envoy_config_overload_v3_BufferFactoryConfig | null);
-}
-
-export interface OverloadManager__Output {
-  /**
-   * The interval for refreshing resource usage.
-   */
-  'refresh_interval': (_google_protobuf_Duration__Output | null);
-  /**
-   * The set of resources to monitor.
-   */
-  'resource_monitors': (_envoy_config_overload_v3_ResourceMonitor__Output)[];
-  /**
-   * The set of overload actions.
-   */
-  'actions': (_envoy_config_overload_v3_OverloadAction__Output)[];
-  /**
-   * Configuration for buffer factory.
-   */
-  'buffer_factory_config': (_envoy_config_overload_v3_BufferFactoryConfig__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ResourceMonitor.ts b/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ResourceMonitor.ts
deleted file mode 100644
index 02fde2411..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ResourceMonitor.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/overload/v3/overload.proto
-
-import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../../google/protobuf/Any';
-
-export interface ResourceMonitor {
-  /**
-   * The name of the resource monitor to instantiate. Must match a registered
-   * resource monitor type.
-   * See the :ref:`extensions listed in typed_config below <extension_category_envoy.resource_monitors>` for the default list of available resource monitor.
-   */
-  'name'?: (string);
-  'typed_config'?: (_google_protobuf_Any | null);
-  /**
-   * Configuration for the resource monitor being instantiated.
-   * [#extension-category: envoy.resource_monitors]
-   */
-  'config_type'?: "typed_config";
-}
-
-export interface ResourceMonitor__Output {
-  /**
-   * The name of the resource monitor to instantiate. Must match a registered
-   * resource monitor type.
-   * See the :ref:`extensions listed in typed_config below <extension_category_envoy.resource_monitors>` for the default list of available resource monitor.
-   */
-  'name': (string);
-  'typed_config'?: (_google_protobuf_Any__Output | null);
-  /**
-   * Configuration for the resource monitor being instantiated.
-   * [#extension-category: envoy.resource_monitors]
-   */
-  'config_type': "typed_config";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ScaleTimersOverloadActionConfig.ts b/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ScaleTimersOverloadActionConfig.ts
deleted file mode 100644
index bb48fe3f6..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ScaleTimersOverloadActionConfig.ts
+++ /dev/null
@@ -1,89 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/overload/v3/overload.proto
-
-import type { Duration as _google_protobuf_Duration, Duration__Output as _google_protobuf_Duration__Output } from '../../../../google/protobuf/Duration';
-import type { Percent as _envoy_type_v3_Percent, Percent__Output as _envoy_type_v3_Percent__Output } from '../../../../envoy/type/v3/Percent';
-
-export interface _envoy_config_overload_v3_ScaleTimersOverloadActionConfig_ScaleTimer {
-  /**
-   * The type of timer this minimum applies to.
-   */
-  'timer'?: (_envoy_config_overload_v3_ScaleTimersOverloadActionConfig_TimerType | keyof typeof _envoy_config_overload_v3_ScaleTimersOverloadActionConfig_TimerType);
-  /**
-   * Sets the minimum duration as an absolute value.
-   */
-  'min_timeout'?: (_google_protobuf_Duration | null);
-  /**
-   * Sets the minimum duration as a percentage of the maximum value.
-   */
-  'min_scale'?: (_envoy_type_v3_Percent | null);
-  'overload_adjust'?: "min_timeout"|"min_scale";
-}
-
-export interface _envoy_config_overload_v3_ScaleTimersOverloadActionConfig_ScaleTimer__Output {
-  /**
-   * The type of timer this minimum applies to.
-   */
-  'timer': (keyof typeof _envoy_config_overload_v3_ScaleTimersOverloadActionConfig_TimerType);
-  /**
-   * Sets the minimum duration as an absolute value.
-   */
-  'min_timeout'?: (_google_protobuf_Duration__Output | null);
-  /**
-   * Sets the minimum duration as a percentage of the maximum value.
-   */
-  'min_scale'?: (_envoy_type_v3_Percent__Output | null);
-  'overload_adjust': "min_timeout"|"min_scale";
-}
-
-// Original file: deps/envoy-api/envoy/config/overload/v3/overload.proto
-
-export enum _envoy_config_overload_v3_ScaleTimersOverloadActionConfig_TimerType {
-  /**
-   * Unsupported value; users must explicitly specify the timer they want scaled.
-   */
-  UNSPECIFIED = 0,
-  /**
-   * Adjusts the idle timer for downstream HTTP connections that takes effect when there are no active streams.
-   * This affects the value of :ref:`HttpConnectionManager.common_http_protocol_options.idle_timeout
-   * <envoy_v3_api_field_config.core.v3.HttpProtocolOptions.idle_timeout>`
-   */
-  HTTP_DOWNSTREAM_CONNECTION_IDLE = 1,
-  /**
-   * Adjusts the idle timer for HTTP streams initiated by downstream clients.
-   * This affects the value of :ref:`RouteAction.idle_timeout <envoy_v3_api_field_config.route.v3.RouteAction.idle_timeout>` and
-   * :ref:`HttpConnectionManager.stream_idle_timeout
-   * <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.stream_idle_timeout>`
-   */
-  HTTP_DOWNSTREAM_STREAM_IDLE = 2,
-  /**
-   * Adjusts the timer for how long downstream clients have to finish transport-level negotiations
-   * before the connection is closed.
-   * This affects the value of
-   * :ref:`FilterChain.transport_socket_connect_timeout <envoy_v3_api_field_config.listener.v3.FilterChain.transport_socket_connect_timeout>`.
-   */
-  TRANSPORT_SOCKET_CONNECT = 3,
-}
-
-/**
- * Typed configuration for the "envoy.overload_actions.reduce_timeouts" action. See
- * :ref:`the docs <config_overload_manager_reducing_timeouts>` for an example of how to configure
- * the action with different timeouts and minimum values.
- */
-export interface ScaleTimersOverloadActionConfig {
-  /**
-   * A set of timer scaling rules to be applied.
-   */
-  'timer_scale_factors'?: (_envoy_config_overload_v3_ScaleTimersOverloadActionConfig_ScaleTimer)[];
-}
-
-/**
- * Typed configuration for the "envoy.overload_actions.reduce_timeouts" action. See
- * :ref:`the docs <config_overload_manager_reducing_timeouts>` for an example of how to configure
- * the action with different timeouts and minimum values.
- */
-export interface ScaleTimersOverloadActionConfig__Output {
-  /**
-   * A set of timer scaling rules to be applied.
-   */
-  'timer_scale_factors': (_envoy_config_overload_v3_ScaleTimersOverloadActionConfig_ScaleTimer__Output)[];
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ScaledTrigger.ts b/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ScaledTrigger.ts
deleted file mode 100644
index 8c6574f56..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ScaledTrigger.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/overload/v3/overload.proto
-
-
-export interface ScaledTrigger {
-  /**
-   * If the resource pressure is greater than this value, the trigger will be in the
-   * :ref:`scaling <arch_overview_overload_manager-triggers-state>` state with value
-   * `(pressure - scaling_threshold) / (saturation_threshold - scaling_threshold)`.
-   */
-  'scaling_threshold'?: (number | string);
-  /**
-   * If the resource pressure is greater than this value, the trigger will enter saturation.
-   */
-  'saturation_threshold'?: (number | string);
-}
-
-export interface ScaledTrigger__Output {
-  /**
-   * If the resource pressure is greater than this value, the trigger will be in the
-   * :ref:`scaling <arch_overview_overload_manager-triggers-state>` state with value
-   * `(pressure - scaling_threshold) / (saturation_threshold - scaling_threshold)`.
-   */
-  'scaling_threshold': (number);
-  /**
-   * If the resource pressure is greater than this value, the trigger will enter saturation.
-   */
-  'saturation_threshold': (number);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ThresholdTrigger.ts b/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ThresholdTrigger.ts
deleted file mode 100644
index b02ddd47d..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/ThresholdTrigger.ts
+++ /dev/null
@@ -1,18 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/overload/v3/overload.proto
-
-
-export interface ThresholdTrigger {
-  /**
-   * If the resource pressure is greater than or equal to this value, the trigger
-   * will enter saturation.
-   */
-  'value'?: (number | string);
-}
-
-export interface ThresholdTrigger__Output {
-  /**
-   * If the resource pressure is greater than or equal to this value, the trigger
-   * will enter saturation.
-   */
-  'value': (number);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/Trigger.ts b/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/Trigger.ts
deleted file mode 100644
index 38f360ee7..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/config/overload/v3/Trigger.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-// Original file: deps/envoy-api/envoy/config/overload/v3/overload.proto
-
-import type { ThresholdTrigger as _envoy_config_overload_v3_ThresholdTrigger, ThresholdTrigger__Output as _envoy_config_overload_v3_ThresholdTrigger__Output } from '../../../../envoy/config/overload/v3/ThresholdTrigger';
-import type { ScaledTrigger as _envoy_config_overload_v3_ScaledTrigger, ScaledTrigger__Output as _envoy_config_overload_v3_ScaledTrigger__Output } from '../../../../envoy/config/overload/v3/ScaledTrigger';
-
-export interface Trigger {
-  /**
-   * The name of the resource this is a trigger for.
-   */
-  'name'?: (string);
-  'threshold'?: (_envoy_config_overload_v3_ThresholdTrigger | null);
-  'scaled'?: (_envoy_config_overload_v3_ScaledTrigger | null);
-  'trigger_oneof'?: "threshold"|"scaled";
-}
-
-export interface Trigger__Output {
-  /**
-   * The name of the resource this is a trigger for.
-   */
-  'name': (string);
-  'threshold'?: (_envoy_config_overload_v3_ThresholdTrigger__Output | null);
-  'scaled'?: (_envoy_config_overload_v3_ScaledTrigger__Output | null);
-  'trigger_oneof': "threshold"|"scaled";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/HeaderMatcher.ts b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/HeaderMatcher.ts
index e073a8f13..b5b085ae7 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/HeaderMatcher.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/HeaderMatcher.ts
@@ -3,7 +3,6 @@
 import type { Int64Range as _envoy_type_v3_Int64Range, Int64Range__Output as _envoy_type_v3_Int64Range__Output } from '../../../../envoy/type/v3/Int64Range';
 import type { RegexMatcher as _envoy_type_matcher_v3_RegexMatcher, RegexMatcher__Output as _envoy_type_matcher_v3_RegexMatcher__Output } from '../../../../envoy/type/matcher/v3/RegexMatcher';
 import type { StringMatcher as _envoy_type_matcher_v3_StringMatcher, StringMatcher__Output as _envoy_type_matcher_v3_StringMatcher__Output } from '../../../../envoy/type/matcher/v3/StringMatcher';
-import type { Long } from '@grpc/proto-loader';
 
 /**
  * .. attention::
@@ -42,6 +41,7 @@ export interface HeaderMatcher {
   /**
    * If specified, header match will be performed based on the value of the header.
    * This field is deprecated. Please use :ref:`string_match <envoy_v3_api_field_config.route.v3.HeaderMatcher.string_match>`.
+   * @deprecated
    */
   'exact_match'?: (string);
   /**
@@ -80,6 +80,7 @@ export interface HeaderMatcher {
    * Examples:
    * 
    * * The prefix ``abcd`` matches the value ``abcdxyz``, but not for ``abcxyz``.
+   * @deprecated
    */
   'prefix_match'?: (string);
   /**
@@ -90,6 +91,7 @@ export interface HeaderMatcher {
    * Examples:
    * 
    * * The suffix ``abcd`` matches the value ``xyzabcd``, but not for ``xyzbcd``.
+   * @deprecated
    */
   'suffix_match'?: (string);
   /**
@@ -97,6 +99,7 @@ export interface HeaderMatcher {
    * header value must match the regex. The rule will not match if only a subsequence of the
    * request header value matches the regex.
    * This field is deprecated. Please use :ref:`string_match <envoy_v3_api_field_config.route.v3.HeaderMatcher.string_match>`.
+   * @deprecated
    */
   'safe_regex_match'?: (_envoy_type_matcher_v3_RegexMatcher | null);
   /**
@@ -108,6 +111,7 @@ export interface HeaderMatcher {
    * Examples:
    * 
    * * The value ``abcd`` matches the value ``xyzabcdpqr``, but not for ``xyzbcdpqr``.
+   * @deprecated
    */
   'contains_match'?: (string);
   /**
@@ -186,6 +190,7 @@ export interface HeaderMatcher__Output {
   /**
    * If specified, header match will be performed based on the value of the header.
    * This field is deprecated. Please use :ref:`string_match <envoy_v3_api_field_config.route.v3.HeaderMatcher.string_match>`.
+   * @deprecated
    */
   'exact_match'?: (string);
   /**
@@ -224,6 +229,7 @@ export interface HeaderMatcher__Output {
    * Examples:
    * 
    * * The prefix ``abcd`` matches the value ``abcdxyz``, but not for ``abcxyz``.
+   * @deprecated
    */
   'prefix_match'?: (string);
   /**
@@ -234,6 +240,7 @@ export interface HeaderMatcher__Output {
    * Examples:
    * 
    * * The suffix ``abcd`` matches the value ``xyzabcd``, but not for ``xyzbcd``.
+   * @deprecated
    */
   'suffix_match'?: (string);
   /**
@@ -241,6 +248,7 @@ export interface HeaderMatcher__Output {
    * header value must match the regex. The rule will not match if only a subsequence of the
    * request header value matches the regex.
    * This field is deprecated. Please use :ref:`string_match <envoy_v3_api_field_config.route.v3.HeaderMatcher.string_match>`.
+   * @deprecated
    */
   'safe_regex_match'?: (_envoy_type_matcher_v3_RegexMatcher__Output | null);
   /**
@@ -252,6 +260,7 @@ export interface HeaderMatcher__Output {
    * Examples:
    * 
    * * The value ``abcd`` matches the value ``xyzabcdpqr``, but not for ``xyzbcdpqr``.
+   * @deprecated
    */
   'contains_match'?: (string);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RateLimit.ts b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RateLimit.ts
index cd47e471a..28d17667f 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RateLimit.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RateLimit.ts
@@ -40,6 +40,7 @@ export interface _envoy_config_route_v3_RateLimit_Action {
    * 
    * .. attention::
    * This field has been deprecated in favor of the :ref:`metadata <envoy_v3_api_field_config.route.v3.RateLimit.Action.metadata>` field
+   * @deprecated
    */
   'dynamic_metadata'?: (_envoy_config_route_v3_RateLimit_Action_DynamicMetaData | null);
   /**
@@ -101,6 +102,7 @@ export interface _envoy_config_route_v3_RateLimit_Action__Output {
    * 
    * .. attention::
    * This field has been deprecated in favor of the :ref:`metadata <envoy_v3_api_field_config.route.v3.RateLimit.Action.metadata>` field
+   * @deprecated
    */
   'dynamic_metadata'?: (_envoy_config_route_v3_RateLimit_Action_DynamicMetaData__Output | null);
   /**
@@ -438,7 +440,7 @@ export interface _envoy_config_route_v3_RateLimit_Action_MetaData {
   /**
    * Source of metadata
    */
-  'source'?: (_envoy_config_route_v3_RateLimit_Action_MetaData_Source | keyof typeof _envoy_config_route_v3_RateLimit_Action_MetaData_Source);
+  'source'?: (_envoy_config_route_v3_RateLimit_Action_MetaData_Source);
   /**
    * If set to true, Envoy skips the descriptor while calling rate limiting service
    * when ``metadata_key`` is empty and ``default_value`` is not set. By default it skips calling the
@@ -474,7 +476,7 @@ export interface _envoy_config_route_v3_RateLimit_Action_MetaData__Output {
   /**
    * Source of metadata
    */
-  'source': (keyof typeof _envoy_config_route_v3_RateLimit_Action_MetaData_Source);
+  'source': (_envoy_config_route_v3_RateLimit_Action_MetaData_Source__Output);
   /**
    * If set to true, Envoy skips the descriptor while calling rate limiting service
    * when ``metadata_key`` is empty and ``default_value`` is not set. By default it skips calling the
@@ -643,16 +645,30 @@ export interface _envoy_config_route_v3_RateLimit_Action_RequestHeaders__Output
 
 // Original file: deps/envoy-api/envoy/config/route/v3/route_components.proto
 
-export enum _envoy_config_route_v3_RateLimit_Action_MetaData_Source {
+export const _envoy_config_route_v3_RateLimit_Action_MetaData_Source = {
   /**
    * Query :ref:`dynamic metadata <well_known_dynamic_metadata>`
    */
-  DYNAMIC = 0,
+  DYNAMIC: 'DYNAMIC',
   /**
    * Query :ref:`route entry metadata <envoy_v3_api_field_config.route.v3.Route.metadata>`
    */
-  ROUTE_ENTRY = 1,
-}
+  ROUTE_ENTRY: 'ROUTE_ENTRY',
+} as const;
+
+export type _envoy_config_route_v3_RateLimit_Action_MetaData_Source =
+  /**
+   * Query :ref:`dynamic metadata <well_known_dynamic_metadata>`
+   */
+  | 'DYNAMIC'
+  | 0
+  /**
+   * Query :ref:`route entry metadata <envoy_v3_api_field_config.route.v3.Route.metadata>`
+   */
+  | 'ROUTE_ENTRY'
+  | 1
+
+export type _envoy_config_route_v3_RateLimit_Action_MetaData_Source__Output = typeof _envoy_config_route_v3_RateLimit_Action_MetaData_Source[keyof typeof _envoy_config_route_v3_RateLimit_Action_MetaData_Source]
 
 /**
  * The following descriptor entry is appended to the descriptor:
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RedirectAction.ts b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RedirectAction.ts
index fd11a681b..070470af3 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RedirectAction.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RedirectAction.ts
@@ -4,28 +4,57 @@ import type { RegexMatchAndSubstitute as _envoy_type_matcher_v3_RegexMatchAndSub
 
 // Original file: deps/envoy-api/envoy/config/route/v3/route_components.proto
 
-export enum _envoy_config_route_v3_RedirectAction_RedirectResponseCode {
+export const _envoy_config_route_v3_RedirectAction_RedirectResponseCode = {
   /**
    * Moved Permanently HTTP Status Code - 301.
    */
-  MOVED_PERMANENTLY = 0,
+  MOVED_PERMANENTLY: 'MOVED_PERMANENTLY',
   /**
    * Found HTTP Status Code - 302.
    */
-  FOUND = 1,
+  FOUND: 'FOUND',
   /**
    * See Other HTTP Status Code - 303.
    */
-  SEE_OTHER = 2,
+  SEE_OTHER: 'SEE_OTHER',
   /**
    * Temporary Redirect HTTP Status Code - 307.
    */
-  TEMPORARY_REDIRECT = 3,
+  TEMPORARY_REDIRECT: 'TEMPORARY_REDIRECT',
   /**
    * Permanent Redirect HTTP Status Code - 308.
    */
-  PERMANENT_REDIRECT = 4,
-}
+  PERMANENT_REDIRECT: 'PERMANENT_REDIRECT',
+} as const;
+
+export type _envoy_config_route_v3_RedirectAction_RedirectResponseCode =
+  /**
+   * Moved Permanently HTTP Status Code - 301.
+   */
+  | 'MOVED_PERMANENTLY'
+  | 0
+  /**
+   * Found HTTP Status Code - 302.
+   */
+  | 'FOUND'
+  | 1
+  /**
+   * See Other HTTP Status Code - 303.
+   */
+  | 'SEE_OTHER'
+  | 2
+  /**
+   * Temporary Redirect HTTP Status Code - 307.
+   */
+  | 'TEMPORARY_REDIRECT'
+  | 3
+  /**
+   * Permanent Redirect HTTP Status Code - 308.
+   */
+  | 'PERMANENT_REDIRECT'
+  | 4
+
+export type _envoy_config_route_v3_RedirectAction_RedirectResponseCode__Output = typeof _envoy_config_route_v3_RedirectAction_RedirectResponseCode[keyof typeof _envoy_config_route_v3_RedirectAction_RedirectResponseCode]
 
 /**
  * [#next-free-field: 10]
@@ -58,7 +87,7 @@ export interface RedirectAction {
    * The HTTP status code to use in the redirect response. The default response
    * code is MOVED_PERMANENTLY (301).
    */
-  'response_code'?: (_envoy_config_route_v3_RedirectAction_RedirectResponseCode | keyof typeof _envoy_config_route_v3_RedirectAction_RedirectResponseCode);
+  'response_code'?: (_envoy_config_route_v3_RedirectAction_RedirectResponseCode);
   /**
    * The scheme portion of the URL will be swapped with "https".
    */
@@ -155,7 +184,7 @@ export interface RedirectAction__Output {
    * The HTTP status code to use in the redirect response. The default response
    * code is MOVED_PERMANENTLY (301).
    */
-  'response_code': (keyof typeof _envoy_config_route_v3_RedirectAction_RedirectResponseCode);
+  'response_code': (_envoy_config_route_v3_RedirectAction_RedirectResponseCode__Output);
   /**
    * The scheme portion of the URL will be swapped with "https".
    */
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RetryPolicy.ts b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RetryPolicy.ts
index d60458728..773943b7f 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RetryPolicy.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RetryPolicy.ts
@@ -141,7 +141,7 @@ export interface _envoy_config_route_v3_RetryPolicy_ResetHeader {
   /**
    * The format of the reset header.
    */
-  'format'?: (_envoy_config_route_v3_RetryPolicy_ResetHeaderFormat | keyof typeof _envoy_config_route_v3_RetryPolicy_ResetHeaderFormat);
+  'format'?: (_envoy_config_route_v3_RetryPolicy_ResetHeaderFormat);
 }
 
 export interface _envoy_config_route_v3_RetryPolicy_ResetHeader__Output {
@@ -156,15 +156,23 @@ export interface _envoy_config_route_v3_RetryPolicy_ResetHeader__Output {
   /**
    * The format of the reset header.
    */
-  'format': (keyof typeof _envoy_config_route_v3_RetryPolicy_ResetHeaderFormat);
+  'format': (_envoy_config_route_v3_RetryPolicy_ResetHeaderFormat__Output);
 }
 
