gcloud: Thu Nov 9 11:45:52 UTC 2023

gcloud/container/hub/policycontroller/content/bundles/help

@@ -0,0 +1,32 @@
+NAME
+    gcloud container hub policycontroller content bundles - manage Policy
+        Controller content bundles
+
+SYNOPSIS
+    gcloud container hub policycontroller content bundles COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage Policy Controller content bundles.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     remove
+        Removes a bundle installation for Policy Controller content.
+
+     set
+        Sets bundle installation for Policy Controller content.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container hub policycontroller content bundles
+
+        $ gcloud beta container hub policycontroller content bundles
+

gcloud/container/hub/policycontroller/content/bundles/remove

@@ -0,0 +1,78 @@
+NAME
+    gcloud container hub policycontroller content bundles remove - removes a
+        bundle installation for Policy Controller content
+
+SYNOPSIS
+    gcloud container hub policycontroller content bundles remove BUNDLE_NAME
+        [--all-memberships
+          | [--memberships=[MEMBERSHIPS,...] : --location=LOCATION]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Google-defined policy bundles of constraints can be installed onto Policy
+    Controller installations. This command removes those bundles.
+
+EXAMPLES
+    To remove a policy bundle:
+
+        $ gcloud container hub policycontroller content bundles remove \
+            cis-k8s-v1.5.1
+
+POSITIONAL ARGUMENTS
+     BUNDLE_NAME
+        The constraint bundle to remove from Policy Controller.
+
+FLAGS
+     Membership flags.
+
+     At most one of these can be specified:
+
+       --all-memberships
+          If supplied, apply to all Policy Controllers memberships in the
+          fleet.
+
+       Membership resource - The group of arguments defining one or more
+       memberships. The arguments in this group can be used to specify the
+       attributes of this resource. (NOTE) Some attributes are not given
+       arguments in this group but can be set in other ways.
+
+       To set the project attribute:
+        ▸ provide the argument --memberships on the command line with a fully
+          specified name;
+        ▸ provide the argument --project on the command line;
+        ▸ set the property core/project.
+
+         --memberships=[MEMBERSHIPS,...]
+            IDs of the memberships or fully qualified identifiers for the
+            memberships.
+
+            To set the memberships attribute:
+            ▫ provide the argument --memberships on the command line.
+
+            This flag argument must be specified if any of the other arguments
+            in this group are specified.
+
+         --location=LOCATION
+            Location for the memberships.
+
+            To set the location attribute:
+            ▫ provide the argument --memberships on the command line with a
+              fully specified name;
+            ▫ provide the argument --location on the command line;
+            ▫ set the property gkehub/location.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container hub policycontroller content bundles remove
+
+        $ gcloud beta container hub policycontroller content bundles remove
+

gcloud/container/hub/policycontroller/content/bundles/set

@@ -0,0 +1,110 @@
+NAME
+    gcloud container hub policycontroller content bundles set - sets bundle
+        installation for Policy Controller content
+
+SYNOPSIS
+    gcloud container hub policycontroller content bundles set BUNDLE_NAME
+        [--all-memberships
+          | [--memberships=[MEMBERSHIPS,...] : --location=LOCATION]]
+        [--exempted-namespaces=EXEMPTED_NAMESPACES | --no-exempted-namespaces]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Google-defined policy bundles of constraints can be installed onto Policy
+    Controller installations.
+
+    The namespace exclusion flag (--exempted-namespaces) will specify a set of
+    namespaces that the installed bundle will ignore. Subsequent calls with the
+    same bundle name and this flag will overwrite what namespaces are being
+    ignored. Using --no-exempted-namespaces or specifying no namespaces with
+    --exempted-namespaces will remove all namespaces from the ignore list.
+
+    To uninstall a bundle, use the remove command.
+
+EXAMPLES
+    To install a policy bundle:
+
+        $ gcloud container hub policycontroller content bundles set \
+            cis-k8s-v1.5.1
+
+    To install a policy bundle, while ignoring (exempting) certain namespaces
+    from being affected by the bundle:
+
+        $ gcloud container hub policycontroller content bundles set \
+            cis-k8s-v1.5.1 \
+            --exempted-namespaces=kube-system,gatekeeper-system
+
+    To remove all exempted namespaces from a particular bundles ignore list:
+
+        $ gcloud container hub policycontroller content bundles set \
+            cis-k8s-v1.5.1 --no-exempted-namespaces
+
+POSITIONAL ARGUMENTS
+     BUNDLE_NAME
+        The constraint bundle to install in Policy Controller.
+
+FLAGS
+     Membership flags.
+
+     At most one of these can be specified:
+
+       --all-memberships
+          If supplied, apply to all Policy Controllers memberships in the
+          fleet.
+
+       Membership resource - The group of arguments defining one or more
+       memberships. The arguments in this group can be used to specify the
+       attributes of this resource. (NOTE) Some attributes are not given
+       arguments in this group but can be set in other ways.
+
+       To set the project attribute:
+        ▸ provide the argument --memberships on the command line with a fully
+          specified name;
+        ▸ provide the argument --project on the command line;
+        ▸ set the property core/project.
+
+         --memberships=[MEMBERSHIPS,...]
+            IDs of the memberships or fully qualified identifiers for the
+            memberships.
+
+            To set the memberships attribute:
+            ▫ provide the argument --memberships on the command line.
+
+            This flag argument must be specified if any of the other arguments
+            in this group are specified.
+
+         --location=LOCATION
+            Location for the memberships.
+
+            To set the location attribute:
+            ▫ provide the argument --memberships on the command line with a
+              fully specified name;
+            ▫ provide the argument --location on the command line;
+            ▫ set the property gkehub/location.
+
+     Exempted Namespaces flags.
+
+     At most one of these can be specified:
+
+       --exempted-namespaces=EXEMPTED_NAMESPACES
+          Exempted namespaces are ignored by Policy Controller when applying
+          constraints added by this bundle.
+
+       --no-exempted-namespaces
+          Removes all exempted namespaces from the specified bundle.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container hub policycontroller content bundles set
+
+        $ gcloud beta container hub policycontroller content bundles set
+

