diff --git a/.github/.OwlBot.lock.yaml b/.github/.OwlBot.lock.yaml
index 02a4dedc..98994f47 100644
--- a/.github/.OwlBot.lock.yaml
+++ b/.github/.OwlBot.lock.yaml
@@ -13,5 +13,5 @@
 # limitations under the License.
 docker:
   image: gcr.io/cloud-devrel-public-resources/owlbot-python:latest
-  digest: sha256:240b5bcc2bafd450912d2da2be15e62bc6de2cf839823ae4bf94d4f392b451dc
-# created: 2023-06-03T21:25:37.968717478Z
+  digest: sha256:2d816f26f728ac8b24248741e7d4c461c09764ef9f7be3684d557c9632e46dbd
+# created: 2023-06-28T17:03:33.371210701Z
diff --git a/.kokoro/release/common.cfg b/.kokoro/release/common.cfg
index 4984d569..87b7083f 100644
--- a/.kokoro/release/common.cfg
+++ b/.kokoro/release/common.cfg
@@ -38,3 +38,12 @@ env_vars: {
   key: "SECRET_MANAGER_KEYS"
   value: "releasetool-publish-reporter-app,releasetool-publish-reporter-googleapis-installation,releasetool-publish-reporter-pem"
 }
+
+# Store the packages we uploaded to PyPI.  That way, we have a record of exactly
+# what we published, which we can use to generate SBOMs and attestations.
+action {
+  define_artifacts {
+    regex: "github/python-container/**/*.tar.gz"
+    strip_prefix: "github/python-container"
+  }
+}
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 50b9d4d8..7de9824d 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "2.24.0"
+  ".": "2.25.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 215aa885..38ac5147 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,14 @@
 
 [1]: https://pypi.org/project/google-cloud-container/#history
 
+## [2.25.0](https://github.com/googleapis/python-container/compare/v2.24.0...v2.25.0) (2023-06-29)
+
+
+### Features
+
+* Add `KUBE_DNS` option to `DNSConfig.cluster_dns` ([91b001a](https://github.com/googleapis/python-container/commit/91b001a4f89557e8a503c57de3e45d6bf399ea90))
+* Add Tier 1 cluster-level API network_performance_config ([91b001a](https://github.com/googleapis/python-container/commit/91b001a4f89557e8a503c57de3e45d6bf399ea90))
+
 ## [2.24.0](https://github.com/googleapis/python-container/compare/v2.23.0...v2.24.0) (2023-06-13)
 
 
diff --git a/google/cloud/container/gapic_version.py b/google/cloud/container/gapic_version.py
index 07de09d5..e5fa8f60 100644
--- a/google/cloud/container/gapic_version.py
+++ b/google/cloud/container/gapic_version.py
@@ -13,4 +13,4 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-__version__ = "2.24.0"  # {x-release-please-version}
+__version__ = "2.25.0"  # {x-release-please-version}
diff --git a/google/cloud/container_v1/gapic_version.py b/google/cloud/container_v1/gapic_version.py
index 07de09d5..e5fa8f60 100644
--- a/google/cloud/container_v1/gapic_version.py
+++ b/google/cloud/container_v1/gapic_version.py
@@ -13,4 +13,4 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-__version__ = "2.24.0"  # {x-release-please-version}
+__version__ = "2.25.0"  # {x-release-please-version}
diff --git a/google/cloud/container_v1/types/cluster_service.py b/google/cloud/container_v1/types/cluster_service.py
index 2b49287d..2aef9d0e 100644
--- a/google/cloud/container_v1/types/cluster_service.py
+++ b/google/cloud/container_v1/types/cluster_service.py
@@ -3201,6 +3201,8 @@ class ClusterUpdate(proto.Message):
         desired_security_posture_config (google.cloud.container_v1.types.SecurityPostureConfig):
             Enable/Disable Security Posture API features
             for the cluster.
+        desired_network_performance_config (google.cloud.container_v1.types.NetworkConfig.ClusterNetworkPerformanceConfig):
+            The desired network performance config.
         desired_enable_fqdn_network_policy (bool):
             Enable/Disable FQDN Network Policy for the
             cluster.
@@ -3432,6 +3434,11 @@ class ClusterUpdate(proto.Message):
         number=124,
         message="SecurityPostureConfig",
     )
+    desired_network_performance_config: "NetworkConfig.ClusterNetworkPerformanceConfig" = proto.Field(
+        proto.MESSAGE,
+        number=125,
+        message="NetworkConfig.ClusterNetworkPerformanceConfig",
+    )
     desired_enable_fqdn_network_policy: bool = proto.Field(
         proto.BOOL,
         number=126,
@@ -7127,6 +7134,8 @@ class NetworkConfig(proto.Message):
         gateway_api_config (google.cloud.container_v1.types.GatewayAPIConfig):
             GatewayAPIConfig contains the desired config
             of Gateway API on this cluster.
+        network_performance_config (google.cloud.container_v1.types.NetworkConfig.ClusterNetworkPerformanceConfig):
+            Network bandwidth tier configuration.
         enable_fqdn_network_policy (bool):
             Whether FQDN Network Policy is enabled on
             this cluster.
@@ -7134,6 +7143,39 @@ class NetworkConfig(proto.Message):
             This field is a member of `oneof`_ ``_enable_fqdn_network_policy``.
     """
 