 // Original file: deps/envoy-api/envoy/config/route/v3/route_components.proto
 
-export enum _envoy_config_route_v3_RetryPolicy_ResetHeaderFormat {
-  SECONDS = 0,
-  UNIX_TIMESTAMP = 1,
-}
+export const _envoy_config_route_v3_RetryPolicy_ResetHeaderFormat = {
+  SECONDS: 'SECONDS',
+  UNIX_TIMESTAMP: 'UNIX_TIMESTAMP',
+} as const;
+
+export type _envoy_config_route_v3_RetryPolicy_ResetHeaderFormat =
+  | 'SECONDS'
+  | 0
+  | 'UNIX_TIMESTAMP'
+  | 1
+
+export type _envoy_config_route_v3_RetryPolicy_ResetHeaderFormat__Output = typeof _envoy_config_route_v3_RetryPolicy_ResetHeaderFormat[keyof typeof _envoy_config_route_v3_RetryPolicy_ResetHeaderFormat]
 
 export interface _envoy_config_route_v3_RetryPolicy_RetryBackOff {
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RouteAction.ts b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RouteAction.ts
index 9dd8b7c2c..fd38da92e 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RouteAction.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/RouteAction.ts
@@ -5,7 +5,7 @@ import type { Metadata as _envoy_config_core_v3_Metadata, Metadata__Output as _e
 import type { BoolValue as _google_protobuf_BoolValue, BoolValue__Output as _google_protobuf_BoolValue__Output } from '../../../../google/protobuf/BoolValue';
 import type { Duration as _google_protobuf_Duration, Duration__Output as _google_protobuf_Duration__Output } from '../../../../google/protobuf/Duration';
 import type { RetryPolicy as _envoy_config_route_v3_RetryPolicy, RetryPolicy__Output as _envoy_config_route_v3_RetryPolicy__Output } from '../../../../envoy/config/route/v3/RetryPolicy';
-import type { RoutingPriority as _envoy_config_core_v3_RoutingPriority } from '../../../../envoy/config/core/v3/RoutingPriority';
+import type { RoutingPriority as _envoy_config_core_v3_RoutingPriority, RoutingPriority__Output as _envoy_config_core_v3_RoutingPriority__Output } from '../../../../envoy/config/core/v3/RoutingPriority';
 import type { RateLimit as _envoy_config_route_v3_RateLimit, RateLimit__Output as _envoy_config_route_v3_RateLimit__Output } from '../../../../envoy/config/route/v3/RateLimit';
 import type { CorsPolicy as _envoy_config_route_v3_CorsPolicy, CorsPolicy__Output as _envoy_config_route_v3_CorsPolicy__Output } from '../../../../envoy/config/route/v3/CorsPolicy';
 import type { HedgePolicy as _envoy_config_route_v3_HedgePolicy, HedgePolicy__Output as _envoy_config_route_v3_HedgePolicy__Output } from '../../../../envoy/config/route/v3/HedgePolicy';
@@ -20,20 +20,39 @@ import type { ProxyProtocolConfig as _envoy_config_core_v3_ProxyProtocolConfig,
 
 // Original file: deps/envoy-api/envoy/config/route/v3/route_components.proto
 
-export enum _envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode {
+export const _envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode = {
   /**
    * HTTP status code - 503 Service Unavailable.
    */
-  SERVICE_UNAVAILABLE = 0,
+  SERVICE_UNAVAILABLE: 'SERVICE_UNAVAILABLE',
   /**
    * HTTP status code - 404 Not Found.
    */
-  NOT_FOUND = 1,
+  NOT_FOUND: 'NOT_FOUND',
   /**
    * HTTP status code - 500 Internal Server Error.
    */
-  INTERNAL_SERVER_ERROR = 2,
-}
+  INTERNAL_SERVER_ERROR: 'INTERNAL_SERVER_ERROR',
+} as const;
+
+export type _envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode =
+  /**
+   * HTTP status code - 503 Service Unavailable.
+   */
+  | 'SERVICE_UNAVAILABLE'
+  | 0
+  /**
+   * HTTP status code - 404 Not Found.
+   */
+  | 'NOT_FOUND'
+  | 1
+  /**
+   * HTTP status code - 500 Internal Server Error.
+   */
+  | 'INTERNAL_SERVER_ERROR'
+  | 2
+
+export type _envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode__Output = typeof _envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode[keyof typeof _envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode]
 
 /**
  * Configuration for sending data upstream as a raw data payload. This is used for
@@ -302,11 +321,30 @@ export interface _envoy_config_route_v3_RouteAction_HashPolicy_Header__Output {
 /**
  * Configures :ref:`internal redirect <arch_overview_internal_redirects>` behavior.
  * [#next-major-version: remove this definition - it's defined in the InternalRedirectPolicy message.]
+ * @deprecated
  */
-export enum _envoy_config_route_v3_RouteAction_InternalRedirectAction {
-  PASS_THROUGH_INTERNAL_REDIRECT = 0,
-  HANDLE_INTERNAL_REDIRECT = 1,
-}
+export const _envoy_config_route_v3_RouteAction_InternalRedirectAction = {
+  PASS_THROUGH_INTERNAL_REDIRECT: 'PASS_THROUGH_INTERNAL_REDIRECT',
+  HANDLE_INTERNAL_REDIRECT: 'HANDLE_INTERNAL_REDIRECT',
+} as const;
+
+/**
+ * Configures :ref:`internal redirect <arch_overview_internal_redirects>` behavior.
+ * [#next-major-version: remove this definition - it's defined in the InternalRedirectPolicy message.]
+ * @deprecated
+ */
+export type _envoy_config_route_v3_RouteAction_InternalRedirectAction =
+  | 'PASS_THROUGH_INTERNAL_REDIRECT'
+  | 0
+  | 'HANDLE_INTERNAL_REDIRECT'
+  | 1
+
+/**
+ * Configures :ref:`internal redirect <arch_overview_internal_redirects>` behavior.
+ * [#next-major-version: remove this definition - it's defined in the InternalRedirectPolicy message.]
+ * @deprecated
+ */
+export type _envoy_config_route_v3_RouteAction_InternalRedirectAction__Output = typeof _envoy_config_route_v3_RouteAction_InternalRedirectAction[keyof typeof _envoy_config_route_v3_RouteAction_InternalRedirectAction]
 
 export interface _envoy_config_route_v3_RouteAction_MaxStreamDuration {
   /**
@@ -679,7 +717,7 @@ export interface RouteAction {
   /**
    * Optionally specifies the :ref:`routing priority <arch_overview_http_routing_priority>`.
    */
-  'priority'?: (_envoy_config_core_v3_RoutingPriority | keyof typeof _envoy_config_core_v3_RoutingPriority);
+  'priority'?: (_envoy_config_core_v3_RoutingPriority);
   /**
    * Specifies a set of rate limit configurations that could be applied to the
    * route.
@@ -692,6 +730,7 @@ export interface RouteAction {
    * request.
    * 
    * This field is deprecated. Please use :ref:`vh_rate_limits <envoy_v3_api_field_extensions.filters.http.ratelimit.v3.RateLimitPerRoute.vh_rate_limits>`
+   * @deprecated
    */
   'include_vh_rate_limits'?: (_google_protobuf_BoolValue | null);
   /**
@@ -720,13 +759,14 @@ export interface RouteAction {
    * :ref:`Route.typed_per_filter_config<envoy_v3_api_field_config.route.v3.Route.typed_per_filter_config>` or
    * :ref:`WeightedCluster.ClusterWeight.typed_per_filter_config<envoy_v3_api_field_config.route.v3.WeightedCluster.ClusterWeight.typed_per_filter_config>`
    * to configure the CORS HTTP filter.
+   * @deprecated
    */
   'cors'?: (_envoy_config_route_v3_CorsPolicy | null);
   /**
    * The HTTP status code to use when configured cluster is not found.
    * The default response code is 503 Service Unavailable.
    */
-  'cluster_not_found_response_code'?: (_envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode | keyof typeof _envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode);
+  'cluster_not_found_response_code'?: (_envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode);
   /**
    * Deprecated by :ref:`grpc_timeout_header_max <envoy_v3_api_field_config.route.v3.RouteAction.MaxStreamDuration.grpc_timeout_header_max>`
    * If present, and the request is a gRPC request, use the
@@ -748,6 +788,7 @@ export interface RouteAction {
    * :ref:`config_http_filters_router_x-envoy-upstream-rq-timeout-ms`,
    * :ref:`config_http_filters_router_x-envoy-upstream-rq-per-try-timeout-ms`, and the
    * :ref:`retry overview <arch_overview_http_routing_retry>`.
+   * @deprecated
    */
   'max_grpc_timeout'?: (_google_protobuf_Duration | null);
   /**
@@ -776,7 +817,10 @@ export interface RouteAction {
    */
   'idle_timeout'?: (_google_protobuf_Duration | null);
   'upgrade_configs'?: (_envoy_config_route_v3_RouteAction_UpgradeConfig)[];
-  'internal_redirect_action'?: (_envoy_config_route_v3_RouteAction_InternalRedirectAction | keyof typeof _envoy_config_route_v3_RouteAction_InternalRedirectAction);
+  /**
+   * @deprecated
+   */
+  'internal_redirect_action'?: (_envoy_config_route_v3_RouteAction_InternalRedirectAction);
   /**
    * Indicates that the route has a hedge policy. Note that if this is set,
    * it'll take precedence over the virtual host level hedge policy entirely
@@ -792,6 +836,7 @@ export interface RouteAction {
    * The offset will only be applied if the provided grpc_timeout is greater than the offset. This
    * ensures that the offset will only ever decrease the timeout and never set it to 0 (meaning
    * infinity).
+   * @deprecated
    */
   'grpc_timeout_offset'?: (_google_protobuf_Duration | null);
   /**
@@ -833,6 +878,7 @@ export interface RouteAction {
    * will pass the redirect back to downstream.
    * 
    * If not specified, at most one redirect will be followed.
+   * @deprecated
    */
   'max_internal_redirects'?: (_google_protobuf_UInt32Value | null);
   /**
@@ -1063,7 +1109,7 @@ export interface RouteAction__Output {
   /**
    * Optionally specifies the :ref:`routing priority <arch_overview_http_routing_priority>`.
    */
-  'priority': (keyof typeof _envoy_config_core_v3_RoutingPriority);
+  'priority': (_envoy_config_core_v3_RoutingPriority__Output);
   /**
    * Specifies a set of rate limit configurations that could be applied to the
    * route.
@@ -1076,6 +1122,7 @@ export interface RouteAction__Output {
    * request.
    * 
    * This field is deprecated. Please use :ref:`vh_rate_limits <envoy_v3_api_field_extensions.filters.http.ratelimit.v3.RateLimitPerRoute.vh_rate_limits>`
+   * @deprecated
    */
   'include_vh_rate_limits': (_google_protobuf_BoolValue__Output | null);
   /**
@@ -1104,13 +1151,14 @@ export interface RouteAction__Output {
    * :ref:`Route.typed_per_filter_config<envoy_v3_api_field_config.route.v3.Route.typed_per_filter_config>` or
    * :ref:`WeightedCluster.ClusterWeight.typed_per_filter_config<envoy_v3_api_field_config.route.v3.WeightedCluster.ClusterWeight.typed_per_filter_config>`
    * to configure the CORS HTTP filter.
+   * @deprecated
    */
   'cors': (_envoy_config_route_v3_CorsPolicy__Output | null);
   /**
    * The HTTP status code to use when configured cluster is not found.
    * The default response code is 503 Service Unavailable.
    */
-  'cluster_not_found_response_code': (keyof typeof _envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode);
+  'cluster_not_found_response_code': (_envoy_config_route_v3_RouteAction_ClusterNotFoundResponseCode__Output);
   /**
    * Deprecated by :ref:`grpc_timeout_header_max <envoy_v3_api_field_config.route.v3.RouteAction.MaxStreamDuration.grpc_timeout_header_max>`
    * If present, and the request is a gRPC request, use the
@@ -1132,6 +1180,7 @@ export interface RouteAction__Output {
    * :ref:`config_http_filters_router_x-envoy-upstream-rq-timeout-ms`,
    * :ref:`config_http_filters_router_x-envoy-upstream-rq-per-try-timeout-ms`, and the
    * :ref:`retry overview <arch_overview_http_routing_retry>`.
+   * @deprecated
    */
   'max_grpc_timeout': (_google_protobuf_Duration__Output | null);
   /**
@@ -1160,7 +1209,10 @@ export interface RouteAction__Output {
    */
   'idle_timeout': (_google_protobuf_Duration__Output | null);
   'upgrade_configs': (_envoy_config_route_v3_RouteAction_UpgradeConfig__Output)[];
-  'internal_redirect_action': (keyof typeof _envoy_config_route_v3_RouteAction_InternalRedirectAction);
+  /**
+   * @deprecated
+   */
+  'internal_redirect_action': (_envoy_config_route_v3_RouteAction_InternalRedirectAction__Output);
   /**
    * Indicates that the route has a hedge policy. Note that if this is set,
    * it'll take precedence over the virtual host level hedge policy entirely
@@ -1176,6 +1228,7 @@ export interface RouteAction__Output {
    * The offset will only be applied if the provided grpc_timeout is greater than the offset. This
    * ensures that the offset will only ever decrease the timeout and never set it to 0 (meaning
    * infinity).
+   * @deprecated
    */
   'grpc_timeout_offset': (_google_protobuf_Duration__Output | null);
   /**
@@ -1217,6 +1270,7 @@ export interface RouteAction__Output {
    * will pass the redirect back to downstream.
    * 
    * If not specified, at most one redirect will be followed.
+   * @deprecated
    */
   'max_internal_redirects': (_google_protobuf_UInt32Value__Output | null);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/VirtualHost.ts b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/VirtualHost.ts
index b2c344fff..5109be872 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/VirtualHost.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/VirtualHost.ts
@@ -14,22 +14,43 @@ import type { _envoy_config_route_v3_RouteAction_RequestMirrorPolicy, _envoy_con
 
 // Original file: deps/envoy-api/envoy/config/route/v3/route_components.proto
 
-export enum _envoy_config_route_v3_VirtualHost_TlsRequirementType {
+export const _envoy_config_route_v3_VirtualHost_TlsRequirementType = {
   /**
    * No TLS requirement for the virtual host.
    */
-  NONE = 0,
+  NONE: 'NONE',
   /**
    * External requests must use TLS. If a request is external and it is not
    * using TLS, a 301 redirect will be sent telling the client to use HTTPS.
    */
-  EXTERNAL_ONLY = 1,
+  EXTERNAL_ONLY: 'EXTERNAL_ONLY',
   /**
    * All requests must use TLS. If a request is not using TLS, a 301 redirect
    * will be sent telling the client to use HTTPS.
    */
-  ALL = 2,
-}
+  ALL: 'ALL',
+} as const;
+
+export type _envoy_config_route_v3_VirtualHost_TlsRequirementType =
+  /**
+   * No TLS requirement for the virtual host.
+   */
+  | 'NONE'
+  | 0
+  /**
+   * External requests must use TLS. If a request is external and it is not
+   * using TLS, a 301 redirect will be sent telling the client to use HTTPS.
+   */
+  | 'EXTERNAL_ONLY'
+  | 1
+  /**
+   * All requests must use TLS. If a request is not using TLS, a 301 redirect
+   * will be sent telling the client to use HTTPS.
+   */
+  | 'ALL'
+  | 2
+
+export type _envoy_config_route_v3_VirtualHost_TlsRequirementType__Output = typeof _envoy_config_route_v3_VirtualHost_TlsRequirementType[keyof typeof _envoy_config_route_v3_VirtualHost_TlsRequirementType]
 
 /**
  * The top level element in the routing configuration is a virtual host. Each virtual host has
@@ -76,7 +97,7 @@ export interface VirtualHost {
    * Specifies the type of TLS enforcement the virtual host expects. If this option is not
    * specified, there is no TLS requirement for the virtual host.
    */
-  'require_tls'?: (_envoy_config_route_v3_VirtualHost_TlsRequirementType | keyof typeof _envoy_config_route_v3_VirtualHost_TlsRequirementType);
+  'require_tls'?: (_envoy_config_route_v3_VirtualHost_TlsRequirementType);
   /**
    * A list of virtual clusters defined for this virtual host. Virtual clusters
    * are used for additional statistics gathering.
@@ -106,6 +127,7 @@ export interface VirtualHost {
    * This option has been deprecated. Please use
    * :ref:`VirtualHost.typed_per_filter_config<envoy_v3_api_field_config.route.v3.VirtualHost.typed_per_filter_config>`
    * to configure the CORS HTTP filter.
+   * @deprecated
    */
   'cors'?: (_envoy_config_route_v3_CorsPolicy | null);
   /**
@@ -256,7 +278,7 @@ export interface VirtualHost__Output {
    * Specifies the type of TLS enforcement the virtual host expects. If this option is not
    * specified, there is no TLS requirement for the virtual host.
    */
-  'require_tls': (keyof typeof _envoy_config_route_v3_VirtualHost_TlsRequirementType);
+  'require_tls': (_envoy_config_route_v3_VirtualHost_TlsRequirementType__Output);
   /**
    * A list of virtual clusters defined for this virtual host. Virtual clusters
    * are used for additional statistics gathering.
@@ -286,6 +308,7 @@ export interface VirtualHost__Output {
    * This option has been deprecated. Please use
    * :ref:`VirtualHost.typed_per_filter_config<envoy_v3_api_field_config.route.v3.VirtualHost.typed_per_filter_config>`
    * to configure the CORS HTTP filter.
+   * @deprecated
    */
   'cors': (_envoy_config_route_v3_CorsPolicy__Output | null);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/WeightedCluster.ts b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/WeightedCluster.ts
index cc820654d..91f4c6aeb 100644
--- a/packages/grpc-js-xds/src/generated/envoy/config/route/v3/WeightedCluster.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/config/route/v3/WeightedCluster.ts
@@ -232,6 +232,7 @@ export interface WeightedCluster {
    * value, if this is greater than 0.
    * This field is now deprecated, and the client will use the sum of all
    * cluster weights. It is up to the management server to supply the correct weights.
+   * @deprecated
    */
   'total_weight'?: (_google_protobuf_UInt32Value | null);
   /**
@@ -274,6 +275,7 @@ export interface WeightedCluster__Output {
    * value, if this is greater than 0.
    * This field is now deprecated, and the client will use the sum of all
    * cluster weights. It is up to the management server to supply the correct weights.
+   * @deprecated
    */
   'total_weight': (_google_protobuf_UInt32Value__Output | null);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/AccessLogCommon.ts b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/AccessLogCommon.ts
index 7679dfac1..7ca3c5b19 100644
--- a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/AccessLogCommon.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/AccessLogCommon.ts
@@ -7,7 +7,7 @@ import type { Duration as _google_protobuf_Duration, Duration__Output as _google
 import type { ResponseFlags as _envoy_data_accesslog_v3_ResponseFlags, ResponseFlags__Output as _envoy_data_accesslog_v3_ResponseFlags__Output } from '../../../../envoy/data/accesslog/v3/ResponseFlags';
 import type { Metadata as _envoy_config_core_v3_Metadata, Metadata__Output as _envoy_config_core_v3_Metadata__Output } from '../../../../envoy/config/core/v3/Metadata';
 import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../../google/protobuf/Any';
-import type { AccessLogType as _envoy_data_accesslog_v3_AccessLogType } from '../../../../envoy/data/accesslog/v3/AccessLogType';
+import type { AccessLogType as _envoy_data_accesslog_v3_AccessLogType, AccessLogType__Output as _envoy_data_accesslog_v3_AccessLogType__Output } from '../../../../envoy/data/accesslog/v3/AccessLogType';
 import type { Long } from '@grpc/proto-loader';
 
 /**
@@ -176,6 +176,7 @@ export interface AccessLogCommon {
    * 
    * This field is deprecated in favor of ``access_log_type`` for better indication of the
    * type of the access log record.
+   * @deprecated
    */
   'intermediate_log_entry'?: (boolean);
   /**
@@ -212,7 +213,7 @@ export interface AccessLogCommon {
    * For more information about how access log behaves and when it is being recorded,
    * please refer to :ref:`access logging <arch_overview_access_logs>`.
    */
-  'access_log_type'?: (_envoy_data_accesslog_v3_AccessLogType | keyof typeof _envoy_data_accesslog_v3_AccessLogType);
+  'access_log_type'?: (_envoy_data_accesslog_v3_AccessLogType);
 }
 
 /**
@@ -381,6 +382,7 @@ export interface AccessLogCommon__Output {
    * 
    * This field is deprecated in favor of ``access_log_type`` for better indication of the
    * type of the access log record.
+   * @deprecated
    */
   'intermediate_log_entry': (boolean);
   /**
@@ -417,5 +419,5 @@ export interface AccessLogCommon__Output {
    * For more information about how access log behaves and when it is being recorded,
    * please refer to :ref:`access logging <arch_overview_access_logs>`.
    */
-  'access_log_type': (keyof typeof _envoy_data_accesslog_v3_AccessLogType);
+  'access_log_type': (_envoy_data_accesslog_v3_AccessLogType__Output);
 }
diff --git a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/AccessLogType.ts b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/AccessLogType.ts
index a50bb42c1..29ee32f5a 100644
--- a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/AccessLogType.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/AccessLogType.ts
@@ -1,15 +1,41 @@
 // Original file: deps/envoy-api/envoy/data/accesslog/v3/accesslog.proto
 