gcloud/container/hub/policycontroller/content/help

@@ -0,0 +1,31 @@
+NAME
+    gcloud container hub policycontroller content - manage Policy Controller
+        content
+
+SYNOPSIS
+    gcloud container hub policycontroller content GROUP [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage Policy Controller content.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+GROUPS
+    GROUP is one of the following:
+
+     bundles
+        Manage Policy Controller content bundles.
+
+     templates
+        Manage Policy Controller content templates.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container hub policycontroller content
+
+        $ gcloud beta container hub policycontroller content
+

gcloud/container/hub/policycontroller/content/templates/disable

@@ -0,0 +1,75 @@
+NAME
+    gcloud container hub policycontroller content templates disable - disable
+        template installation for Policy Controller content
+
+SYNOPSIS
+    gcloud container hub policycontroller content templates disable
+        [--all-memberships
+          | [--memberships=[MEMBERSHIPS,...] : --location=LOCATION]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    The Google-defined template library can be installed onto Policy Controller
+    installations. This command removes that template library.
+
+EXAMPLES
+    To remove the template library:
+
+        $ gcloud container hub policycontroller content templates disable
+
+FLAGS
+     Membership flags.
+
+     At most one of these can be specified:
+
+       --all-memberships
+          If supplied, apply to all Policy Controllers memberships in the
+          fleet.
+
+       Membership resource - The group of arguments defining one or more
+       memberships. The arguments in this group can be used to specify the
+       attributes of this resource. (NOTE) Some attributes are not given
+       arguments in this group but can be set in other ways.
+
+       To set the project attribute:
+        ▸ provide the argument --memberships on the command line with a fully
+          specified name;
+        ▸ provide the argument --project on the command line;
+        ▸ set the property core/project.
+
+         --memberships=[MEMBERSHIPS,...]
+            IDs of the memberships or fully qualified identifiers for the
+            memberships.
+
+            To set the memberships attribute:
+            ▫ provide the argument --memberships on the command line.
+
+            This flag argument must be specified if any of the other arguments
+            in this group are specified.
+
+         --location=LOCATION
+            Location for the memberships.
+
+            To set the location attribute:
+            ▫ provide the argument --memberships on the command line with a
+              fully specified name;
+            ▫ provide the argument --location on the command line;
+            ▫ set the property gkehub/location.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container hub policycontroller content templates \
+            disable
+
+        $ gcloud beta container hub policycontroller content templates \
+            disable
+

gcloud/container/hub/policycontroller/content/templates/enable

@@ -0,0 +1,74 @@
+NAME
+    gcloud container hub policycontroller content templates enable - installs
+        the template library for Policy Controller
+
+SYNOPSIS
+    gcloud container hub policycontroller content templates enable
+        [--all-memberships
+          | [--memberships=[MEMBERSHIPS,...] : --location=LOCATION]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Google-defined template library can be installed onto Policy Controller
+    installations. To uninstall the template library, use the disable command.
+
+EXAMPLES
+    To install a template library:
+
+        $ gcloud container hub policycontroller content templates enable
+
+FLAGS
+     Membership flags.
+
+     At most one of these can be specified:
+
+       --all-memberships
+          If supplied, apply to all Policy Controllers memberships in the
+          fleet.
+
+       Membership resource - The group of arguments defining one or more
+       memberships. The arguments in this group can be used to specify the
+       attributes of this resource. (NOTE) Some attributes are not given
+       arguments in this group but can be set in other ways.
+
+       To set the project attribute:
+        ▸ provide the argument --memberships on the command line with a fully
+          specified name;
+        ▸ provide the argument --project on the command line;
+        ▸ set the property core/project.
+
+         --memberships=[MEMBERSHIPS,...]
+            IDs of the memberships or fully qualified identifiers for the
+            memberships.
+
+            To set the memberships attribute:
+            ▫ provide the argument --memberships on the command line.
+
+            This flag argument must be specified if any of the other arguments
+            in this group are specified.
+
+         --location=LOCATION
+            Location for the memberships.
+
+            To set the location attribute:
+            ▫ provide the argument --memberships on the command line with a
+              fully specified name;
+            ▫ provide the argument --location on the command line;
+            ▫ set the property gkehub/location.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container hub policycontroller content templates \
+            enable
+
+        $ gcloud beta container hub policycontroller content templates enable
+

gcloud/container/hub/policycontroller/content/templates/help

@@ -0,0 +1,32 @@
+NAME
+    gcloud container hub policycontroller content templates - manage Policy
+        Controller content templates
+
+SYNOPSIS
+    gcloud container hub policycontroller content templates COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage Policy Controller content templates.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     disable
+        Disable template installation for Policy Controller content.
+
+     enable
+        Installs the template library for Policy Controller.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container hub policycontroller content templates
+
+        $ gcloud beta container hub policycontroller content templates
+