+    class ClusterNetworkPerformanceConfig(proto.Message):
+        r"""Configuration of network bandwidth tiers
+
+        .. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
+
+        Attributes:
+            total_egress_bandwidth_tier (google.cloud.container_v1.types.NetworkConfig.ClusterNetworkPerformanceConfig.Tier):
+                Specifies the total network bandwidth tier
+                for NodePools in the cluster.
+
+                This field is a member of `oneof`_ ``_total_egress_bandwidth_tier``.
+        """
+
+        class Tier(proto.Enum):
+            r"""Node network tier
+
+            Values:
+                TIER_UNSPECIFIED (0):
+                    Default value
+                TIER_1 (1):
+                    Higher bandwidth, actual values based on VM
+                    size.
+            """
+            TIER_UNSPECIFIED = 0
+            TIER_1 = 1
+
+        total_egress_bandwidth_tier: "NetworkConfig.ClusterNetworkPerformanceConfig.Tier" = proto.Field(
+            proto.ENUM,
+            number=1,
+            optional=True,
+            enum="NetworkConfig.ClusterNetworkPerformanceConfig.Tier",
+        )
+
     network: str = proto.Field(
         proto.STRING,
         number=1,
@@ -7180,6 +7222,11 @@ class NetworkConfig(proto.Message):
         number=16,
         message="GatewayAPIConfig",
     )
+    network_performance_config: ClusterNetworkPerformanceConfig = proto.Field(
+        proto.MESSAGE,
+        number=18,
+        message=ClusterNetworkPerformanceConfig,
+    )
     enable_fqdn_network_policy: bool = proto.Field(
         proto.BOOL,
         number=19,
@@ -7642,10 +7689,13 @@ class Provider(proto.Enum):
                 DNS resolution.
             CLOUD_DNS (2):
                 Use CloudDNS for DNS resolution.
+            KUBE_DNS (3):
+                Use KubeDNS for DNS resolution
         """
         PROVIDER_UNSPECIFIED = 0
         PLATFORM_DEFAULT = 1
         CLOUD_DNS = 2
+        KUBE_DNS = 3
 
     class DNSScope(proto.Enum):
         r"""DNSScope lists the various scopes of access to cluster DNS
diff --git a/google/cloud/container_v1beta1/gapic_version.py b/google/cloud/container_v1beta1/gapic_version.py
index 07de09d5..e5fa8f60 100644
--- a/google/cloud/container_v1beta1/gapic_version.py
+++ b/google/cloud/container_v1beta1/gapic_version.py
@@ -13,4 +13,4 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-__version__ = "2.24.0"  # {x-release-please-version}
+__version__ = "2.25.0"  # {x-release-please-version}
diff --git a/noxfile.py b/noxfile.py
index 95e58c52..7d411fea 100644
--- a/noxfile.py
+++ b/noxfile.py
@@ -305,10 +305,9 @@ def docfx(session):
 
     session.install("-e", ".")
     session.install(
-        "sphinx==4.0.1",
+        "gcp-sphinx-docfx-yaml",
         "alabaster",
         "recommonmark",
-        "gcp-sphinx-docfx-yaml",
     )
 
     shutil.rmtree(os.path.join("docs", "_build"), ignore_errors=True)
@@ -380,6 +379,7 @@ def prerelease_deps(session):
         "grpcio!=1.52.0rc1",
         "grpcio-status",
         "google-api-core",
+        "google-auth",
         "proto-plus",
         "google-cloud-testutils",
         # dependencies of google-cloud-testutils"
@@ -392,7 +392,6 @@ def prerelease_deps(session):
     # Remaining dependencies
     other_deps = [
         "requests",
-        "google-auth",
     ]
     session.install(*other_deps)
 
diff --git a/samples/generated_samples/snippet_metadata_google.container.v1.json b/samples/generated_samples/snippet_metadata_google.container.v1.json
index c4da21a4..6741140c 100644
--- a/samples/generated_samples/snippet_metadata_google.container.v1.json
+++ b/samples/generated_samples/snippet_metadata_google.container.v1.json
@@ -8,7 +8,7 @@
     ],
     "language": "PYTHON",
     "name": "google-cloud-container",
-    "version": "2.24.0"
+    "version": "2.25.0"
   },
   "snippets": [
     {
diff --git a/samples/generated_samples/snippet_metadata_google.container.v1beta1.json b/samples/generated_samples/snippet_metadata_google.container.v1beta1.json
index b536c7a7..8a20d902 100644
--- a/samples/generated_samples/snippet_metadata_google.container.v1beta1.json
+++ b/samples/generated_samples/snippet_metadata_google.container.v1beta1.json
@@ -8,7 +8,7 @@
     ],
     "language": "PYTHON",
     "name": "google-cloud-container",
-    "version": "2.24.0"
+    "version": "2.25.0"
   },
   "snippets": [
     {