-export enum AccessLogType {
-  NotSet = 0,
-  TcpUpstreamConnected = 1,
-  TcpPeriodic = 2,
-  TcpConnectionEnd = 3,
-  DownstreamStart = 4,
-  DownstreamPeriodic = 5,
-  DownstreamEnd = 6,
-  UpstreamPoolReady = 7,
-  UpstreamPeriodic = 8,
-  UpstreamEnd = 9,
-  DownstreamTunnelSuccessfullyEstablished = 10,
-}
+export const AccessLogType = {
+  NotSet: 'NotSet',
+  TcpUpstreamConnected: 'TcpUpstreamConnected',
+  TcpPeriodic: 'TcpPeriodic',
+  TcpConnectionEnd: 'TcpConnectionEnd',
+  DownstreamStart: 'DownstreamStart',
+  DownstreamPeriodic: 'DownstreamPeriodic',
+  DownstreamEnd: 'DownstreamEnd',
+  UpstreamPoolReady: 'UpstreamPoolReady',
+  UpstreamPeriodic: 'UpstreamPeriodic',
+  UpstreamEnd: 'UpstreamEnd',
+  DownstreamTunnelSuccessfullyEstablished: 'DownstreamTunnelSuccessfullyEstablished',
+} as const;
+
+export type AccessLogType =
+  | 'NotSet'
+  | 0
+  | 'TcpUpstreamConnected'
+  | 1
+  | 'TcpPeriodic'
+  | 2
+  | 'TcpConnectionEnd'
+  | 3
+  | 'DownstreamStart'
+  | 4
+  | 'DownstreamPeriodic'
+  | 5
+  | 'DownstreamEnd'
+  | 6
+  | 'UpstreamPoolReady'
+  | 7
+  | 'UpstreamPeriodic'
+  | 8
+  | 'UpstreamEnd'
+  | 9
+  | 'DownstreamTunnelSuccessfullyEstablished'
+  | 10
+
+export type AccessLogType__Output = typeof AccessLogType[keyof typeof AccessLogType]
diff --git a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/HTTPAccessLogEntry.ts b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/HTTPAccessLogEntry.ts
index 760954bb1..31daac364 100644
--- a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/HTTPAccessLogEntry.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/HTTPAccessLogEntry.ts
@@ -9,20 +9,40 @@ import type { HTTPResponseProperties as _envoy_data_accesslog_v3_HTTPResponsePro
 /**
  * HTTP version
  */
-export enum _envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion {
-  PROTOCOL_UNSPECIFIED = 0,
-  HTTP10 = 1,
-  HTTP11 = 2,
-  HTTP2 = 3,
-  HTTP3 = 4,
-}
+export const _envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion = {
+  PROTOCOL_UNSPECIFIED: 'PROTOCOL_UNSPECIFIED',
+  HTTP10: 'HTTP10',
+  HTTP11: 'HTTP11',
+  HTTP2: 'HTTP2',
+  HTTP3: 'HTTP3',
+} as const;
+
+/**
+ * HTTP version
+ */
+export type _envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion =
+  | 'PROTOCOL_UNSPECIFIED'
+  | 0
+  | 'HTTP10'
+  | 1
+  | 'HTTP11'
+  | 2
+  | 'HTTP2'
+  | 3
+  | 'HTTP3'
+  | 4
+
+/**
+ * HTTP version
+ */
+export type _envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion__Output = typeof _envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion[keyof typeof _envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion]
 
 export interface HTTPAccessLogEntry {
   /**
    * Common properties shared by all Envoy access logs.
    */
   'common_properties'?: (_envoy_data_accesslog_v3_AccessLogCommon | null);
-  'protocol_version'?: (_envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion | keyof typeof _envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion);
+  'protocol_version'?: (_envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion);
   /**
    * Description of the incoming HTTP request.
    */
@@ -38,7 +58,7 @@ export interface HTTPAccessLogEntry__Output {
    * Common properties shared by all Envoy access logs.
    */
   'common_properties': (_envoy_data_accesslog_v3_AccessLogCommon__Output | null);
-  'protocol_version': (keyof typeof _envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion);
+  'protocol_version': (_envoy_data_accesslog_v3_HTTPAccessLogEntry_HTTPVersion__Output);
   /**
    * Description of the incoming HTTP request.
    */
diff --git a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/HTTPRequestProperties.ts b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/HTTPRequestProperties.ts
index 9e145503c..f1271ba16 100644
--- a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/HTTPRequestProperties.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/HTTPRequestProperties.ts
@@ -1,6 +1,6 @@
 // Original file: deps/envoy-api/envoy/data/accesslog/v3/accesslog.proto
 
-import type { RequestMethod as _envoy_config_core_v3_RequestMethod } from '../../../../envoy/config/core/v3/RequestMethod';
+import type { RequestMethod as _envoy_config_core_v3_RequestMethod, RequestMethod__Output as _envoy_config_core_v3_RequestMethod__Output } from '../../../../envoy/config/core/v3/RequestMethod';
 import type { UInt32Value as _google_protobuf_UInt32Value, UInt32Value__Output as _google_protobuf_UInt32Value__Output } from '../../../../google/protobuf/UInt32Value';
 import type { Long } from '@grpc/proto-loader';
 
@@ -11,7 +11,7 @@ export interface HTTPRequestProperties {
   /**
    * The request method (RFC 7231/2616).
    */
-  'request_method'?: (_envoy_config_core_v3_RequestMethod | keyof typeof _envoy_config_core_v3_RequestMethod);
+  'request_method'?: (_envoy_config_core_v3_RequestMethod);
   /**
    * The scheme portion of the incoming request URI.
    */
@@ -90,7 +90,7 @@ export interface HTTPRequestProperties__Output {
   /**
    * The request method (RFC 7231/2616).
    */
-  'request_method': (keyof typeof _envoy_config_core_v3_RequestMethod);
+  'request_method': (_envoy_config_core_v3_RequestMethod__Output);
   /**
    * The scheme portion of the incoming request URI.
    */
diff --git a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/ResponseFlags.ts b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/ResponseFlags.ts
index ec45824b3..f42e11ee3 100644
--- a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/ResponseFlags.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/ResponseFlags.ts
@@ -6,20 +6,37 @@
 /**
  * Reasons why the request was unauthorized
  */
-export enum _envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason {
-  REASON_UNSPECIFIED = 0,
+export const _envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason = {
+  REASON_UNSPECIFIED: 'REASON_UNSPECIFIED',
   /**
    * The request was denied by the external authorization service.
    */
-  EXTERNAL_SERVICE = 1,
-}
+  EXTERNAL_SERVICE: 'EXTERNAL_SERVICE',
+} as const;
+
+/**
+ * Reasons why the request was unauthorized
+ */
+export type _envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason =
+  | 'REASON_UNSPECIFIED'
+  | 0
+  /**
+   * The request was denied by the external authorization service.
+   */
+  | 'EXTERNAL_SERVICE'
+  | 1
+
+/**
+ * Reasons why the request was unauthorized
+ */
+export type _envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason__Output = typeof _envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason[keyof typeof _envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason]
 
 export interface _envoy_data_accesslog_v3_ResponseFlags_Unauthorized {
-  'reason'?: (_envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason | keyof typeof _envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason);
+  'reason'?: (_envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason);
 }
 
 export interface _envoy_data_accesslog_v3_ResponseFlags_Unauthorized__Output {
-  'reason': (keyof typeof _envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason);
+  'reason': (_envoy_data_accesslog_v3_ResponseFlags_Unauthorized_Reason__Output);
 }
 
 /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/TLSProperties.ts b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/TLSProperties.ts
index 106d24d09..ddeb9a1ae 100644
--- a/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/TLSProperties.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/data/accesslog/v3/TLSProperties.ts
@@ -44,13 +44,27 @@ export interface _envoy_data_accesslog_v3_TLSProperties_CertificateProperties_Su
 
 // Original file: deps/envoy-api/envoy/data/accesslog/v3/accesslog.proto
 
-export enum _envoy_data_accesslog_v3_TLSProperties_TLSVersion {
-  VERSION_UNSPECIFIED = 0,
-  TLSv1 = 1,
-  TLSv1_1 = 2,
-  TLSv1_2 = 3,
-  TLSv1_3 = 4,
-}
+export const _envoy_data_accesslog_v3_TLSProperties_TLSVersion = {
+  VERSION_UNSPECIFIED: 'VERSION_UNSPECIFIED',
+  TLSv1: 'TLSv1',
+  TLSv1_1: 'TLSv1_1',
+  TLSv1_2: 'TLSv1_2',
+  TLSv1_3: 'TLSv1_3',
+} as const;
+
+export type _envoy_data_accesslog_v3_TLSProperties_TLSVersion =
+  | 'VERSION_UNSPECIFIED'
+  | 0
+  | 'TLSv1'
+  | 1
+  | 'TLSv1_1'
+  | 2
+  | 'TLSv1_2'
+  | 3
+  | 'TLSv1_3'
+  | 4
+
+export type _envoy_data_accesslog_v3_TLSProperties_TLSVersion__Output = typeof _envoy_data_accesslog_v3_TLSProperties_TLSVersion[keyof typeof _envoy_data_accesslog_v3_TLSProperties_TLSVersion]
 
 /**
  * Properties of a negotiated TLS connection.
@@ -60,7 +74,7 @@ export interface TLSProperties {
   /**
    * Version of TLS that was negotiated.
    */
-  'tls_version'?: (_envoy_data_accesslog_v3_TLSProperties_TLSVersion | keyof typeof _envoy_data_accesslog_v3_TLSProperties_TLSVersion);
+  'tls_version'?: (_envoy_data_accesslog_v3_TLSProperties_TLSVersion);
   /**
    * TLS cipher suite negotiated during handshake. The value is a
    * four-digit hex code defined by the IANA TLS Cipher Suite Registry
@@ -99,7 +113,7 @@ export interface TLSProperties__Output {
   /**
    * Version of TLS that was negotiated.
    */
-  'tls_version': (keyof typeof _envoy_data_accesslog_v3_TLSProperties_TLSVersion);
+  'tls_version': (_envoy_data_accesslog_v3_TLSProperties_TLSVersion__Output);
   /**
    * TLS cipher suite negotiated during handshake. The value is a
    * four-digit hex code defined by the IANA TLS Cipher Suite Registry
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/filters/common/fault/v3/FaultDelay.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/filters/common/fault/v3/FaultDelay.ts
index bec0403e4..e070ae913 100644
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/filters/common/fault/v3/FaultDelay.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/extensions/filters/common/fault/v3/FaultDelay.ts
@@ -5,12 +5,21 @@ import type { FractionalPercent as _envoy_type_v3_FractionalPercent, FractionalP
 
 // Original file: deps/envoy-api/envoy/extensions/filters/common/fault/v3/fault.proto
 
-export enum _envoy_extensions_filters_common_fault_v3_FaultDelay_FaultDelayType {
+export const _envoy_extensions_filters_common_fault_v3_FaultDelay_FaultDelayType = {
   /**
    * Unused and deprecated.
    */
-  FIXED = 0,
-}
+  FIXED: 'FIXED',
+} as const;
+
+export type _envoy_extensions_filters_common_fault_v3_FaultDelay_FaultDelayType =
+  /**
+   * Unused and deprecated.
+   */
+  | 'FIXED'
+  | 0
+
+export type _envoy_extensions_filters_common_fault_v3_FaultDelay_FaultDelayType__Output = typeof _envoy_extensions_filters_common_fault_v3_FaultDelay_FaultDelayType[keyof typeof _envoy_extensions_filters_common_fault_v3_FaultDelay_FaultDelayType]
 
 /**
  * Fault delays are controlled via an HTTP header (if applicable). See the
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/filters/network/http_connection_manager/v3/HttpConnectionManager.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/filters/network/http_connection_manager/v3/HttpConnectionManager.ts
index 1b4f36fd8..1a452635c 100644
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/filters/network/http_connection_manager/v3/HttpConnectionManager.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/extensions/filters/network/http_connection_manager/v3/HttpConnectionManager.ts
@@ -24,7 +24,7 @@ import type { PathTransformation as _envoy_type_http_v3_PathTransformation, Path
 
 // Original file: deps/envoy-api/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto
 
-export enum _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType {
+export const _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType = {
   /**
    * For every new connection, the connection manager will determine which
    * codec to use. This mode supports both ALPN for TLS listeners as well as
@@ -32,24 +32,56 @@ export enum _envoy_extensions_filters_network_http_connection_manager_v3_HttpCon
    * is preferred, otherwise protocol inference is used. In almost all cases,
    * this is the right option to choose for this setting.
    */
-  AUTO = 0,
+  AUTO: 'AUTO',
   /**
    * The connection manager will assume that the client is speaking HTTP/1.1.
    */
-  HTTP1 = 1,
+  HTTP1: 'HTTP1',
   /**
    * The connection manager will assume that the client is speaking HTTP/2
    * (Envoy does not require HTTP/2 to take place over TLS or to use ALPN.
    * Prior knowledge is allowed).
    */
-  HTTP2 = 2,
+  HTTP2: 'HTTP2',
   /**
    * [#not-implemented-hide:] QUIC implementation is not production ready yet. Use this enum with
    * caution to prevent accidental execution of QUIC code. I.e. `!= HTTP2` is no longer sufficient
    * to distinguish HTTP1 and HTTP2 traffic.
    */
-  HTTP3 = 3,
-}
+  HTTP3: 'HTTP3',
+} as const;
+
+export type _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType =
+  /**
+   * For every new connection, the connection manager will determine which
+   * codec to use. This mode supports both ALPN for TLS listeners as well as
+   * protocol inference for plaintext listeners. If ALPN data is available, it
+   * is preferred, otherwise protocol inference is used. In almost all cases,
+   * this is the right option to choose for this setting.
+   */
+  | 'AUTO'
+  | 0
+  /**
+   * The connection manager will assume that the client is speaking HTTP/1.1.
+   */
+  | 'HTTP1'
+  | 1
+  /**
+   * The connection manager will assume that the client is speaking HTTP/2
+   * (Envoy does not require HTTP/2 to take place over TLS or to use ALPN.
+   * Prior knowledge is allowed).
+   */
+  | 'HTTP2'
+  | 2
+  /**
+   * [#not-implemented-hide:] QUIC implementation is not production ready yet. Use this enum with
+   * caution to prevent accidental execution of QUIC code. I.e. `!= HTTP2` is no longer sufficient
+   * to distinguish HTTP1 and HTTP2 traffic.
+   */
+  | 'HTTP3'
+  | 3
+
+export type _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType__Output = typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType[keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType]
 
 // Original file: deps/envoy-api/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto
 
@@ -57,32 +89,73 @@ export enum _envoy_extensions_filters_network_http_connection_manager_v3_HttpCon
  * How to handle the :ref:`config_http_conn_man_headers_x-forwarded-client-cert` (XFCC) HTTP
  * header.
  */
-export enum _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails {
+export const _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails = {
   /**
    * Do not send the XFCC header to the next hop. This is the default value.
    */
-  SANITIZE = 0,
+  SANITIZE: 'SANITIZE',
   /**
    * When the client connection is mTLS (Mutual TLS), forward the XFCC header
    * in the request.
    */
-  FORWARD_ONLY = 1,
+  FORWARD_ONLY: 'FORWARD_ONLY',
   /**
    * When the client connection is mTLS, append the client certificate
    * information to the request’s XFCC header and forward it.
    */
-  APPEND_FORWARD = 2,
+  APPEND_FORWARD: 'APPEND_FORWARD',
   /**
    * When the client connection is mTLS, reset the XFCC header with the client
    * certificate information and send it to the next hop.
    */
-  SANITIZE_SET = 3,
+  SANITIZE_SET: 'SANITIZE_SET',
   /**
    * Always forward the XFCC header in the request, regardless of whether the
    * client connection is mTLS.
    */
-  ALWAYS_FORWARD_ONLY = 4,
-}
+  ALWAYS_FORWARD_ONLY: 'ALWAYS_FORWARD_ONLY',
+} as const;
+
+/**
+ * How to handle the :ref:`config_http_conn_man_headers_x-forwarded-client-cert` (XFCC) HTTP
+ * header.
+ */
+export type _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails =
+  /**
+   * Do not send the XFCC header to the next hop. This is the default value.
+   */
+  | 'SANITIZE'
+  | 0
+  /**
+   * When the client connection is mTLS (Mutual TLS), forward the XFCC header
+   * in the request.
+   */
+  | 'FORWARD_ONLY'
+  | 1
+  /**
+   * When the client connection is mTLS, append the client certificate
+   * information to the request’s XFCC header and forward it.
+   */
+  | 'APPEND_FORWARD'
+  | 2
+  /**
+   * When the client connection is mTLS, reset the XFCC header with the client
+   * certificate information and send it to the next hop.
+   */
+  | 'SANITIZE_SET'
+  | 3
+  /**
+   * Always forward the XFCC header in the request, regardless of whether the
+   * client connection is mTLS.
+   */
+  | 'ALWAYS_FORWARD_ONLY'
+  | 4
+
+/**
+ * How to handle the :ref:`config_http_conn_man_headers_x-forwarded-client-cert` (XFCC) HTTP
+ * header.
+ */
+export type _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails__Output = typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails[keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails]
 
 export interface _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_HcmAccessLogOptions {
   /**
@@ -162,16 +235,30 @@ export interface _envoy_extensions_filters_network_http_connection_manager_v3_Ht
 
 // Original file: deps/envoy-api/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto
 
-export enum _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_Tracing_OperationName {
+export const _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_Tracing_OperationName = {
   /**
    * The HTTP listener is used for ingress/incoming requests.
    */
-  INGRESS = 0,
+  INGRESS: 'INGRESS',
   /**
    * The HTTP listener is used for egress/outgoing requests.
    */
-  EGRESS = 1,
-}
+  EGRESS: 'EGRESS',
+} as const;
+
+export type _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_Tracing_OperationName =
+  /**
+   * The HTTP listener is used for ingress/incoming requests.
+   */
+  | 'INGRESS'
+  | 0
+  /**
+   * The HTTP listener is used for egress/outgoing requests.
+   */
+  | 'EGRESS'
+  | 1
+
+export type _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_Tracing_OperationName__Output = typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_Tracing_OperationName[keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_Tracing_OperationName]
 
 /**
  * [#not-implemented-hide:] Transformations that apply to path headers. Transformations are applied
@@ -253,22 +340,22 @@ export interface _envoy_extensions_filters_network_http_connection_manager_v3_Ht
  * Determines the action for request that contain %2F, %2f, %5C or %5c sequences in the URI path.
  * This operation occurs before URL normalization and the merge slashes transformations if they were enabled.
  */
-export enum _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction {
+export const _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction = {
   /**
    * Default behavior specific to implementation (i.e. Envoy) of this configuration option.
    * Envoy, by default, takes the KEEP_UNCHANGED action.
    * NOTE: the implementation may change the default behavior at-will.
    */
-  IMPLEMENTATION_SPECIFIC_DEFAULT = 0,
+  IMPLEMENTATION_SPECIFIC_DEFAULT: 'IMPLEMENTATION_SPECIFIC_DEFAULT',
   /**
    * Keep escaped slashes.
    */
-  KEEP_UNCHANGED = 1,
+  KEEP_UNCHANGED: 'KEEP_UNCHANGED',
   /**
    * Reject client request with the 400 status. gRPC requests will be rejected with the INTERNAL (13) error code.
    * The "httpN.downstream_rq_failed_path_normalization" counter is incremented for each rejected request.
    */
-  REJECT_REQUEST = 2,
+  REJECT_REQUEST: 'REJECT_REQUEST',
   /**
    * Unescape %2F and %5C sequences and redirect request to the new path if these sequences were present.
    * Redirect occurs after path normalization and merge slashes transformations if they were configured.
@@ -278,14 +365,62 @@ export enum _envoy_extensions_filters_network_http_connection_manager_v3_HttpCon
    * The "httpN.downstream_rq_redirected_with_normalized_path" counter is incremented for each
    * redirected request.
    */
-  UNESCAPE_AND_REDIRECT = 3,
+  UNESCAPE_AND_REDIRECT: 'UNESCAPE_AND_REDIRECT',
   /**
    * Unescape %2F and %5C sequences.
    * Note: this option should not be enabled if intermediaries perform path based access control as
    * it may lead to path confusion vulnerabilities.
    */
-  UNESCAPE_AND_FORWARD = 4,
-}
+  UNESCAPE_AND_FORWARD: 'UNESCAPE_AND_FORWARD',
+} as const;
+
+/**
+ * Determines the action for request that contain %2F, %2f, %5C or %5c sequences in the URI path.
+ * This operation occurs before URL normalization and the merge slashes transformations if they were enabled.
+ */
+export type _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction =
+  /**
+   * Default behavior specific to implementation (i.e. Envoy) of this configuration option.
+   * Envoy, by default, takes the KEEP_UNCHANGED action.
+   * NOTE: the implementation may change the default behavior at-will.
+   */
+  | 'IMPLEMENTATION_SPECIFIC_DEFAULT'
+  | 0
+  /**
+   * Keep escaped slashes.
+   */
+  | 'KEEP_UNCHANGED'
+  | 1
+  /**
+   * Reject client request with the 400 status. gRPC requests will be rejected with the INTERNAL (13) error code.
+   * The "httpN.downstream_rq_failed_path_normalization" counter is incremented for each rejected request.
+   */
+  | 'REJECT_REQUEST'
+  | 2
+  /**
+   * Unescape %2F and %5C sequences and redirect request to the new path if these sequences were present.
+   * Redirect occurs after path normalization and merge slashes transformations if they were configured.
+   * NOTE: gRPC requests will be rejected with the INTERNAL (13) error code.
+   * This option minimizes possibility of path confusion exploits by forcing request with unescaped slashes to
+   * traverse all parties: downstream client, intermediate proxies, Envoy and upstream server.
+   * The "httpN.downstream_rq_redirected_with_normalized_path" counter is incremented for each
+   * redirected request.
+   */
+  | 'UNESCAPE_AND_REDIRECT'
+  | 3
+  /**
+   * Unescape %2F and %5C sequences.
+   * Note: this option should not be enabled if intermediaries perform path based access control as
+   * it may lead to path confusion vulnerabilities.
+   */
+  | 'UNESCAPE_AND_FORWARD'
+  | 4
+
+/**
+ * Determines the action for request that contain %2F, %2f, %5C or %5c sequences in the URI path.
+ * This operation occurs before URL normalization and the merge slashes transformations if they were enabled.
+ */
+export type _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction__Output = typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction[keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction]
 
 /**
  * Configures the manner in which the Proxy-Status HTTP response header is
@@ -405,22 +540,43 @@ export interface _envoy_extensions_filters_network_http_connection_manager_v3_Ht
 
 // Original file: deps/envoy-api/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto
 
-export enum _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation {
+export const _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation = {
   /**
    * Overwrite any Server header with the contents of server_name.
    */
-  OVERWRITE = 0,
+  OVERWRITE: 'OVERWRITE',
   /**
    * If no Server header is present, append Server server_name
    * If a Server header is present, pass it through.
    */
-  APPEND_IF_ABSENT = 1,
+  APPEND_IF_ABSENT: 'APPEND_IF_ABSENT',
   /**
    * Pass through the value of the server header, and do not append a header
    * if none is present.
    */
-  PASS_THROUGH = 2,
-}
+  PASS_THROUGH: 'PASS_THROUGH',
+} as const;
+
+export type _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation =
+  /**
+   * Overwrite any Server header with the contents of server_name.
+   */
+  | 'OVERWRITE'
+  | 0
+  /**
+   * If no Server header is present, append Server server_name
+   * If a Server header is present, pass it through.
+   */
+  | 'APPEND_IF_ABSENT'
+  | 1
+  /**
+   * Pass through the value of the server header, and do not append a header
+   * if none is present.
+   */
+  | 'PASS_THROUGH'
+  | 2
+
+export type _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation__Output = typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation[keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation]
 
 /**
  * [#next-free-field: 7]
@@ -693,7 +849,7 @@ export interface HttpConnectionManager {
   /**
    * Supplies the type of codec that the connection manager should use.
    */
-  'codec_type'?: (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType | keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType);
+  'codec_type'?: (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType);
   /**
    * The human readable prefix to use when emitting statistics for the
    * connection manager. See the :ref:`statistics documentation <config_http_conn_man_stats>` for
@@ -781,7 +937,7 @@ export interface HttpConnectionManager {
    * How to handle the :ref:`config_http_conn_man_headers_x-forwarded-client-cert` (XFCC) HTTP
    * header.
    */
-  'forward_client_cert_details'?: (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails | keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails);
+  'forward_client_cert_details'?: (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails);
   /**
    * This field is valid only when :ref:`forward_client_cert_details
    * <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.forward_client_cert_details>`
@@ -981,7 +1137,7 @@ export interface HttpConnectionManager {
    * By default, Envoy will overwrite the header with the value specified in
    * server_name.
    */
-  'server_header_transformation'?: (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation | keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation);
+  'server_header_transformation'?: (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation);
   /**
    * Additional settings for HTTP requests handled by the connection manager. These will be
    * applicable to both HTTP1 and HTTP2 requests.
@@ -1092,7 +1248,7 @@ export interface HttpConnectionManager {
    * :ref:`header validation configuration <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.typed_header_validation_config>`
    * is present.]
    */
-  'path_with_escaped_slashes_action'?: (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction | keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction);
+  'path_with_escaped_slashes_action'?: (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction);
   /**
    * The configuration for the original IP detection extensions.
    * 
@@ -1190,6 +1346,7 @@ export interface HttpConnectionManager {
    * Note that if both this field and :ref:`access_log_flush_interval
    * <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.HcmAccessLogOptions.access_log_flush_interval>`
    * are specified, the former (deprecated field) is ignored.
+   * @deprecated
    */
   'access_log_flush_interval'?: (_google_protobuf_Duration | null);
   /**
@@ -1200,6 +1357,7 @@ export interface HttpConnectionManager {
    * Note that if both this field and :ref:`flush_access_log_on_new_request
    * <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.HcmAccessLogOptions.flush_access_log_on_new_request>`
    * are specified, the former (deprecated field) is ignored.
+   * @deprecated
    */
   'flush_access_log_on_new_request'?: (boolean);
   /**
@@ -1217,7 +1375,7 @@ export interface HttpConnectionManager__Output {
   /**
    * Supplies the type of codec that the connection manager should use.
    */
-  'codec_type': (keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType);
+  'codec_type': (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_CodecType__Output);
   /**
    * The human readable prefix to use when emitting statistics for the
    * connection manager. See the :ref:`statistics documentation <config_http_conn_man_stats>` for
@@ -1305,7 +1463,7 @@ export interface HttpConnectionManager__Output {
    * How to handle the :ref:`config_http_conn_man_headers_x-forwarded-client-cert` (XFCC) HTTP
    * header.
    */
-  'forward_client_cert_details': (keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails);
+  'forward_client_cert_details': (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ForwardClientCertDetails__Output);
   /**
    * This field is valid only when :ref:`forward_client_cert_details
    * <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.forward_client_cert_details>`
@@ -1505,7 +1663,7 @@ export interface HttpConnectionManager__Output {
    * By default, Envoy will overwrite the header with the value specified in
    * server_name.
    */
-  'server_header_transformation': (keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation);
+  'server_header_transformation': (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_ServerHeaderTransformation__Output);
   /**
    * Additional settings for HTTP requests handled by the connection manager. These will be
    * applicable to both HTTP1 and HTTP2 requests.
@@ -1616,7 +1774,7 @@ export interface HttpConnectionManager__Output {
    * :ref:`header validation configuration <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.typed_header_validation_config>`
    * is present.]
    */
-  'path_with_escaped_slashes_action': (keyof typeof _envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction);
+  'path_with_escaped_slashes_action': (_envoy_extensions_filters_network_http_connection_manager_v3_HttpConnectionManager_PathWithEscapedSlashesAction__Output);
   /**
    * The configuration for the original IP detection extensions.
    * 
@@ -1714,6 +1872,7 @@ export interface HttpConnectionManager__Output {
    * Note that if both this field and :ref:`access_log_flush_interval
    * <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.HcmAccessLogOptions.access_log_flush_interval>`
    * are specified, the former (deprecated field) is ignored.
+   * @deprecated
    */
   'access_log_flush_interval': (_google_protobuf_Duration__Output | null);
   /**
@@ -1724,6 +1883,7 @@ export interface HttpConnectionManager__Output {
    * Note that if both this field and :ref:`flush_access_log_on_new_request
    * <envoy_v3_api_field_extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.HcmAccessLogOptions.flush_access_log_on_new_request>`
    * are specified, the former (deprecated field) is ignored.
+   * @deprecated
    */
   'flush_access_log_on_new_request': (boolean);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/load_balancing_policies/common/v3/LocalityLbConfig.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/load_balancing_policies/common/v3/LocalityLbConfig.ts
index d6fecd36b..4e3d9659e 100644
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/load_balancing_policies/common/v3/LocalityLbConfig.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/extensions/load_balancing_policies/common/v3/LocalityLbConfig.ts
@@ -2,7 +2,6 @@
 
 import type { Percent as _envoy_type_v3_Percent, Percent__Output as _envoy_type_v3_Percent__Output } from '../../../../../envoy/type/v3/Percent';
 import type { UInt64Value as _google_protobuf_UInt64Value, UInt64Value__Output as _google_protobuf_UInt64Value__Output } from '../../../../../google/protobuf/UInt64Value';
-import type { Long } from '@grpc/proto-loader';
 
 /**
  * Configuration for :ref:`locality weighted load balancing
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/load_balancing_policies/ring_hash/v3/RingHash.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/load_balancing_policies/ring_hash/v3/RingHash.ts
index 4e2a73031..d8156fe0f 100644
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/load_balancing_policies/ring_hash/v3/RingHash.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/extensions/load_balancing_policies/ring_hash/v3/RingHash.ts
@@ -4,29 +4,55 @@ import type { UInt64Value as _google_protobuf_UInt64Value, UInt64Value__Output a
 import type { UInt32Value as _google_protobuf_UInt32Value, UInt32Value__Output as _google_protobuf_UInt32Value__Output } from '../../../../../google/protobuf/UInt32Value';
 import type { ConsistentHashingLbConfig as _envoy_extensions_load_balancing_policies_common_v3_ConsistentHashingLbConfig, ConsistentHashingLbConfig__Output as _envoy_extensions_load_balancing_policies_common_v3_ConsistentHashingLbConfig__Output } from '../../../../../envoy/extensions/load_balancing_policies/common/v3/ConsistentHashingLbConfig';
 import type { _envoy_extensions_load_balancing_policies_common_v3_LocalityLbConfig_LocalityWeightedLbConfig, _envoy_extensions_load_balancing_policies_common_v3_LocalityLbConfig_LocalityWeightedLbConfig__Output } from '../../../../../envoy/extensions/load_balancing_policies/common/v3/LocalityLbConfig';
-import type { Long } from '@grpc/proto-loader';
 
 // Original file: deps/envoy-api/envoy/extensions/load_balancing_policies/ring_hash/v3/ring_hash.proto
 
 /**
  * The hash function used to hash hosts onto the ketama ring.
  */
-export enum _envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction {
+export const _envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction = {
   /**
    * Currently defaults to XX_HASH.
    */
-  DEFAULT_HASH = 0,
+  DEFAULT_HASH: 'DEFAULT_HASH',
   /**
    * Use `xxHash <https://github.com/Cyan4973/xxHash>`_.
    */
-  XX_HASH = 1,
+  XX_HASH: 'XX_HASH',
   /**
    * Use `MurmurHash2 <https://sites.google.com/site/murmurhash/>`_, this is compatible with
    * std:hash<string> in GNU libstdc++ 3.4.20 or above. This is typically the case when compiled
    * on Linux and not macOS.
    */
-  MURMUR_HASH_2 = 2,
-}
+  MURMUR_HASH_2: 'MURMUR_HASH_2',
+} as const;
+
+/**
+ * The hash function used to hash hosts onto the ketama ring.
+ */
+export type _envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction =
+  /**
+   * Currently defaults to XX_HASH.
+   */
+  | 'DEFAULT_HASH'
+  | 0
+  /**
+   * Use `xxHash <https://github.com/Cyan4973/xxHash>`_.
+   */
+  | 'XX_HASH'
+  | 1
+  /**
+   * Use `MurmurHash2 <https://sites.google.com/site/murmurhash/>`_, this is compatible with
+   * std:hash<string> in GNU libstdc++ 3.4.20 or above. This is typically the case when compiled
+   * on Linux and not macOS.
+   */
+  | 'MURMUR_HASH_2'
+  | 2
+
+/**
+ * The hash function used to hash hosts onto the ketama ring.
+ */
+export type _envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction__Output = typeof _envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction[keyof typeof _envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction]
 
 /**
  * This configuration allows the built-in RING_HASH LB policy to be configured via the LB policy
@@ -39,7 +65,7 @@ export interface RingHash {
    * The hash function used to hash hosts onto the ketama ring. The value defaults to
    * :ref:`XX_HASH<envoy_v3_api_enum_value_config.cluster.v3.Cluster.RingHashLbConfig.HashFunction.XX_HASH>`.
    */
-  'hash_function'?: (_envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction | keyof typeof _envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction);
+  'hash_function'?: (_envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction);
   /**
    * Minimum hash ring size. The larger the ring is (that is, the more hashes there are for each
    * provided host) the better the request distribution will reflect the desired weights. Defaults
@@ -60,6 +86,7 @@ export interface RingHash {
    * ..note::
    * This is deprecated and please use :ref:`consistent_hashing_lb_config
    * <envoy_v3_api_field_extensions.load_balancing_policies.ring_hash.v3.RingHash.consistent_hashing_lb_config>` instead.
+   * @deprecated
    */
   'use_hostname_for_hashing'?: (boolean);
   /**
@@ -83,6 +110,7 @@ export interface RingHash {
    * ..note::
    * This is deprecated and please use :ref:`consistent_hashing_lb_config
    * <envoy_v3_api_field_extensions.load_balancing_policies.ring_hash.v3.RingHash.consistent_hashing_lb_config>` instead.
+   * @deprecated
    */
   'hash_balance_factor'?: (_google_protobuf_UInt32Value | null);
   /**
@@ -106,7 +134,7 @@ export interface RingHash__Output {
    * The hash function used to hash hosts onto the ketama ring. The value defaults to
    * :ref:`XX_HASH<envoy_v3_api_enum_value_config.cluster.v3.Cluster.RingHashLbConfig.HashFunction.XX_HASH>`.
    */
-  'hash_function': (keyof typeof _envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction);
+  'hash_function': (_envoy_extensions_load_balancing_policies_ring_hash_v3_RingHash_HashFunction__Output);
   /**
    * Minimum hash ring size. The larger the ring is (that is, the more hashes there are for each
    * provided host) the better the request distribution will reflect the desired weights. Defaults
@@ -127,6 +155,7 @@ export interface RingHash__Output {
    * ..note::
    * This is deprecated and please use :ref:`consistent_hashing_lb_config
    * <envoy_v3_api_field_extensions.load_balancing_policies.ring_hash.v3.RingHash.consistent_hashing_lb_config>` instead.
+   * @deprecated
    */
   'use_hostname_for_hashing': (boolean);
   /**
@@ -150,6 +179,7 @@ export interface RingHash__Output {
    * ..note::
    * This is deprecated and please use :ref:`consistent_hashing_lb_config
    * <envoy_v3_api_field_extensions.load_balancing_policies.ring_hash.v3.RingHash.consistent_hashing_lb_config>` instead.
+   * @deprecated
    */
   'hash_balance_factor': (_google_protobuf_UInt32Value__Output | null);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/CertificateProviderPluginInstance.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/CertificateProviderPluginInstance.ts
deleted file mode 100644
index 3a3100f55..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/CertificateProviderPluginInstance.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/common.proto
-
-
-/**
- * Indicates a certificate to be obtained from a named CertificateProvider plugin instance.
- * The plugin instances are defined in the client's bootstrap file.
- * The plugin allows certificates to be fetched/refreshed over the network asynchronously with
- * respect to the TLS handshake.
- * [#not-implemented-hide:]
- */
-export interface CertificateProviderPluginInstance {
-  /**
-   * Provider instance name. If not present, defaults to "default".
-   * 
-   * Instance names should generally be defined not in terms of the underlying provider
-   * implementation (e.g., "file_watcher") but rather in terms of the function of the
-   * certificates (e.g., "foo_deployment_identity").
-   */
-  'instance_name'?: (string);
-  /**
-   * Opaque name used to specify certificate instances or types. For example, "ROOTCA" to specify
-   * a root-certificate (validation context) or "example.com" to specify a certificate for a
-   * particular domain. Not all provider instances will actually use this field, so the value
-   * defaults to the empty string.
-   */
-  'certificate_name'?: (string);
-}
-
-/**
- * Indicates a certificate to be obtained from a named CertificateProvider plugin instance.
- * The plugin instances are defined in the client's bootstrap file.
- * The plugin allows certificates to be fetched/refreshed over the network asynchronously with
- * respect to the TLS handshake.
- * [#not-implemented-hide:]
- */
-export interface CertificateProviderPluginInstance__Output {
-  /**
-   * Provider instance name. If not present, defaults to "default".
-   * 
-   * Instance names should generally be defined not in terms of the underlying provider
-   * implementation (e.g., "file_watcher") but rather in terms of the function of the
-   * certificates (e.g., "foo_deployment_identity").
-   */
-  'instance_name': (string);
-  /**
-   * Opaque name used to specify certificate instances or types. For example, "ROOTCA" to specify
-   * a root-certificate (validation context) or "example.com" to specify a certificate for a
-   * particular domain. Not all provider instances will actually use this field, so the value
-   * defaults to the empty string.
-   */
-  'certificate_name': (string);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/CertificateValidationContext.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/CertificateValidationContext.ts
deleted file mode 100644
index 379320086..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/CertificateValidationContext.ts
+++ /dev/null
@@ -1,372 +0,0 @@
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/common.proto
-
-import type { DataSource as _envoy_config_core_v3_DataSource, DataSource__Output as _envoy_config_core_v3_DataSource__Output } from '../../../../../envoy/config/core/v3/DataSource';
-import type { BoolValue as _google_protobuf_BoolValue, BoolValue__Output as _google_protobuf_BoolValue__Output } from '../../../../../google/protobuf/BoolValue';
-import type { StringMatcher as _envoy_type_matcher_v3_StringMatcher, StringMatcher__Output as _envoy_type_matcher_v3_StringMatcher__Output } from '../../../../../envoy/type/matcher/v3/StringMatcher';
-import type { WatchedDirectory as _envoy_config_core_v3_WatchedDirectory, WatchedDirectory__Output as _envoy_config_core_v3_WatchedDirectory__Output } from '../../../../../envoy/config/core/v3/WatchedDirectory';
-import type { TypedExtensionConfig as _envoy_config_core_v3_TypedExtensionConfig, TypedExtensionConfig__Output as _envoy_config_core_v3_TypedExtensionConfig__Output } from '../../../../../envoy/config/core/v3/TypedExtensionConfig';
-import type { CertificateProviderPluginInstance as _envoy_extensions_transport_sockets_tls_v3_CertificateProviderPluginInstance, CertificateProviderPluginInstance__Output as _envoy_extensions_transport_sockets_tls_v3_CertificateProviderPluginInstance__Output } from '../../../../../envoy/extensions/transport_sockets/tls/v3/CertificateProviderPluginInstance';
-
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/common.proto
-
-/**
- * Peer certificate verification mode.
- */
-export enum _envoy_extensions_transport_sockets_tls_v3_CertificateValidationContext_TrustChainVerification {
-  /**
-   * Perform default certificate verification (e.g., against CA / verification lists)
-   */
-  VERIFY_TRUST_CHAIN = 0,
-  /**
-   * Connections where the certificate fails verification will be permitted.
-   * For HTTP connections, the result of certificate verification can be used in route matching. (
-   * see :ref:`validated <envoy_v3_api_field_config.route.v3.RouteMatch.TlsContextMatchOptions.validated>` ).
-   */
-  ACCEPT_UNTRUSTED = 1,
-}
-
-/**
- * [#next-free-field: 14]
- */
-export interface CertificateValidationContext {
-  /**
-   * TLS certificate data containing certificate authority certificates to use in verifying
-   * a presented peer certificate (e.g. server certificate for clusters or client certificate
-   * for listeners). If not specified and a peer certificate is presented it will not be
-   * verified. By default, a client certificate is optional, unless one of the additional
-   * options (:ref:`require_client_certificate
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.DownstreamTlsContext.require_client_certificate>`,
-   * :ref:`verify_certificate_spki
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_spki>`,
-   * :ref:`verify_certificate_hash
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_hash>`, or
-   * :ref:`match_subject_alt_names
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.match_subject_alt_names>`) is also
-   * specified.
-   * 
-   * It can optionally contain certificate revocation lists, in which case Envoy will verify
-   * that the presented peer certificate has not been revoked by one of the included CRLs. Note
-   * that if a CRL is provided for any certificate authority in a trust chain, a CRL must be
-   * provided for all certificate authorities in that chain. Failure to do so will result in
-   * verification failure for both revoked and unrevoked certificates from that chain.
-   * 
-   * See :ref:`the TLS overview <arch_overview_ssl_enabling_verification>` for a list of common
-   * system CA locations.
-   * 
-   * If *trusted_ca* is a filesystem path, a watch will be added to the parent
-   * directory for any file moves to support rotation. This currently only
-   * applies to dynamic secrets, when the *CertificateValidationContext* is
-   * delivered via SDS.
-   * 
-   * Only one of *trusted_ca* and *ca_certificate_provider_instance* may be specified.
-   * 
-   * [#next-major-version: This field and watched_directory below should ideally be moved into a
-   * separate sub-message, since there's no point in specifying the latter field without this one.]
-   */
-  'trusted_ca'?: (_envoy_config_core_v3_DataSource | null);
-  /**
-   * An optional list of hex-encoded SHA-256 hashes. If specified, Envoy will verify that
-   * the SHA-256 of the DER-encoded presented certificate matches one of the specified values.
-   * 
-   * A hex-encoded SHA-256 of the certificate can be generated with the following command:
-   * 
-   * .. code-block:: bash
-   * 
-   * $ openssl x509 -in path/to/client.crt -outform DER | openssl dgst -sha256 | cut -d" " -f2
-   * df6ff72fe9116521268f6f2dd4966f51df479883fe7037b39f75916ac3049d1a
-   * 
-   * A long hex-encoded and colon-separated SHA-256 (a.k.a. "fingerprint") of the certificate
-   * can be generated with the following command:
-   * 
-   * .. code-block:: bash
-   * 
-   * $ openssl x509 -in path/to/client.crt -noout -fingerprint -sha256 | cut -d"=" -f2
-   * DF:6F:F7:2F:E9:11:65:21:26:8F:6F:2D:D4:96:6F:51:DF:47:98:83:FE:70:37:B3:9F:75:91:6A:C3:04:9D:1A
-   * 
-   * Both of those formats are acceptable.
-   * 
-   * When both:
-   * :ref:`verify_certificate_hash
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_hash>` and
-   * :ref:`verify_certificate_spki
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_spki>` are specified,
-   * a hash matching value from either of the lists will result in the certificate being accepted.
-   */
-  'verify_certificate_hash'?: (string)[];
-  /**
-   * An optional list of base64-encoded SHA-256 hashes. If specified, Envoy will verify that the
-   * SHA-256 of the DER-encoded Subject Public Key Information (SPKI) of the presented certificate
-   * matches one of the specified values.
-   * 
-   * A base64-encoded SHA-256 of the Subject Public Key Information (SPKI) of the certificate
-   * can be generated with the following command:
-   * 
-   * .. code-block:: bash
-   * 
-   * $ openssl x509 -in path/to/client.crt -noout -pubkey
-   * | openssl pkey -pubin -outform DER
-   * | openssl dgst -sha256 -binary
-   * | openssl enc -base64
-   * NvqYIYSbgK2vCJpQhObf77vv+bQWtc5ek5RIOwPiC9A=
-   * 
-   * This is the format used in HTTP Public Key Pinning.
-   * 
-   * When both:
-   * :ref:`verify_certificate_hash
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_hash>` and
-   * :ref:`verify_certificate_spki
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_spki>` are specified,
-   * a hash matching value from either of the lists will result in the certificate being accepted.
-   * 
-   * .. attention::
-   * 
-   * This option is preferred over :ref:`verify_certificate_hash
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_hash>`,
-   * because SPKI is tied to a private key, so it doesn't change when the certificate
-   * is renewed using the same private key.
-   */
-  'verify_certificate_spki'?: (string)[];
-  /**
-   * [#not-implemented-hide:] Must present signed certificate time-stamp.
-   */
-  'require_signed_certificate_timestamp'?: (_google_protobuf_BoolValue | null);
-  /**
-   * An optional `certificate revocation list
-   * <https://en.wikipedia.org/wiki/Certificate_revocation_list>`_
-   * (in PEM format). If specified, Envoy will verify that the presented peer
-   * certificate has not been revoked by this CRL. If this DataSource contains
-   * multiple CRLs, all of them will be used. Note that if a CRL is provided
-   * for any certificate authority in a trust chain, a CRL must be provided
-   * for all certificate authorities in that chain. Failure to do so will
-   * result in verification failure for both revoked and unrevoked certificates
-   * from that chain.
-   */
-  'crl'?: (_envoy_config_core_v3_DataSource | null);
-  /**
-   * If specified, Envoy will not reject expired certificates.
-   */
-  'allow_expired_certificate'?: (boolean);
-  /**
-   * An optional list of Subject Alternative name matchers. If specified, Envoy will verify that the
-   * Subject Alternative Name of the presented certificate matches one of the specified matchers.
-   * 
-   * When a certificate has wildcard DNS SAN entries, to match a specific client, it should be
-   * configured with exact match type in the :ref:`string matcher <envoy_v3_api_msg_type.matcher.v3.StringMatcher>`.
-   * For example if the certificate has "\*.example.com" as DNS SAN entry, to allow only "api.example.com",
-   * it should be configured as shown below.
-   * 
-   * .. code-block:: yaml
-   * 
-   * match_subject_alt_names:
-   * exact: "api.example.com"
-   * 
-   * .. attention::
-   * 
-   * Subject Alternative Names are easily spoofable and verifying only them is insecure,
-   * therefore this option must be used together with :ref:`trusted_ca
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.trusted_ca>`.
-   */
-  'match_subject_alt_names'?: (_envoy_type_matcher_v3_StringMatcher)[];
-  /**
-   * Certificate trust chain verification mode.
-   */
-  'trust_chain_verification'?: (_envoy_extensions_transport_sockets_tls_v3_CertificateValidationContext_TrustChainVerification | keyof typeof _envoy_extensions_transport_sockets_tls_v3_CertificateValidationContext_TrustChainVerification);
-  /**
-   * If specified, updates of a file-based *trusted_ca* source will be triggered
-   * by this watch. This allows explicit control over the path watched, by
-   * default the parent directory of the filesystem path in *trusted_ca* is
-   * watched if this field is not specified. This only applies when a
-   * *CertificateValidationContext* is delivered by SDS with references to
-   * filesystem paths. See the :ref:`SDS key rotation <sds_key_rotation>`
-   * documentation for further details.
-   */
-  'watched_directory'?: (_envoy_config_core_v3_WatchedDirectory | null);
-  /**
-   * The configuration of an extension specific certificate validator.
-   * If specified, all validation is done by the specified validator,
-   * and the behavior of all other validation settings is defined by the specified validator (and may be entirely ignored, unused, and unvalidated).
-   * Refer to the documentation for the specified validator. If you do not want a custom validation algorithm, do not set this field.
-   * [#extension-category: envoy.tls.cert_validator]
-   */
-  'custom_validator_config'?: (_envoy_config_core_v3_TypedExtensionConfig | null);
-  /**
-   * Certificate provider instance for fetching TLS certificates.
-   * 
-   * Only one of *trusted_ca* and *ca_certificate_provider_instance* may be specified.
-   * [#not-implemented-hide:]
-   */
-  'ca_certificate_provider_instance'?: (_envoy_extensions_transport_sockets_tls_v3_CertificateProviderPluginInstance | null);
-}
-
-/**
- * [#next-free-field: 14]
- */
-export interface CertificateValidationContext__Output {
-  /**
-   * TLS certificate data containing certificate authority certificates to use in verifying
-   * a presented peer certificate (e.g. server certificate for clusters or client certificate
-   * for listeners). If not specified and a peer certificate is presented it will not be
-   * verified. By default, a client certificate is optional, unless one of the additional
-   * options (:ref:`require_client_certificate
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.DownstreamTlsContext.require_client_certificate>`,
-   * :ref:`verify_certificate_spki
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_spki>`,
-   * :ref:`verify_certificate_hash
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_hash>`, or
-   * :ref:`match_subject_alt_names
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.match_subject_alt_names>`) is also
-   * specified.
-   * 
-   * It can optionally contain certificate revocation lists, in which case Envoy will verify
-   * that the presented peer certificate has not been revoked by one of the included CRLs. Note
-   * that if a CRL is provided for any certificate authority in a trust chain, a CRL must be
-   * provided for all certificate authorities in that chain. Failure to do so will result in
-   * verification failure for both revoked and unrevoked certificates from that chain.
-   * 
-   * See :ref:`the TLS overview <arch_overview_ssl_enabling_verification>` for a list of common
-   * system CA locations.
-   * 
-   * If *trusted_ca* is a filesystem path, a watch will be added to the parent
-   * directory for any file moves to support rotation. This currently only
-   * applies to dynamic secrets, when the *CertificateValidationContext* is
-   * delivered via SDS.
-   * 
-   * Only one of *trusted_ca* and *ca_certificate_provider_instance* may be specified.
-   * 
-   * [#next-major-version: This field and watched_directory below should ideally be moved into a
-   * separate sub-message, since there's no point in specifying the latter field without this one.]
-   */
-  'trusted_ca': (_envoy_config_core_v3_DataSource__Output | null);
-  /**
-   * An optional list of hex-encoded SHA-256 hashes. If specified, Envoy will verify that
-   * the SHA-256 of the DER-encoded presented certificate matches one of the specified values.
-   * 
-   * A hex-encoded SHA-256 of the certificate can be generated with the following command:
-   * 
-   * .. code-block:: bash
-   * 
-   * $ openssl x509 -in path/to/client.crt -outform DER | openssl dgst -sha256 | cut -d" " -f2
-   * df6ff72fe9116521268f6f2dd4966f51df479883fe7037b39f75916ac3049d1a
-   * 
-   * A long hex-encoded and colon-separated SHA-256 (a.k.a. "fingerprint") of the certificate
-   * can be generated with the following command:
-   * 
-   * .. code-block:: bash
-   * 
-   * $ openssl x509 -in path/to/client.crt -noout -fingerprint -sha256 | cut -d"=" -f2
-   * DF:6F:F7:2F:E9:11:65:21:26:8F:6F:2D:D4:96:6F:51:DF:47:98:83:FE:70:37:B3:9F:75:91:6A:C3:04:9D:1A
-   * 
-   * Both of those formats are acceptable.
-   * 
-   * When both:
-   * :ref:`verify_certificate_hash
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_hash>` and
-   * :ref:`verify_certificate_spki
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_spki>` are specified,
-   * a hash matching value from either of the lists will result in the certificate being accepted.
-   */
-  'verify_certificate_hash': (string)[];
-  /**
-   * An optional list of base64-encoded SHA-256 hashes. If specified, Envoy will verify that the
-   * SHA-256 of the DER-encoded Subject Public Key Information (SPKI) of the presented certificate
-   * matches one of the specified values.
-   * 
-   * A base64-encoded SHA-256 of the Subject Public Key Information (SPKI) of the certificate
-   * can be generated with the following command:
-   * 
-   * .. code-block:: bash
-   * 
-   * $ openssl x509 -in path/to/client.crt -noout -pubkey
-   * | openssl pkey -pubin -outform DER
-   * | openssl dgst -sha256 -binary
-   * | openssl enc -base64
-   * NvqYIYSbgK2vCJpQhObf77vv+bQWtc5ek5RIOwPiC9A=
-   * 
-   * This is the format used in HTTP Public Key Pinning.
-   * 
-   * When both:
-   * :ref:`verify_certificate_hash
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_hash>` and
-   * :ref:`verify_certificate_spki
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_spki>` are specified,
-   * a hash matching value from either of the lists will result in the certificate being accepted.
-   * 
-   * .. attention::
-   * 
-   * This option is preferred over :ref:`verify_certificate_hash
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.verify_certificate_hash>`,
-   * because SPKI is tied to a private key, so it doesn't change when the certificate
-   * is renewed using the same private key.
-   */
-  'verify_certificate_spki': (string)[];
-  /**
-   * [#not-implemented-hide:] Must present signed certificate time-stamp.
-   */
-  'require_signed_certificate_timestamp': (_google_protobuf_BoolValue__Output | null);
-  /**
-   * An optional `certificate revocation list
-   * <https://en.wikipedia.org/wiki/Certificate_revocation_list>`_
-   * (in PEM format). If specified, Envoy will verify that the presented peer
-   * certificate has not been revoked by this CRL. If this DataSource contains
-   * multiple CRLs, all of them will be used. Note that if a CRL is provided
-   * for any certificate authority in a trust chain, a CRL must be provided
-   * for all certificate authorities in that chain. Failure to do so will
-   * result in verification failure for both revoked and unrevoked certificates
-   * from that chain.
-   */
-  'crl': (_envoy_config_core_v3_DataSource__Output | null);
-  /**
-   * If specified, Envoy will not reject expired certificates.
-   */
-  'allow_expired_certificate': (boolean);
-  /**
-   * An optional list of Subject Alternative name matchers. If specified, Envoy will verify that the
-   * Subject Alternative Name of the presented certificate matches one of the specified matchers.
-   * 
-   * When a certificate has wildcard DNS SAN entries, to match a specific client, it should be
-   * configured with exact match type in the :ref:`string matcher <envoy_v3_api_msg_type.matcher.v3.StringMatcher>`.
-   * For example if the certificate has "\*.example.com" as DNS SAN entry, to allow only "api.example.com",
-   * it should be configured as shown below.
-   * 
-   * .. code-block:: yaml
-   * 
-   * match_subject_alt_names:
-   * exact: "api.example.com"
-   * 
-   * .. attention::
-   * 
-   * Subject Alternative Names are easily spoofable and verifying only them is insecure,
-   * therefore this option must be used together with :ref:`trusted_ca
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.trusted_ca>`.
-   */
-  'match_subject_alt_names': (_envoy_type_matcher_v3_StringMatcher__Output)[];
-  /**
-   * Certificate trust chain verification mode.
-   */
-  'trust_chain_verification': (keyof typeof _envoy_extensions_transport_sockets_tls_v3_CertificateValidationContext_TrustChainVerification);
-  /**
-   * If specified, updates of a file-based *trusted_ca* source will be triggered
-   * by this watch. This allows explicit control over the path watched, by
-   * default the parent directory of the filesystem path in *trusted_ca* is
-   * watched if this field is not specified. This only applies when a
-   * *CertificateValidationContext* is delivered by SDS with references to
-   * filesystem paths. See the :ref:`SDS key rotation <sds_key_rotation>`
-   * documentation for further details.
-   */
-  'watched_directory': (_envoy_config_core_v3_WatchedDirectory__Output | null);
-  /**
-   * The configuration of an extension specific certificate validator.
-   * If specified, all validation is done by the specified validator,
-   * and the behavior of all other validation settings is defined by the specified validator (and may be entirely ignored, unused, and unvalidated).
-   * Refer to the documentation for the specified validator. If you do not want a custom validation algorithm, do not set this field.
-   * [#extension-category: envoy.tls.cert_validator]
-   */
-  'custom_validator_config': (_envoy_config_core_v3_TypedExtensionConfig__Output | null);
-  /**
-   * Certificate provider instance for fetching TLS certificates.
-   * 
-   * Only one of *trusted_ca* and *ca_certificate_provider_instance* may be specified.
-   * [#not-implemented-hide:]
-   */
-  'ca_certificate_provider_instance': (_envoy_extensions_transport_sockets_tls_v3_CertificateProviderPluginInstance__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/GenericSecret.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/GenericSecret.ts
deleted file mode 100644
index b206fb13a..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/GenericSecret.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/secret.proto
-
-import type { DataSource as _envoy_config_core_v3_DataSource, DataSource__Output as _envoy_config_core_v3_DataSource__Output } from '../../../../../envoy/config/core/v3/DataSource';
-
-export interface GenericSecret {
-  /**
-   * Secret of generic type and is available to filters.
-   */
-  'secret'?: (_envoy_config_core_v3_DataSource | null);
-}
-
-export interface GenericSecret__Output {
-  /**
-   * Secret of generic type and is available to filters.
-   */
-  'secret': (_envoy_config_core_v3_DataSource__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/PrivateKeyProvider.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/PrivateKeyProvider.ts
deleted file mode 100644
index b4a2ad933..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/PrivateKeyProvider.ts
+++ /dev/null
@@ -1,39 +0,0 @@
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/common.proto
-
-import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../../../google/protobuf/Any';
-
-/**
- * BoringSSL private key method configuration. The private key methods are used for external
- * (potentially asynchronous) signing and decryption operations. Some use cases for private key
- * methods would be TPM support and TLS acceleration.
- */
-export interface PrivateKeyProvider {
-  /**
-   * Private key method provider name. The name must match a
-   * supported private key method provider type.
-   */
-  'provider_name'?: (string);
-  'typed_config'?: (_google_protobuf_Any | null);
-  /**
-   * Private key method provider specific configuration.
-   */
-  'config_type'?: "typed_config";
-}
-
-/**
- * BoringSSL private key method configuration. The private key methods are used for external
- * (potentially asynchronous) signing and decryption operations. Some use cases for private key
- * methods would be TPM support and TLS acceleration.
- */
-export interface PrivateKeyProvider__Output {
-  /**
-   * Private key method provider name. The name must match a
-   * supported private key method provider type.
-   */
-  'provider_name': (string);
-  'typed_config'?: (_google_protobuf_Any__Output | null);
-  /**
-   * Private key method provider specific configuration.
-   */
-  'config_type': "typed_config";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/SdsSecretConfig.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/SdsSecretConfig.ts
deleted file mode 100644
index 38b850c50..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/SdsSecretConfig.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/secret.proto
-
-import type { ConfigSource as _envoy_config_core_v3_ConfigSource, ConfigSource__Output as _envoy_config_core_v3_ConfigSource__Output } from '../../../../../envoy/config/core/v3/ConfigSource';
-
-export interface SdsSecretConfig {
-  /**
-   * Name by which the secret can be uniquely referred to. When both name and config are specified,
-   * then secret can be fetched and/or reloaded via SDS. When only name is specified, then secret
-   * will be loaded from static resources.
-   */
-  'name'?: (string);
-  'sds_config'?: (_envoy_config_core_v3_ConfigSource | null);
-}
-
-export interface SdsSecretConfig__Output {
-  /**
-   * Name by which the secret can be uniquely referred to. When both name and config are specified,
-   * then secret can be fetched and/or reloaded via SDS. When only name is specified, then secret
-   * will be loaded from static resources.
-   */
-  'name': (string);
-  'sds_config': (_envoy_config_core_v3_ConfigSource__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/Secret.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/Secret.ts
deleted file mode 100644
index c86957da5..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/Secret.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/secret.proto
-
-import type { TlsCertificate as _envoy_extensions_transport_sockets_tls_v3_TlsCertificate, TlsCertificate__Output as _envoy_extensions_transport_sockets_tls_v3_TlsCertificate__Output } from '../../../../../envoy/extensions/transport_sockets/tls/v3/TlsCertificate';
-import type { TlsSessionTicketKeys as _envoy_extensions_transport_sockets_tls_v3_TlsSessionTicketKeys, TlsSessionTicketKeys__Output as _envoy_extensions_transport_sockets_tls_v3_TlsSessionTicketKeys__Output } from '../../../../../envoy/extensions/transport_sockets/tls/v3/TlsSessionTicketKeys';
-import type { CertificateValidationContext as _envoy_extensions_transport_sockets_tls_v3_CertificateValidationContext, CertificateValidationContext__Output as _envoy_extensions_transport_sockets_tls_v3_CertificateValidationContext__Output } from '../../../../../envoy/extensions/transport_sockets/tls/v3/CertificateValidationContext';
-import type { GenericSecret as _envoy_extensions_transport_sockets_tls_v3_GenericSecret, GenericSecret__Output as _envoy_extensions_transport_sockets_tls_v3_GenericSecret__Output } from '../../../../../envoy/extensions/transport_sockets/tls/v3/GenericSecret';
-
-/**
- * [#next-free-field: 6]
- */
-export interface Secret {
-  /**
-   * Name (FQDN, UUID, SPKI, SHA256, etc.) by which the secret can be uniquely referred to.
-   */
-  'name'?: (string);
-  'tls_certificate'?: (_envoy_extensions_transport_sockets_tls_v3_TlsCertificate | null);
-  'session_ticket_keys'?: (_envoy_extensions_transport_sockets_tls_v3_TlsSessionTicketKeys | null);
-  'validation_context'?: (_envoy_extensions_transport_sockets_tls_v3_CertificateValidationContext | null);
-  'generic_secret'?: (_envoy_extensions_transport_sockets_tls_v3_GenericSecret | null);
-  'type'?: "tls_certificate"|"session_ticket_keys"|"validation_context"|"generic_secret";
-}
-
-/**
- * [#next-free-field: 6]
- */
-export interface Secret__Output {
-  /**
-   * Name (FQDN, UUID, SPKI, SHA256, etc.) by which the secret can be uniquely referred to.
-   */
-  'name': (string);
-  'tls_certificate'?: (_envoy_extensions_transport_sockets_tls_v3_TlsCertificate__Output | null);
-  'session_ticket_keys'?: (_envoy_extensions_transport_sockets_tls_v3_TlsSessionTicketKeys__Output | null);
-  'validation_context'?: (_envoy_extensions_transport_sockets_tls_v3_CertificateValidationContext__Output | null);
-  'generic_secret'?: (_envoy_extensions_transport_sockets_tls_v3_GenericSecret__Output | null);
-  'type': "tls_certificate"|"session_ticket_keys"|"validation_context"|"generic_secret";
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/TlsCertificate.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/TlsCertificate.ts
deleted file mode 100644
index ce8046e95..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/TlsCertificate.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/common.proto
-
-import type { DataSource as _envoy_config_core_v3_DataSource, DataSource__Output as _envoy_config_core_v3_DataSource__Output } from '../../../../../envoy/config/core/v3/DataSource';
-import type { PrivateKeyProvider as _envoy_extensions_transport_sockets_tls_v3_PrivateKeyProvider, PrivateKeyProvider__Output as _envoy_extensions_transport_sockets_tls_v3_PrivateKeyProvider__Output } from '../../../../../envoy/extensions/transport_sockets/tls/v3/PrivateKeyProvider';
-import type { WatchedDirectory as _envoy_config_core_v3_WatchedDirectory, WatchedDirectory__Output as _envoy_config_core_v3_WatchedDirectory__Output } from '../../../../../envoy/config/core/v3/WatchedDirectory';
-
-/**
- * [#next-free-field: 8]
- */
-export interface TlsCertificate {
-  /**
-   * The TLS certificate chain.
-   * 
-   * If *certificate_chain* is a filesystem path, a watch will be added to the
-   * parent directory for any file moves to support rotation. This currently
-   * only applies to dynamic secrets, when the *TlsCertificate* is delivered via
-   * SDS.
-   */
-  'certificate_chain'?: (_envoy_config_core_v3_DataSource | null);
-  /**
-   * The TLS private key.
-   * 
-   * If *private_key* is a filesystem path, a watch will be added to the parent
-   * directory for any file moves to support rotation. This currently only
-   * applies to dynamic secrets, when the *TlsCertificate* is delivered via SDS.
-   */
-  'private_key'?: (_envoy_config_core_v3_DataSource | null);
-  /**
-   * The password to decrypt the TLS private key. If this field is not set, it is assumed that the
-   * TLS private key is not password encrypted.
-   */
-  'password'?: (_envoy_config_core_v3_DataSource | null);
-  /**
-   * The OCSP response to be stapled with this certificate during the handshake.
-   * The response must be DER-encoded and may only be  provided via ``filename`` or
-   * ``inline_bytes``. The response may pertain to only one certificate.
-   */
-  'ocsp_staple'?: (_envoy_config_core_v3_DataSource | null);
-  /**
-   * [#not-implemented-hide:]
-   */
-  'signed_certificate_timestamp'?: (_envoy_config_core_v3_DataSource)[];
-  /**
-   * BoringSSL private key method provider. This is an alternative to :ref:`private_key
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.private_key>` field. This can't be
-   * marked as ``oneof`` due to API compatibility reasons. Setting both :ref:`private_key
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.private_key>` and
-   * :ref:`private_key_provider
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.private_key_provider>` fields will result in an
-   * error.
-   */
-  'private_key_provider'?: (_envoy_extensions_transport_sockets_tls_v3_PrivateKeyProvider | null);
-  /**
-   * If specified, updates of file-based *certificate_chain* and *private_key*
-   * sources will be triggered by this watch. The certificate/key pair will be
-   * read together and validated for atomic read consistency (i.e. no
-   * intervening modification occurred between cert/key read, verified by file
-   * hash comparisons). This allows explicit control over the path watched, by
-   * default the parent directories of the filesystem paths in
-   * *certificate_chain* and *private_key* are watched if this field is not
-   * specified. This only applies when a *TlsCertificate* is delivered by SDS
-   * with references to filesystem paths. See the :ref:`SDS key rotation
-   * <sds_key_rotation>` documentation for further details.
-   */
-  'watched_directory'?: (_envoy_config_core_v3_WatchedDirectory | null);
-}
-
-/**
- * [#next-free-field: 8]
- */
-export interface TlsCertificate__Output {
-  /**
-   * The TLS certificate chain.
-   * 
-   * If *certificate_chain* is a filesystem path, a watch will be added to the
-   * parent directory for any file moves to support rotation. This currently
-   * only applies to dynamic secrets, when the *TlsCertificate* is delivered via
-   * SDS.
-   */
-  'certificate_chain': (_envoy_config_core_v3_DataSource__Output | null);
-  /**
-   * The TLS private key.
-   * 
-   * If *private_key* is a filesystem path, a watch will be added to the parent
-   * directory for any file moves to support rotation. This currently only
-   * applies to dynamic secrets, when the *TlsCertificate* is delivered via SDS.
-   */
-  'private_key': (_envoy_config_core_v3_DataSource__Output | null);
-  /**
-   * The password to decrypt the TLS private key. If this field is not set, it is assumed that the
-   * TLS private key is not password encrypted.
-   */
-  'password': (_envoy_config_core_v3_DataSource__Output | null);
-  /**
-   * The OCSP response to be stapled with this certificate during the handshake.
-   * The response must be DER-encoded and may only be  provided via ``filename`` or
-   * ``inline_bytes``. The response may pertain to only one certificate.
-   */
-  'ocsp_staple': (_envoy_config_core_v3_DataSource__Output | null);
-  /**
-   * [#not-implemented-hide:]
-   */
-  'signed_certificate_timestamp': (_envoy_config_core_v3_DataSource__Output)[];
-  /**
-   * BoringSSL private key method provider. This is an alternative to :ref:`private_key
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.private_key>` field. This can't be
-   * marked as ``oneof`` due to API compatibility reasons. Setting both :ref:`private_key
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.private_key>` and
-   * :ref:`private_key_provider
-   * <envoy_v3_api_field_extensions.transport_sockets.tls.v3.TlsCertificate.private_key_provider>` fields will result in an
-   * error.
-   */
-  'private_key_provider': (_envoy_extensions_transport_sockets_tls_v3_PrivateKeyProvider__Output | null);
-  /**
-   * If specified, updates of file-based *certificate_chain* and *private_key*
-   * sources will be triggered by this watch. The certificate/key pair will be
-   * read together and validated for atomic read consistency (i.e. no
-   * intervening modification occurred between cert/key read, verified by file
-   * hash comparisons). This allows explicit control over the path watched, by
-   * default the parent directories of the filesystem paths in
-   * *certificate_chain* and *private_key* are watched if this field is not
-   * specified. This only applies when a *TlsCertificate* is delivered by SDS
-   * with references to filesystem paths. See the :ref:`SDS key rotation
-   * <sds_key_rotation>` documentation for further details.
-   */
-  'watched_directory': (_envoy_config_core_v3_WatchedDirectory__Output | null);
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/TlsParameters.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/TlsParameters.ts
deleted file mode 100644
index e68464c8b..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/TlsParameters.ts
+++ /dev/null
@@ -1,211 +0,0 @@
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/common.proto
-
-
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/common.proto
-
-export enum _envoy_extensions_transport_sockets_tls_v3_TlsParameters_TlsProtocol {
-  /**
-   * Envoy will choose the optimal TLS version.
-   */
-  TLS_AUTO = 0,
-  /**
-   * TLS 1.0
-   */
-  TLSv1_0 = 1,
-  /**
-   * TLS 1.1
-   */
-  TLSv1_1 = 2,
-  /**
-   * TLS 1.2
-   */
-  TLSv1_2 = 3,
-  /**
-   * TLS 1.3
-   */
-  TLSv1_3 = 4,
-}
-
-export interface TlsParameters {
-  /**
-   * Minimum TLS protocol version. By default, it's ``TLSv1_2`` for clients and ``TLSv1_0`` for
-   * servers.
-   */
-  'tls_minimum_protocol_version'?: (_envoy_extensions_transport_sockets_tls_v3_TlsParameters_TlsProtocol | keyof typeof _envoy_extensions_transport_sockets_tls_v3_TlsParameters_TlsProtocol);
-  /**
-   * Maximum TLS protocol version. By default, it's ``TLSv1_2`` for clients and ``TLSv1_3`` for
-   * servers.
-   */
-  'tls_maximum_protocol_version'?: (_envoy_extensions_transport_sockets_tls_v3_TlsParameters_TlsProtocol | keyof typeof _envoy_extensions_transport_sockets_tls_v3_TlsParameters_TlsProtocol);
-  /**
-   * If specified, the TLS listener will only support the specified `cipher list
-   * <https://commondatastorage.googleapis.com/chromium-boringssl-docs/ssl.h.html#Cipher-suite-configuration>`_
-   * when negotiating TLS 1.0-1.2 (this setting has no effect when negotiating TLS 1.3).
-   * 
-   * If not specified, a default list will be used. Defaults are different for server (downstream) and
-   * client (upstream) TLS configurations.
-   * 
-   * In non-FIPS builds, the default server cipher list is:
-   * 
-   * .. code-block:: none
-   * 
-   * [ECDHE-ECDSA-AES128-GCM-SHA256|ECDHE-ECDSA-CHACHA20-POLY1305]
-   * [ECDHE-RSA-AES128-GCM-SHA256|ECDHE-RSA-CHACHA20-POLY1305]
-   * ECDHE-ECDSA-AES128-SHA
-   * ECDHE-RSA-AES128-SHA
-   * AES128-GCM-SHA256
-   * AES128-SHA
-   * ECDHE-ECDSA-AES256-GCM-SHA384
-   * ECDHE-RSA-AES256-GCM-SHA384
-   * ECDHE-ECDSA-AES256-SHA
-   * ECDHE-RSA-AES256-SHA
-   * AES256-GCM-SHA384
-   * AES256-SHA
-   * 
-   * In builds using :ref:`BoringSSL FIPS <arch_overview_ssl_fips>`, the default server cipher list is:
-   * 
-   * .. code-block:: none
-   * 
-   * ECDHE-ECDSA-AES128-GCM-SHA256
-   * ECDHE-RSA-AES128-GCM-SHA256
-   * ECDHE-ECDSA-AES128-SHA
-   * ECDHE-RSA-AES128-SHA
-   * AES128-GCM-SHA256
-   * AES128-SHA
-   * ECDHE-ECDSA-AES256-GCM-SHA384
-   * ECDHE-RSA-AES256-GCM-SHA384
-   * ECDHE-ECDSA-AES256-SHA
-   * ECDHE-RSA-AES256-SHA
-   * AES256-GCM-SHA384
-   * AES256-SHA
-   * 
-   * In non-FIPS builds, the default client cipher list is:
-   * 
-   * .. code-block:: none
-   * 
-   * [ECDHE-ECDSA-AES128-GCM-SHA256|ECDHE-ECDSA-CHACHA20-POLY1305]
-   * [ECDHE-RSA-AES128-GCM-SHA256|ECDHE-RSA-CHACHA20-POLY1305]
-   * ECDHE-ECDSA-AES256-GCM-SHA384
-   * ECDHE-RSA-AES256-GCM-SHA384
-   * 
-   * In builds using :ref:`BoringSSL FIPS <arch_overview_ssl_fips>`, the default client cipher list is:
-   * 
-   * .. code-block:: none
-   * 
-   * ECDHE-ECDSA-AES128-GCM-SHA256
-   * ECDHE-RSA-AES128-GCM-SHA256
-   * ECDHE-ECDSA-AES256-GCM-SHA384
-   * ECDHE-RSA-AES256-GCM-SHA384
-   */
-  'cipher_suites'?: (string)[];
-  /**
-   * If specified, the TLS connection will only support the specified ECDH
-   * curves. If not specified, the default curves will be used.
-   * 
-   * In non-FIPS builds, the default curves are:
-   * 
-   * .. code-block:: none
-   * 
-   * X25519
-   * P-256
-   * 
-   * In builds using :ref:`BoringSSL FIPS <arch_overview_ssl_fips>`, the default curve is:
-   * 
-   * .. code-block:: none
-   * 
-   * P-256
-   */
-  'ecdh_curves'?: (string)[];
-}
-
-export interface TlsParameters__Output {
-  /**
-   * Minimum TLS protocol version. By default, it's ``TLSv1_2`` for clients and ``TLSv1_0`` for
-   * servers.
-   */
-  'tls_minimum_protocol_version': (keyof typeof _envoy_extensions_transport_sockets_tls_v3_TlsParameters_TlsProtocol);
-  /**
-   * Maximum TLS protocol version. By default, it's ``TLSv1_2`` for clients and ``TLSv1_3`` for
-   * servers.
-   */
-  'tls_maximum_protocol_version': (keyof typeof _envoy_extensions_transport_sockets_tls_v3_TlsParameters_TlsProtocol);
-  /**
-   * If specified, the TLS listener will only support the specified `cipher list
-   * <https://commondatastorage.googleapis.com/chromium-boringssl-docs/ssl.h.html#Cipher-suite-configuration>`_
-   * when negotiating TLS 1.0-1.2 (this setting has no effect when negotiating TLS 1.3).
-   * 
-   * If not specified, a default list will be used. Defaults are different for server (downstream) and
-   * client (upstream) TLS configurations.
-   * 
-   * In non-FIPS builds, the default server cipher list is:
-   * 
-   * .. code-block:: none
-   * 
-   * [ECDHE-ECDSA-AES128-GCM-SHA256|ECDHE-ECDSA-CHACHA20-POLY1305]
-   * [ECDHE-RSA-AES128-GCM-SHA256|ECDHE-RSA-CHACHA20-POLY1305]
-   * ECDHE-ECDSA-AES128-SHA
-   * ECDHE-RSA-AES128-SHA
-   * AES128-GCM-SHA256
-   * AES128-SHA
-   * ECDHE-ECDSA-AES256-GCM-SHA384
-   * ECDHE-RSA-AES256-GCM-SHA384
-   * ECDHE-ECDSA-AES256-SHA
-   * ECDHE-RSA-AES256-SHA
-   * AES256-GCM-SHA384
-   * AES256-SHA
-   * 
-   * In builds using :ref:`BoringSSL FIPS <arch_overview_ssl_fips>`, the default server cipher list is:
-   * 
-   * .. code-block:: none
-   * 
-   * ECDHE-ECDSA-AES128-GCM-SHA256
-   * ECDHE-RSA-AES128-GCM-SHA256
-   * ECDHE-ECDSA-AES128-SHA
-   * ECDHE-RSA-AES128-SHA
-   * AES128-GCM-SHA256
-   * AES128-SHA
-   * ECDHE-ECDSA-AES256-GCM-SHA384
-   * ECDHE-RSA-AES256-GCM-SHA384
-   * ECDHE-ECDSA-AES256-SHA
-   * ECDHE-RSA-AES256-SHA
-   * AES256-GCM-SHA384
-   * AES256-SHA
-   * 
-   * In non-FIPS builds, the default client cipher list is:
-   * 
-   * .. code-block:: none
-   * 
-   * [ECDHE-ECDSA-AES128-GCM-SHA256|ECDHE-ECDSA-CHACHA20-POLY1305]
-   * [ECDHE-RSA-AES128-GCM-SHA256|ECDHE-RSA-CHACHA20-POLY1305]
-   * ECDHE-ECDSA-AES256-GCM-SHA384
-   * ECDHE-RSA-AES256-GCM-SHA384
-   * 
-   * In builds using :ref:`BoringSSL FIPS <arch_overview_ssl_fips>`, the default client cipher list is:
-   * 
-   * .. code-block:: none
-   * 
-   * ECDHE-ECDSA-AES128-GCM-SHA256
-   * ECDHE-RSA-AES128-GCM-SHA256
-   * ECDHE-ECDSA-AES256-GCM-SHA384
-   * ECDHE-RSA-AES256-GCM-SHA384
-   */
-  'cipher_suites': (string)[];
-  /**
-   * If specified, the TLS connection will only support the specified ECDH
-   * curves. If not specified, the default curves will be used.
-   * 
-   * In non-FIPS builds, the default curves are:
-   * 
-   * .. code-block:: none
-   * 
-   * X25519
-   * P-256
-   * 
-   * In builds using :ref:`BoringSSL FIPS <arch_overview_ssl_fips>`, the default curve is:
-   * 
-   * .. code-block:: none
-   * 
-   * P-256
-   */
-  'ecdh_curves': (string)[];
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/TlsSessionTicketKeys.ts b/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/TlsSessionTicketKeys.ts
deleted file mode 100644
index 152bccac7..000000000
--- a/packages/grpc-js-xds/src/generated/envoy/extensions/transport_sockets/tls/v3/TlsSessionTicketKeys.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-// Original file: deps/envoy-api/envoy/extensions/transport_sockets/tls/v3/common.proto
-
-import type { DataSource as _envoy_config_core_v3_DataSource, DataSource__Output as _envoy_config_core_v3_DataSource__Output } from '../../../../../envoy/config/core/v3/DataSource';
-
-export interface TlsSessionTicketKeys {
-  /**
-   * Keys for encrypting and decrypting TLS session tickets. The
-   * first key in the array contains the key to encrypt all new sessions created by this context.
-   * All keys are candidates for decrypting received tickets. This allows for easy rotation of keys
-   * by, for example, putting the new key first, and the previous key second.
-   * 
-   * If :ref:`session_ticket_keys <envoy_v3_api_field_extensions.transport_sockets.tls.v3.DownstreamTlsContext.session_ticket_keys>`
-   * is not specified, the TLS library will still support resuming sessions via tickets, but it will
-   * use an internally-generated and managed key, so sessions cannot be resumed across hot restarts
-   * or on different hosts.
-   * 
-   * Each key must contain exactly 80 bytes of cryptographically-secure random data. For
-   * example, the output of ``openssl rand 80``.
-   * 
-   * .. attention::
-   * 
-   * Using this feature has serious security considerations and risks. Improper handling of keys
-   * may result in loss of secrecy in connections, even if ciphers supporting perfect forward
-   * secrecy are used. See https://www.imperialviolet.org/2013/06/27/botchingpfs.html for some
-   * discussion. To minimize the risk, you must:
-   * 
-   * * Keep the session ticket keys at least as secure as your TLS certificate private keys
-   * * Rotate session ticket keys at least daily, and preferably hourly
-   * * Always generate keys using a cryptographically-secure random data source
-   */
-  'keys'?: (_envoy_config_core_v3_DataSource)[];
-}
-
-export interface TlsSessionTicketKeys__Output {
-  /**
-   * Keys for encrypting and decrypting TLS session tickets. The
-   * first key in the array contains the key to encrypt all new sessions created by this context.
-   * All keys are candidates for decrypting received tickets. This allows for easy rotation of keys
-   * by, for example, putting the new key first, and the previous key second.
-   * 
-   * If :ref:`session_ticket_keys <envoy_v3_api_field_extensions.transport_sockets.tls.v3.DownstreamTlsContext.session_ticket_keys>`
-   * is not specified, the TLS library will still support resuming sessions via tickets, but it will
-   * use an internally-generated and managed key, so sessions cannot be resumed across hot restarts
-   * or on different hosts.
-   * 
-   * Each key must contain exactly 80 bytes of cryptographically-secure random data. For
-   * example, the output of ``openssl rand 80``.
-   * 
-   * .. attention::
-   * 
-   * Using this feature has serious security considerations and risks. Improper handling of keys
-   * may result in loss of secrecy in connections, even if ciphers supporting perfect forward
-   * secrecy are used. See https://www.imperialviolet.org/2013/06/27/botchingpfs.html for some
-   * discussion. To minimize the risk, you must:
-   * 
-   * * Keep the session ticket keys at least as secure as your TLS certificate private keys
-   * * Rotate session ticket keys at least daily, and preferably hourly
-   * * Always generate keys using a cryptographically-secure random data source
-   */
-  'keys': (_envoy_config_core_v3_DataSource__Output)[];
-}
diff --git a/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ClientConfig.ts b/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ClientConfig.ts
index ba6b25b4c..506547d1e 100644
--- a/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ClientConfig.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ClientConfig.ts
@@ -4,8 +4,8 @@ import type { Node as _envoy_config_core_v3_Node, Node__Output as _envoy_config_
 import type { PerXdsConfig as _envoy_service_status_v3_PerXdsConfig, PerXdsConfig__Output as _envoy_service_status_v3_PerXdsConfig__Output } from '../../../../envoy/service/status/v3/PerXdsConfig';
 import type { Any as _google_protobuf_Any, Any__Output as _google_protobuf_Any__Output } from '../../../../google/protobuf/Any';
 import type { Timestamp as _google_protobuf_Timestamp, Timestamp__Output as _google_protobuf_Timestamp__Output } from '../../../../google/protobuf/Timestamp';
-import type { ConfigStatus as _envoy_service_status_v3_ConfigStatus } from '../../../../envoy/service/status/v3/ConfigStatus';
-import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus } from '../../../../envoy/admin/v3/ClientResourceStatus';
+import type { ConfigStatus as _envoy_service_status_v3_ConfigStatus, ConfigStatus__Output as _envoy_service_status_v3_ConfigStatus__Output } from '../../../../envoy/service/status/v3/ConfigStatus';
+import type { ClientResourceStatus as _envoy_admin_v3_ClientResourceStatus, ClientResourceStatus__Output as _envoy_admin_v3_ClientResourceStatus__Output } from '../../../../envoy/admin/v3/ClientResourceStatus';
 import type { UpdateFailureState as _envoy_admin_v3_UpdateFailureState, UpdateFailureState__Output as _envoy_admin_v3_UpdateFailureState__Output } from '../../../../envoy/admin/v3/UpdateFailureState';
 
 /**
@@ -42,11 +42,11 @@ export interface _envoy_service_status_v3_ClientConfig_GenericXdsConfig {
    * Per xDS resource config status. It is generated by management servers.
    * It will not be present if the CSDS server is an xDS client.
    */
-  'config_status'?: (_envoy_service_status_v3_ConfigStatus | keyof typeof _envoy_service_status_v3_ConfigStatus);
+  'config_status'?: (_envoy_service_status_v3_ConfigStatus);
   /**
    * Per xDS resource status from the view of a xDS client
    */
-  'client_status'?: (_envoy_admin_v3_ClientResourceStatus | keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status'?: (_envoy_admin_v3_ClientResourceStatus);
   /**
    * Set if the last update failed, cleared after the next successful
    * update. The *error_state* field contains the rejected version of
@@ -97,11 +97,11 @@ export interface _envoy_service_status_v3_ClientConfig_GenericXdsConfig__Output
    * Per xDS resource config status. It is generated by management servers.
    * It will not be present if the CSDS server is an xDS client.
    */
-  'config_status': (keyof typeof _envoy_service_status_v3_ConfigStatus);
+  'config_status': (_envoy_service_status_v3_ConfigStatus__Output);
   /**
    * Per xDS resource status from the view of a xDS client
    */
-  'client_status': (keyof typeof _envoy_admin_v3_ClientResourceStatus);
+  'client_status': (_envoy_admin_v3_ClientResourceStatus__Output);
   /**
    * Set if the last update failed, cleared after the next successful
    * update. The *error_state* field contains the rejected version of
@@ -129,6 +129,7 @@ export interface ClientConfig {
   /**
    * This field is deprecated in favor of generic_xds_configs which is
    * much simpler and uniform in structure.
+   * @deprecated
    */
   'xds_config'?: (_envoy_service_status_v3_PerXdsConfig)[];
   /**
@@ -149,6 +150,7 @@ export interface ClientConfig__Output {
   /**
    * This field is deprecated in favor of generic_xds_configs which is
    * much simpler and uniform in structure.
+   * @deprecated
    */
   'xds_config': (_envoy_service_status_v3_PerXdsConfig__Output)[];
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ClientConfigStatus.ts b/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ClientConfigStatus.ts
index 104445a3f..be7a7afd0 100644
--- a/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ClientConfigStatus.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ClientConfigStatus.ts
@@ -3,24 +3,57 @@
 /**
  * Config status from a client-side view.
  */
-export enum ClientConfigStatus {
+export const ClientConfigStatus = {
   /**
    * Config status is not available/unknown.
    */
-  CLIENT_UNKNOWN = 0,
+  CLIENT_UNKNOWN: 'CLIENT_UNKNOWN',
   /**
    * Client requested the config but hasn't received any config from management
    * server yet.
    */
-  CLIENT_REQUESTED = 1,
+  CLIENT_REQUESTED: 'CLIENT_REQUESTED',
   /**
    * Client received the config and replied with ACK.
    */
-  CLIENT_ACKED = 2,
+  CLIENT_ACKED: 'CLIENT_ACKED',
   /**
    * Client received the config and replied with NACK. Notably, the attached
    * config dump is not the NACKed version, but the most recent accepted one. If
    * no config is accepted yet, the attached config dump will be empty.
    */
-  CLIENT_NACKED = 3,
-}
+  CLIENT_NACKED: 'CLIENT_NACKED',
+} as const;
+
+/**
+ * Config status from a client-side view.
+ */
+export type ClientConfigStatus =
+  /**
+   * Config status is not available/unknown.
+   */
+  | 'CLIENT_UNKNOWN'
+  | 0
+  /**
+   * Client requested the config but hasn't received any config from management
+   * server yet.
+   */
+  | 'CLIENT_REQUESTED'
+  | 1
+  /**
+   * Client received the config and replied with ACK.
+   */
+  | 'CLIENT_ACKED'
+  | 2
+  /**
+   * Client received the config and replied with NACK. Notably, the attached
+   * config dump is not the NACKed version, but the most recent accepted one. If
+   * no config is accepted yet, the attached config dump will be empty.
+   */
+  | 'CLIENT_NACKED'
+  | 3
+
+/**
+ * Config status from a client-side view.
+ */
+export type ClientConfigStatus__Output = typeof ClientConfigStatus[keyof typeof ClientConfigStatus]
diff --git a/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ConfigStatus.ts b/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ConfigStatus.ts
index 71db302c3..15a8359e8 100644
--- a/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ConfigStatus.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/service/status/v3/ConfigStatus.ts
@@ -3,28 +3,66 @@
 /**
  * Status of a config from a management server view.
  */
-export enum ConfigStatus {
+export const ConfigStatus = {
   /**
    * Status info is not available/unknown.
    */
-  UNKNOWN = 0,
+  UNKNOWN: 'UNKNOWN',
   /**
    * Management server has sent the config to client and received ACK.
    */
-  SYNCED = 1,
+  SYNCED: 'SYNCED',
   /**
    * Config is not sent.
    */
-  NOT_SENT = 2,
+  NOT_SENT: 'NOT_SENT',
   /**
    * Management server has sent the config to client but hasn’t received
    * ACK/NACK.
    */
-  STALE = 3,
+  STALE: 'STALE',
   /**
    * Management server has sent the config to client but received NACK. The
    * attached config dump will be the latest config (the rejected one), since
    * it is the persisted version in the management server.
    */
-  ERROR = 4,
-}
+  ERROR: 'ERROR',
+} as const;
+
+/**
+ * Status of a config from a management server view.
+ */
+export type ConfigStatus =
+  /**
+   * Status info is not available/unknown.
+   */
+  | 'UNKNOWN'
+  | 0
+  /**
+   * Management server has sent the config to client and received ACK.
+   */
+  | 'SYNCED'
+  | 1
+  /**
+   * Config is not sent.
+   */
+  | 'NOT_SENT'
+  | 2
+  /**
+   * Management server has sent the config to client but hasn’t received
+   * ACK/NACK.
+   */
+  | 'STALE'
+  | 3
+  /**
+   * Management server has sent the config to client but received NACK. The
+   * attached config dump will be the latest config (the rejected one), since
+   * it is the persisted version in the management server.
+   */
+  | 'ERROR'
+  | 4
+
+/**
+ * Status of a config from a management server view.
+ */
+export type ConfigStatus__Output = typeof ConfigStatus[keyof typeof ConfigStatus]
diff --git a/packages/grpc-js-xds/src/generated/envoy/service/status/v3/PerXdsConfig.ts b/packages/grpc-js-xds/src/generated/envoy/service/status/v3/PerXdsConfig.ts
index 947f1c81a..d921f3b1c 100644
--- a/packages/grpc-js-xds/src/generated/envoy/service/status/v3/PerXdsConfig.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/service/status/v3/PerXdsConfig.ts
@@ -1,12 +1,12 @@
 // Original file: deps/envoy-api/envoy/service/status/v3/csds.proto
 
-import type { ConfigStatus as _envoy_service_status_v3_ConfigStatus } from '../../../../envoy/service/status/v3/ConfigStatus';
+import type { ConfigStatus as _envoy_service_status_v3_ConfigStatus, ConfigStatus__Output as _envoy_service_status_v3_ConfigStatus__Output } from '../../../../envoy/service/status/v3/ConfigStatus';
 import type { ListenersConfigDump as _envoy_admin_v3_ListenersConfigDump, ListenersConfigDump__Output as _envoy_admin_v3_ListenersConfigDump__Output } from '../../../../envoy/admin/v3/ListenersConfigDump';
 import type { ClustersConfigDump as _envoy_admin_v3_ClustersConfigDump, ClustersConfigDump__Output as _envoy_admin_v3_ClustersConfigDump__Output } from '../../../../envoy/admin/v3/ClustersConfigDump';
 import type { RoutesConfigDump as _envoy_admin_v3_RoutesConfigDump, RoutesConfigDump__Output as _envoy_admin_v3_RoutesConfigDump__Output } from '../../../../envoy/admin/v3/RoutesConfigDump';
 import type { ScopedRoutesConfigDump as _envoy_admin_v3_ScopedRoutesConfigDump, ScopedRoutesConfigDump__Output as _envoy_admin_v3_ScopedRoutesConfigDump__Output } from '../../../../envoy/admin/v3/ScopedRoutesConfigDump';
 import type { EndpointsConfigDump as _envoy_admin_v3_EndpointsConfigDump, EndpointsConfigDump__Output as _envoy_admin_v3_EndpointsConfigDump__Output } from '../../../../envoy/admin/v3/EndpointsConfigDump';
-import type { ClientConfigStatus as _envoy_service_status_v3_ClientConfigStatus } from '../../../../envoy/service/status/v3/ClientConfigStatus';
+import type { ClientConfigStatus as _envoy_service_status_v3_ClientConfigStatus, ClientConfigStatus__Output as _envoy_service_status_v3_ClientConfigStatus__Output } from '../../../../envoy/service/status/v3/ClientConfigStatus';
 
 /**
  * Detailed config (per xDS) with status.
@@ -17,7 +17,7 @@ export interface PerXdsConfig {
    * Config status generated by management servers. Will not be present if the
    * CSDS server is an xDS client.
    */
-  'status'?: (_envoy_service_status_v3_ConfigStatus | keyof typeof _envoy_service_status_v3_ConfigStatus);
+  'status'?: (_envoy_service_status_v3_ConfigStatus);
   'listener_config'?: (_envoy_admin_v3_ListenersConfigDump | null);
   'cluster_config'?: (_envoy_admin_v3_ClustersConfigDump | null);
   'route_config'?: (_envoy_admin_v3_RoutesConfigDump | null);
@@ -32,8 +32,9 @@ export interface PerXdsConfig {
    * This field is deprecated. Use :ref:`ClientResourceStatus
    * <envoy_v3_api_enum_admin.v3.ClientResourceStatus>` for per-resource
    * config status instead.
+   * @deprecated
    */
-  'client_status'?: (_envoy_service_status_v3_ClientConfigStatus | keyof typeof _envoy_service_status_v3_ClientConfigStatus);
+  'client_status'?: (_envoy_service_status_v3_ClientConfigStatus);
   'per_xds_config'?: "listener_config"|"cluster_config"|"route_config"|"scoped_route_config"|"endpoint_config";
 }
 
@@ -46,7 +47,7 @@ export interface PerXdsConfig__Output {
    * Config status generated by management servers. Will not be present if the
    * CSDS server is an xDS client.
    */
-  'status': (keyof typeof _envoy_service_status_v3_ConfigStatus);
+  'status': (_envoy_service_status_v3_ConfigStatus__Output);
   'listener_config'?: (_envoy_admin_v3_ListenersConfigDump__Output | null);
   'cluster_config'?: (_envoy_admin_v3_ClustersConfigDump__Output | null);
   'route_config'?: (_envoy_admin_v3_RoutesConfigDump__Output | null);
@@ -61,7 +62,8 @@ export interface PerXdsConfig__Output {
    * This field is deprecated. Use :ref:`ClientResourceStatus
    * <envoy_v3_api_enum_admin.v3.ClientResourceStatus>` for per-resource
    * config status instead.
+   * @deprecated
    */
-  'client_status': (keyof typeof _envoy_service_status_v3_ClientConfigStatus);
+  'client_status': (_envoy_service_status_v3_ClientConfigStatus__Output);
   'per_xds_config': "listener_config"|"cluster_config"|"route_config"|"scoped_route_config"|"endpoint_config";
 }
diff --git a/packages/grpc-js-xds/src/generated/envoy/type/matcher/v3/RegexMatcher.ts b/packages/grpc-js-xds/src/generated/envoy/type/matcher/v3/RegexMatcher.ts
index c83f8b473..19517678f 100644
--- a/packages/grpc-js-xds/src/generated/envoy/type/matcher/v3/RegexMatcher.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/type/matcher/v3/RegexMatcher.ts
@@ -31,6 +31,7 @@ export interface _envoy_type_matcher_v3_RegexMatcher_GoogleRE2 {
    * 
    * Although this field is deprecated, the program size will still be checked against the
    * global ``re2.max_program_size.error_level`` runtime value.
+   * @deprecated
    */
   'max_program_size'?: (_google_protobuf_UInt32Value | null);
 }
@@ -64,6 +65,7 @@ export interface _envoy_type_matcher_v3_RegexMatcher_GoogleRE2__Output {
    * 
    * Although this field is deprecated, the program size will still be checked against the
    * global ``re2.max_program_size.error_level`` runtime value.
+   * @deprecated
    */
   'max_program_size': (_google_protobuf_UInt32Value__Output | null);
 }
@@ -74,6 +76,7 @@ export interface _envoy_type_matcher_v3_RegexMatcher_GoogleRE2__Output {
 export interface RegexMatcher {
   /**
    * Google's RE2 regex engine.
+   * @deprecated
    */
   'google_re2'?: (_envoy_type_matcher_v3_RegexMatcher_GoogleRE2 | null);
   /**
@@ -90,6 +93,7 @@ export interface RegexMatcher {
 export interface RegexMatcher__Output {
   /**
    * Google's RE2 regex engine.
+   * @deprecated
    */
   'google_re2'?: (_envoy_type_matcher_v3_RegexMatcher_GoogleRE2__Output | null);
   /**
diff --git a/packages/grpc-js-xds/src/generated/envoy/type/v3/CodecClientType.ts b/packages/grpc-js-xds/src/generated/envoy/type/v3/CodecClientType.ts
index 308f14446..e05cdfb96 100644
--- a/packages/grpc-js-xds/src/generated/envoy/type/v3/CodecClientType.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/type/v3/CodecClientType.ts
@@ -1,12 +1,27 @@
 // Original file: deps/envoy-api/envoy/type/v3/http.proto
 
-export enum CodecClientType {
-  HTTP1 = 0,
-  HTTP2 = 1,
+export const CodecClientType = {
+  HTTP1: 'HTTP1',
+  HTTP2: 'HTTP2',
   /**
    * [#not-implemented-hide:] QUIC implementation is not production ready yet. Use this enum with
    * caution to prevent accidental execution of QUIC code. I.e. `!= HTTP2` is no longer sufficient
    * to distinguish HTTP1 and HTTP2 traffic.
    */
-  HTTP3 = 2,
-}
+  HTTP3: 'HTTP3',
+} as const;
+
+export type CodecClientType =
+  | 'HTTP1'
+  | 0
+  | 'HTTP2'
+  | 1
+  /**
+   * [#not-implemented-hide:] QUIC implementation is not production ready yet. Use this enum with
+   * caution to prevent accidental execution of QUIC code. I.e. `!= HTTP2` is no longer sufficient
+   * to distinguish HTTP1 and HTTP2 traffic.
+   */
+  | 'HTTP3'
+  | 2
+
+export type CodecClientType__Output = typeof CodecClientType[keyof typeof CodecClientType]
diff --git a/packages/grpc-js-xds/src/generated/envoy/type/v3/FractionalPercent.ts b/packages/grpc-js-xds/src/generated/envoy/type/v3/FractionalPercent.ts
index 564af9a0f..c45441a79 100644
--- a/packages/grpc-js-xds/src/generated/envoy/type/v3/FractionalPercent.ts
+++ b/packages/grpc-js-xds/src/generated/envoy/type/v3/FractionalPercent.ts
@@ -6,26 +6,57 @@
 /**
  * Fraction percentages support several fixed denominator values.
  */
-export enum _envoy_type_v3_FractionalPercent_DenominatorType {
+export const _envoy_type_v3_FractionalPercent_DenominatorType = {
   /**
    * 100.
    * 
    * **Example**: 1/100 = 1%.
    */
-  HUNDRED = 0,
+  HUNDRED: 'HUNDRED',
   /**
    * 10,000.
    * 
    * **Example**: 1/10000 = 0.01%.
    */
-  TEN_THOUSAND = 1,
+  TEN_THOUSAND: 'TEN_THOUSAND',
   /**
    * 1,000,000.
    * 
    * **Example**: 1/1000000 = 0.0001%.
    */
-  MILLION = 2,
-}
+  MILLION: 'MILLION',
+} as const;
+
+/**
+ * Fraction percentages support several fixed denominator values.
+ */
+export type _envoy_type_v3_FractionalPercent_DenominatorType =
+  /**
+   * 100.
+   * 
+   * **Example**: 1/100 = 1%.
+   */
+  | 'HUNDRED'
+  | 0
+  /**
+   * 10,000.
+   * 
+   * **Example**: 1/10000 = 0.01%.
+   */
+  | 'TEN_THOUSAND'
+  | 1
+  /**
+   * 1,000,000.
+   * 
+   * **Example**: 1/1000000 = 0.0001%.
+   */
+  | 'MILLION'
+  | 2
+
+/**
+ * Fraction percentages support several fixed denominator values.
+ */
+export type _envoy_type_v3_FractionalPercent_DenominatorType__Output = typeof _envoy_type_v3_FractionalPercent_DenominatorType[keyof typeof _envoy_type_v3_FractionalPercent_DenominatorType]
 
 /**
  * A fractional percentage is used in cases in which for performance reasons performing floating
@@ -44,7 +75,7 @@ export interface FractionalPercent {
    * Specifies the denominator. If the denominator specified is less than the numerator, the final
    * fractional percentage is capped at 1 (100%).
    */
-  'denominator'?: (_envoy_type_v3_FractionalPercent_DenominatorType | keyof typeof _envoy_type_v3_FractionalPercent_DenominatorType);
+  'denominator'?: (_envoy_type_v3_FractionalPercent_DenominatorType);
 }
 
 /**
@@ -64,5 +95,5 @@ export interface FractionalPercent__Output {
    * Specifies the denominator. If the denominator specified is less than the numerator, the final
    * fractional percentage is capped at 1 (100%).
    */
-  'denominator': (keyof typeof _envoy_type_v3_FractionalPercent_DenominatorType);
+  'denominator': (_envoy_type_v3_FractionalPercent_DenominatorType__Output);
 }
diff --git a/packages/grpc-js-xds/src/generated/google/protobuf/FieldDescriptorProto.ts b/packages/grpc-js-xds/src/generated/google/protobuf/FieldDescriptorProto.ts
index c511e2eff..4951919fd 100644
--- a/packages/grpc-js-xds/src/generated/google/protobuf/FieldDescriptorProto.ts
+++ b/packages/grpc-js-xds/src/generated/google/protobuf/FieldDescriptorProto.ts
@@ -4,41 +4,91 @@ import type { FieldOptions as _google_protobuf_FieldOptions, FieldOptions__Outpu
 
 // Original file: null
 
-export enum _google_protobuf_FieldDescriptorProto_Label {
-  LABEL_OPTIONAL = 1,
-  LABEL_REQUIRED = 2,
-  LABEL_REPEATED = 3,
-}
+export const _google_protobuf_FieldDescriptorProto_Label = {
+  LABEL_OPTIONAL: 'LABEL_OPTIONAL',
+  LABEL_REQUIRED: 'LABEL_REQUIRED',
+  LABEL_REPEATED: 'LABEL_REPEATED',
+} as const;
+
+export type _google_protobuf_FieldDescriptorProto_Label =
+  | 'LABEL_OPTIONAL'
+  | 1
+  | 'LABEL_REQUIRED'
+  | 2
+  | 'LABEL_REPEATED'
+  | 3
+
+export type _google_protobuf_FieldDescriptorProto_Label__Output = typeof _google_protobuf_FieldDescriptorProto_Label[keyof typeof _google_protobuf_FieldDescriptorProto_Label]
 
 // Original file: null
 
-export enum _google_protobuf_FieldDescriptorProto_Type {
-  TYPE_DOUBLE = 1,
-  TYPE_FLOAT = 2,
-  TYPE_INT64 = 3,
-  TYPE_UINT64 = 4,
-  TYPE_INT32 = 5,
-  TYPE_FIXED64 = 6,
-  TYPE_FIXED32 = 7,
-  TYPE_BOOL = 8,
-  TYPE_STRING = 9,
-  TYPE_GROUP = 10,
-  TYPE_MESSAGE = 11,
-  TYPE_BYTES = 12,
-  TYPE_UINT32 = 13,
-  TYPE_ENUM = 14,
-  TYPE_SFIXED32 = 15,
-  TYPE_SFIXED64 = 16,
-  TYPE_SINT32 = 17,
-  TYPE_SINT64 = 18,
-}
+export const _google_protobuf_FieldDescriptorProto_Type = {
+  TYPE_DOUBLE: 'TYPE_DOUBLE',
+  TYPE_FLOAT: 'TYPE_FLOAT',
+  TYPE_INT64: 'TYPE_INT64',
+  TYPE_UINT64: 'TYPE_UINT64',
+  TYPE_INT32: 'TYPE_INT32',
+  TYPE_FIXED64: 'TYPE_FIXED64',
+  TYPE_FIXED32: 'TYPE_FIXED32',
+  TYPE_BOOL: 'TYPE_BOOL',
+  TYPE_STRING: 'TYPE_STRING',
+  TYPE_GROUP: 'TYPE_GROUP',
+  TYPE_MESSAGE: 'TYPE_MESSAGE',
+  TYPE_BYTES: 'TYPE_BYTES',
+  TYPE_UINT32: 'TYPE_UINT32',
+  TYPE_ENUM: 'TYPE_ENUM',
+  TYPE_SFIXED32: 'TYPE_SFIXED32',
+  TYPE_SFIXED64: 'TYPE_SFIXED64',
+  TYPE_SINT32: 'TYPE_SINT32',
+  TYPE_SINT64: 'TYPE_SINT64',
+} as const;
+
+export type _google_protobuf_FieldDescriptorProto_Type =
+  | 'TYPE_DOUBLE'
+  | 1
+  | 'TYPE_FLOAT'
+  | 2
+  | 'TYPE_INT64'
+  | 3
+  | 'TYPE_UINT64'
+  | 4
+  | 'TYPE_INT32'
+  | 5
+  | 'TYPE_FIXED64'
+  | 6
+  | 'TYPE_FIXED32'
+  | 7
+  | 'TYPE_BOOL'
+  | 8
+  | 'TYPE_STRING'
+  | 9
+  | 'TYPE_GROUP'
+  | 10
+  | 'TYPE_MESSAGE'
+  | 11
+  | 'TYPE_BYTES'
+  | 12
+  | 'TYPE_UINT32'
+  | 13
+  | 'TYPE_ENUM'
+  | 14
+  | 'TYPE_SFIXED32'
+  | 15
+  | 'TYPE_SFIXED64'
+  | 16
+  | 'TYPE_SINT32'
+  | 17
+  | 'TYPE_SINT64'
+  | 18
+
+export type _google_protobuf_FieldDescriptorProto_Type__Output = typeof _google_protobuf_FieldDescriptorProto_Type[keyof typeof _google_protobuf_FieldDescriptorProto_Type]
 
 export interface FieldDescriptorProto {
   'name'?: (string);
   'extendee'?: (string);
   'number'?: (number);
-  'label'?: (_google_protobuf_FieldDescriptorProto_Label | keyof typeof _google_protobuf_FieldDescriptorProto_Label);
-  'type'?: (_google_protobuf_FieldDescriptorProto_Type | keyof typeof _google_protobuf_FieldDescriptorProto_Type);
+  'label'?: (_google_protobuf_FieldDescriptorProto_Label);
+  'type'?: (_google_protobuf_FieldDescriptorProto_Type);
   'typeName'?: (string);
   'defaultValue'?: (string);
   'options'?: (_google_protobuf_FieldOptions | null);
@@ -50,8 +100,8 @@ export interface FieldDescriptorProto__Output {
   'name': (string);
   'extendee': (string);
   'number': (number);
-  'label': (keyof typeof _google_protobuf_FieldDescriptorProto_Label);
-  'type': (keyof typeof _google_protobuf_FieldDescriptorProto_Type);
+  'label': (_google_protobuf_FieldDescriptorProto_Label__Output);
+  'type': (_google_protobuf_FieldDescriptorProto_Type__Output);
   'typeName': (string);
   'defaultValue': (string);
   'options': (_google_protobuf_FieldOptions__Output | null);
diff --git a/packages/grpc-js-xds/src/generated/google/protobuf/FieldOptions.ts b/packages/grpc-js-xds/src/generated/google/protobuf/FieldOptions.ts
index 3c3b446c9..b301f2958 100644
--- a/packages/grpc-js-xds/src/generated/google/protobuf/FieldOptions.ts
+++ b/packages/grpc-js-xds/src/generated/google/protobuf/FieldOptions.ts
@@ -4,36 +4,56 @@ import type { UninterpretedOption as _google_protobuf_UninterpretedOption, Unint
 
 // Original file: null
 
-export enum _google_protobuf_FieldOptions_CType {
-  STRING = 0,
-  CORD = 1,
-  STRING_PIECE = 2,
-}
+export const _google_protobuf_FieldOptions_CType = {
+  STRING: 'STRING',
+  CORD: 'CORD',
+  STRING_PIECE: 'STRING_PIECE',
+} as const;
+
+export type _google_protobuf_FieldOptions_CType =
+  | 'STRING'
+  | 0
+  | 'CORD'
+  | 1
+  | 'STRING_PIECE'
+  | 2
+
+export type _google_protobuf_FieldOptions_CType__Output = typeof _google_protobuf_FieldOptions_CType[keyof typeof _google_protobuf_FieldOptions_CType]
 
 // Original file: null
 
-export enum _google_protobuf_FieldOptions_JSType {
-  JS_NORMAL = 0,
-  JS_STRING = 1,
-  JS_NUMBER = 2,
-}
+export const _google_protobuf_FieldOptions_JSType = {
+  JS_NORMAL: 'JS_NORMAL',
+  JS_STRING: 'JS_STRING',
+  JS_NUMBER: 'JS_NUMBER',
+} as const;
+
+export type _google_protobuf_FieldOptions_JSType =
+  | 'JS_NORMAL'
+  | 0
+  | 'JS_STRING'
+  | 1
+  | 'JS_NUMBER'
+  | 2
+
+export type _google_protobuf_FieldOptions_JSType__Output = typeof _google_protobuf_FieldOptions_JSType[keyof typeof _google_protobuf_FieldOptions_JSType]
 
 export interface FieldOptions {
-  'ctype'?: (_google_protobuf_FieldOptions_CType | keyof typeof _google_protobuf_FieldOptions_CType);
+  'ctype'?: (_google_protobuf_FieldOptions_CType);
   'packed'?: (boolean);
   'deprecated'?: (boolean);
   'lazy'?: (boolean);
-  'jstype'?: (_google_protobuf_FieldOptions_JSType | keyof typeof _google_protobuf_FieldOptions_JSType);
+  'jstype'?: (_google_protobuf_FieldOptions_JSType);
   'weak'?: (boolean);
   'uninterpretedOption'?: (_google_protobuf_UninterpretedOption)[];
 }
 
 export interface FieldOptions__Output {
-  'ctype': (keyof typeof _google_protobuf_FieldOptions_CType);
+  'ctype': (_google_protobuf_FieldOptions_CType__Output);
   'packed': (boolean);
   'deprecated': (boolean);
   'lazy': (boolean);
-  'jstype': (keyof typeof _google_protobuf_FieldOptions_JSType);
+  'jstype': (_google_protobuf_FieldOptions_JSType__Output);
   'weak': (boolean);
   'uninterpretedOption': (_google_protobuf_UninterpretedOption__Output)[];
 }
diff --git a/packages/grpc-js-xds/src/generated/google/protobuf/FileOptions.ts b/packages/grpc-js-xds/src/generated/google/protobuf/FileOptions.ts
index 84500fc30..6fab1a84b 100644
--- a/packages/grpc-js-xds/src/generated/google/protobuf/FileOptions.ts
+++ b/packages/grpc-js-xds/src/generated/google/protobuf/FileOptions.ts
@@ -5,21 +5,34 @@ import type { StatusAnnotation as _udpa_annotations_StatusAnnotation, StatusAnno
 
 // Original file: null
 
-export enum _google_protobuf_FileOptions_OptimizeMode {
-  SPEED = 1,
-  CODE_SIZE = 2,
-  LITE_RUNTIME = 3,
-}
+export const _google_protobuf_FileOptions_OptimizeMode = {
+  SPEED: 'SPEED',
+  CODE_SIZE: 'CODE_SIZE',
+  LITE_RUNTIME: 'LITE_RUNTIME',
+} as const;
+
+export type _google_protobuf_FileOptions_OptimizeMode =
+  | 'SPEED'
+  | 1
+  | 'CODE_SIZE'
+  | 2
+  | 'LITE_RUNTIME'
+  | 3
+
+export type _google_protobuf_FileOptions_OptimizeMode__Output = typeof _google_protobuf_FileOptions_OptimizeMode[keyof typeof _google_protobuf_FileOptions_OptimizeMode]
 
 export interface FileOptions {
   'javaPackage'?: (string);
   'javaOuterClassname'?: (string);
-  'optimizeFor'?: (_google_protobuf_FileOptions_OptimizeMode | keyof typeof _google_protobuf_FileOptions_OptimizeMode);
+  'optimizeFor'?: (_google_protobuf_FileOptions_OptimizeMode);
   'javaMultipleFiles'?: (boolean);
   'goPackage'?: (string);
   'ccGenericServices'?: (boolean);
   'javaGenericServices'?: (boolean);
   'pyGenericServices'?: (boolean);
+  /**
+   * @deprecated
+   */
   'javaGenerateEqualsAndHash'?: (boolean);
   'deprecated'?: (boolean);
   'javaStringCheckUtf8'?: (boolean);
@@ -33,12 +46,15 @@ export interface FileOptions {
 export interface FileOptions__Output {
   'javaPackage': (string);
   'javaOuterClassname': (string);
-  'optimizeFor': (keyof typeof _google_protobuf_FileOptions_OptimizeMode);
+  'optimizeFor': (_google_protobuf_FileOptions_OptimizeMode__Output);
   'javaMultipleFiles': (boolean);
   'goPackage': (string);
   'ccGenericServices': (boolean);
   'javaGenericServices': (boolean);
   'pyGenericServices': (boolean);
+  /**
+   * @deprecated
+   */
   'javaGenerateEqualsAndHash': (boolean);
   'deprecated': (boolean);
   'javaStringCheckUtf8': (boolean);
diff --git a/packages/grpc-js-xds/src/generated/google/protobuf/NullValue.ts b/packages/grpc-js-xds/src/generated/google/protobuf/NullValue.ts
index 377aab885..c66dacc7b 100644
--- a/packages/grpc-js-xds/src/generated/google/protobuf/NullValue.ts
+++ b/packages/grpc-js-xds/src/generated/google/protobuf/NullValue.ts
@@ -1,5 +1,11 @@
 // Original file: null
 
-export enum NullValue {
-  NULL_VALUE = 0,
-}
+export const NullValue = {
+  NULL_VALUE: 'NULL_VALUE',
+} as const;
+
+export type NullValue =
+  | 'NULL_VALUE'
+  | 0
+
+export type NullValue__Output = typeof NullValue[keyof typeof NullValue]
diff --git a/packages/grpc-js-xds/src/generated/google/protobuf/Value.ts b/packages/grpc-js-xds/src/generated/google/protobuf/Value.ts
index b1a942a56..67cc03fff 100644
--- a/packages/grpc-js-xds/src/generated/google/protobuf/Value.ts
+++ b/packages/grpc-js-xds/src/generated/google/protobuf/Value.ts
@@ -1,11 +1,11 @@
 // Original file: null
 
-import type { NullValue as _google_protobuf_NullValue } from '../../google/protobuf/NullValue';
+import type { NullValue as _google_protobuf_NullValue, NullValue__Output as _google_protobuf_NullValue__Output } from '../../google/protobuf/NullValue';
 import type { Struct as _google_protobuf_Struct, Struct__Output as _google_protobuf_Struct__Output } from '../../google/protobuf/Struct';
 import type { ListValue as _google_protobuf_ListValue, ListValue__Output as _google_protobuf_ListValue__Output } from '../../google/protobuf/ListValue';
 
 export interface Value {
-  'nullValue'?: (_google_protobuf_NullValue | keyof typeof _google_protobuf_NullValue);
+  'nullValue'?: (_google_protobuf_NullValue);
   'numberValue'?: (number | string);
   'stringValue'?: (string);
   'boolValue'?: (boolean);
@@ -15,7 +15,7 @@ export interface Value {
 }
 
 export interface Value__Output {
-  'nullValue'?: (keyof typeof _google_protobuf_NullValue);
+  'nullValue'?: (_google_protobuf_NullValue__Output);
   'numberValue'?: (number);
   'stringValue'?: (string);
   'boolValue'?: (boolean);
diff --git a/packages/grpc-js-xds/src/generated/udpa/annotations/PackageVersionStatus.ts b/packages/grpc-js-xds/src/generated/udpa/annotations/PackageVersionStatus.ts
index d0e181aa5..4d15df739 100644
--- a/packages/grpc-js-xds/src/generated/udpa/annotations/PackageVersionStatus.ts
+++ b/packages/grpc-js-xds/src/generated/udpa/annotations/PackageVersionStatus.ts
@@ -1,21 +1,46 @@
 // Original file: deps/xds/udpa/annotations/status.proto
 
-export enum PackageVersionStatus {
+export const PackageVersionStatus = {
   /**
    * Unknown package version status.
    */
-  UNKNOWN = 0,
+  UNKNOWN: 'UNKNOWN',
   /**
    * This version of the package is frozen.
    */
-  FROZEN = 1,
+  FROZEN: 'FROZEN',
   /**
    * This version of the package is the active development version.
    */
-  ACTIVE = 2,
+  ACTIVE: 'ACTIVE',
   /**
    * This version of the package is the candidate for the next major version. It
    * is typically machine generated from the active development version.
    */
-  NEXT_MAJOR_VERSION_CANDIDATE = 3,
-}
+  NEXT_MAJOR_VERSION_CANDIDATE: 'NEXT_MAJOR_VERSION_CANDIDATE',
+} as const;
+
+export type PackageVersionStatus =
+  /**
+   * Unknown package version status.
+   */
+  | 'UNKNOWN'
+  | 0
+  /**
+   * This version of the package is frozen.
+   */
+  | 'FROZEN'
+  | 1
+  /**
+   * This version of the package is the active development version.
+   */
+  | 'ACTIVE'
+  | 2
+  /**
+   * This version of the package is the candidate for the next major version. It
+   * is typically machine generated from the active development version.
+   */
+  | 'NEXT_MAJOR_VERSION_CANDIDATE'
+  | 3
+
+export type PackageVersionStatus__Output = typeof PackageVersionStatus[keyof typeof PackageVersionStatus]
diff --git a/packages/grpc-js-xds/src/generated/udpa/annotations/StatusAnnotation.ts b/packages/grpc-js-xds/src/generated/udpa/annotations/StatusAnnotation.ts
index f01b45063..f129c3c94 100644
--- a/packages/grpc-js-xds/src/generated/udpa/annotations/StatusAnnotation.ts
+++ b/packages/grpc-js-xds/src/generated/udpa/annotations/StatusAnnotation.ts
@@ -1,6 +1,6 @@
 // Original file: deps/xds/udpa/annotations/status.proto
 
-import type { PackageVersionStatus as _udpa_annotations_PackageVersionStatus } from '../../udpa/annotations/PackageVersionStatus';
+import type { PackageVersionStatus as _udpa_annotations_PackageVersionStatus, PackageVersionStatus__Output as _udpa_annotations_PackageVersionStatus__Output } from '../../udpa/annotations/PackageVersionStatus';
 
 export interface StatusAnnotation {
   /**
@@ -10,7 +10,7 @@ export interface StatusAnnotation {
   /**
    * The entity belongs to a package with the given version status.
    */
-  'package_version_status'?: (_udpa_annotations_PackageVersionStatus | keyof typeof _udpa_annotations_PackageVersionStatus);
+  'package_version_status'?: (_udpa_annotations_PackageVersionStatus);
 }
 
 export interface StatusAnnotation__Output {
@@ -21,5 +21,5 @@ export interface StatusAnnotation__Output {
   /**
    * The entity belongs to a package with the given version status.
    */
-  'package_version_status': (keyof typeof _udpa_annotations_PackageVersionStatus);
+  'package_version_status': (_udpa_annotations_PackageVersionStatus__Output);
 }
diff --git a/packages/grpc-js-xds/src/generated/validate/FieldRules.ts b/packages/grpc-js-xds/src/generated/validate/FieldRules.ts
index 067125775..ce6f313e7 100644
--- a/packages/grpc-js-xds/src/generated/validate/FieldRules.ts
+++ b/packages/grpc-js-xds/src/generated/validate/FieldRules.ts
@@ -22,7 +22,6 @@ import type { MapRules as _validate_MapRules, MapRules__Output as _validate_MapR
 import type { AnyRules as _validate_AnyRules, AnyRules__Output as _validate_AnyRules__Output } from '../validate/AnyRules';
 import type { DurationRules as _validate_DurationRules, DurationRules__Output as _validate_DurationRules__Output } from '../validate/DurationRules';
 import type { TimestampRules as _validate_TimestampRules, TimestampRules__Output as _validate_TimestampRules__Output } from '../validate/TimestampRules';
-import type { Long } from '@grpc/proto-loader';
 
 /**
  * FieldRules encapsulates the rules for each type of field. Depending on the
diff --git a/packages/grpc-js-xds/src/generated/validate/KnownRegex.ts b/packages/grpc-js-xds/src/generated/validate/KnownRegex.ts
index 5880b5baf..8f1e20b4c 100644
--- a/packages/grpc-js-xds/src/generated/validate/KnownRegex.ts
+++ b/packages/grpc-js-xds/src/generated/validate/KnownRegex.ts
@@ -3,14 +3,36 @@
 /**
  * WellKnownRegex contain some well-known patterns.
  */
-export enum KnownRegex {
-  UNKNOWN = 0,
+export const KnownRegex = {
+  UNKNOWN: 'UNKNOWN',
   /**
    * HTTP header name as defined by RFC 7230.
    */
-  HTTP_HEADER_NAME = 1,
+  HTTP_HEADER_NAME: 'HTTP_HEADER_NAME',
   /**
    * HTTP header value as defined by RFC 7230.
    */
-  HTTP_HEADER_VALUE = 2,
-}
+  HTTP_HEADER_VALUE: 'HTTP_HEADER_VALUE',
+} as const;
+
+/**
+ * WellKnownRegex contain some well-known patterns.
+ */
+export type KnownRegex =
+  | 'UNKNOWN'
+  | 0
+  /**
+   * HTTP header name as defined by RFC 7230.
+   */
+  | 'HTTP_HEADER_NAME'
+  | 1
+  /**
+   * HTTP header value as defined by RFC 7230.
+   */
+  | 'HTTP_HEADER_VALUE'
+  | 2
+
+/**
+ * WellKnownRegex contain some well-known patterns.
+ */
+export type KnownRegex__Output = typeof KnownRegex[keyof typeof KnownRegex]
diff --git a/packages/grpc-js-xds/src/generated/validate/StringRules.ts b/packages/grpc-js-xds/src/generated/validate/StringRules.ts
index b6bb1e460..8bca6dffa 100644
--- a/packages/grpc-js-xds/src/generated/validate/StringRules.ts
+++ b/packages/grpc-js-xds/src/generated/validate/StringRules.ts
@@ -1,6 +1,6 @@
 // Original file: deps/protoc-gen-validate/validate/validate.proto
 
-import type { KnownRegex as _validate_KnownRegex } from '../validate/KnownRegex';
+import type { KnownRegex as _validate_KnownRegex, KnownRegex__Output as _validate_KnownRegex__Output } from '../validate/KnownRegex';
 import type { Long } from '@grpc/proto-loader';
 
 /**
@@ -129,7 +129,7 @@ export interface StringRules {
   /**
    * WellKnownRegex specifies a common well known pattern defined as a regex.
    */
-  'well_known_regex'?: (_validate_KnownRegex | keyof typeof _validate_KnownRegex);
+  'well_known_regex'?: (_validate_KnownRegex);
   /**
    * This applies to regexes HTTP_HEADER_NAME and HTTP_HEADER_VALUE to enable
    * strict header validation.
@@ -271,7 +271,7 @@ export interface StringRules__Output {
   /**
    * WellKnownRegex specifies a common well known pattern defined as a regex.
    */
-  'well_known_regex'?: (keyof typeof _validate_KnownRegex);
+  'well_known_regex'?: (_validate_KnownRegex__Output);
   /**
    * This applies to regexes HTTP_HEADER_NAME and HTTP_HEADER_VALUE to enable
    * strict header validation.
diff --git a/packages/grpc-js-xds/src/generated/xds/annotations/v3/PackageVersionStatus.ts b/packages/grpc-js-xds/src/generated/xds/annotations/v3/PackageVersionStatus.ts
index e76e2848f..e85074eae 100644
--- a/packages/grpc-js-xds/src/generated/xds/annotations/v3/PackageVersionStatus.ts
+++ b/packages/grpc-js-xds/src/generated/xds/annotations/v3/PackageVersionStatus.ts
@@ -1,21 +1,46 @@
 // Original file: deps/xds/xds/annotations/v3/status.proto
 
-export enum PackageVersionStatus {
+export const PackageVersionStatus = {
   /**
    * Unknown package version status.
    */
-  UNKNOWN = 0,
+  UNKNOWN: 'UNKNOWN',
   /**
    * This version of the package is frozen.
    */
-  FROZEN = 1,
+  FROZEN: 'FROZEN',
   /**
    * This version of the package is the active development version.
    */
-  ACTIVE = 2,
+  ACTIVE: 'ACTIVE',
   /**
    * This version of the package is the candidate for the next major version. It
    * is typically machine generated from the active development version.
    */
-  NEXT_MAJOR_VERSION_CANDIDATE = 3,
-}
+  NEXT_MAJOR_VERSION_CANDIDATE: 'NEXT_MAJOR_VERSION_CANDIDATE',
+} as const;
+
+export type PackageVersionStatus =
+  /**
+   * Unknown package version status.
+   */
+  | 'UNKNOWN'
+  | 0
+  /**
+   * This version of the package is frozen.
+   */
+  | 'FROZEN'
+  | 1
+  /**
+   * This version of the package is the active development version.
+   */
+  | 'ACTIVE'
+  | 2
+  /**
+   * This version of the package is the candidate for the next major version. It
+   * is typically machine generated from the active development version.
+   */
+  | 'NEXT_MAJOR_VERSION_CANDIDATE'
+  | 3
+
+export type PackageVersionStatus__Output = typeof PackageVersionStatus[keyof typeof PackageVersionStatus]
diff --git a/packages/grpc-js-xds/src/generated/xds/annotations/v3/StatusAnnotation.ts b/packages/grpc-js-xds/src/generated/xds/annotations/v3/StatusAnnotation.ts
index 58efbd8f7..678d6a6bf 100644
--- a/packages/grpc-js-xds/src/generated/xds/annotations/v3/StatusAnnotation.ts
+++ b/packages/grpc-js-xds/src/generated/xds/annotations/v3/StatusAnnotation.ts
@@ -1,6 +1,6 @@
 // Original file: deps/xds/xds/annotations/v3/status.proto
 
-import type { PackageVersionStatus as _xds_annotations_v3_PackageVersionStatus } from '../../../xds/annotations/v3/PackageVersionStatus';
+import type { PackageVersionStatus as _xds_annotations_v3_PackageVersionStatus, PackageVersionStatus__Output as _xds_annotations_v3_PackageVersionStatus__Output } from '../../../xds/annotations/v3/PackageVersionStatus';
 
 export interface StatusAnnotation {
   /**
@@ -10,7 +10,7 @@ export interface StatusAnnotation {
   /**
    * The entity belongs to a package with the given version status.
    */
-  'package_version_status'?: (_xds_annotations_v3_PackageVersionStatus | keyof typeof _xds_annotations_v3_PackageVersionStatus);
+  'package_version_status'?: (_xds_annotations_v3_PackageVersionStatus);
 }
 
 export interface StatusAnnotation__Output {
@@ -21,5 +21,5 @@ export interface StatusAnnotation__Output {
   /**
    * The entity belongs to a package with the given version status.
    */
-  'package_version_status': (keyof typeof _xds_annotations_v3_PackageVersionStatus);
+  'package_version_status': (_xds_annotations_v3_PackageVersionStatus__Output);
 }
diff --git a/packages/grpc-js-xds/src/generated/xds/core/v3/ResourceLocator.ts b/packages/grpc-js-xds/src/generated/xds/core/v3/ResourceLocator.ts
index bb1f822b8..28f981dd5 100644
--- a/packages/grpc-js-xds/src/generated/xds/core/v3/ResourceLocator.ts
+++ b/packages/grpc-js-xds/src/generated/xds/core/v3/ResourceLocator.ts
@@ -97,11 +97,21 @@ export interface _xds_core_v3_ResourceLocator_Directive__Output {
 
 // Original file: deps/xds/xds/core/v3/resource_locator.proto
 
-export enum _xds_core_v3_ResourceLocator_Scheme {
-  XDSTP = 0,
-  HTTP = 1,
-  FILE = 2,
-}
+export const _xds_core_v3_ResourceLocator_Scheme = {
+  XDSTP: 'XDSTP',
+  HTTP: 'HTTP',
+  FILE: 'FILE',
+} as const;
+
+export type _xds_core_v3_ResourceLocator_Scheme =
+  | 'XDSTP'
+  | 0
+  | 'HTTP'
+  | 1
+  | 'FILE'
+  | 2
+
+export type _xds_core_v3_ResourceLocator_Scheme__Output = typeof _xds_core_v3_ResourceLocator_Scheme[keyof typeof _xds_core_v3_ResourceLocator_Scheme]
 
 /**
  * xDS resource locators identify a xDS resource name and instruct the
@@ -125,7 +135,7 @@ export interface ResourceLocator {
   /**
    * URI scheme.
    */
-  'scheme'?: (_xds_core_v3_ResourceLocator_Scheme | keyof typeof _xds_core_v3_ResourceLocator_Scheme);
+  'scheme'?: (_xds_core_v3_ResourceLocator_Scheme);
   /**
    * Opaque identifier for the resource. Any '/' will not be escaped during URI
    * encoding and will form part of the URI path. This may end
@@ -183,7 +193,7 @@ export interface ResourceLocator__Output {
   /**
    * URI scheme.
    */
-  'scheme': (keyof typeof _xds_core_v3_ResourceLocator_Scheme);
+  'scheme': (_xds_core_v3_ResourceLocator_Scheme__Output);
   /**
    * Opaque identifier for the resource. Any '/' will not be escaped during URI
    * encoding and will form part of the URI path. This may end
diff --git a/packages/grpc-js/package.json b/packages/grpc-js/package.json
index 3b8ccf2c1..41594561d 100644
--- a/packages/grpc-js/package.json
+++ b/packages/grpc-js/package.json
@@ -66,7 +66,7 @@
     "generate-test-types": "proto-loader-gen-types --keepCase --longs String --enums String --defaults --oneofs --includeComments --include-dirs test/fixtures/ -O test/generated/ --grpcLib ../../src/index test_service.proto"
   },
   "dependencies": {
-    "@grpc/proto-loader": "^0.7.10",
+    "@grpc/proto-loader": "^0.7.13",
     "@js-sdsl/ordered-map": "^4.4.2"
   },
   "files": [