imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-18 14:56:05 +00:00
Code Activity

gcloud: Wed Jun 18 10:54:11 UTC 2025

Browse source
This commit is contained in:
Automated 2025-06-18 10:54:11 +00:00
parent fa40c10f6a
commit 3a534cb57c
83 changed files with 849 additions and 219 deletions
Download patch file Download diff file Expand all files Collapse all files

12
gcloud/beta/container/clusters/create
View file

@ -74,6 +74,7 @@ SYNOPSIS
[--node-version=NODE_VERSION]
[--notification-config=[pubsub=ENABLED|DISABLED,
pubsub-topic=TOPIC,...]] [--num-nodes=NUM_NODES; default=3]
[--patch-update=[PATCH_UPDATE]]
[--performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT]
[--placement-policy=PLACEMENT_POLICY] [--placement-type=PLACEMENT_TYPE]
[--preemptible] [--private-endpoint-subnetwork=NAME]
@ -1102,6 +1103,17 @@ FLAGS
--num-nodes=NUM_NODES; default=3
The number of nodes to be created in each of the cluster's zones.
--patch-update=[PATCH_UPDATE]
The patch update to use for the cluster.
Setting to 'accelerated' automatically upgrades the cluster to the
latest patch available within the cluster's current minor version and
release channel. Setting to 'default' automatically upgrades the
cluster to the default patch upgrade targetversion available within the
cluster's current minor version and release channel.
PATCH_UPDATE must be one of: accelerated, default.
--performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT
Sets the Performance Monitoring Unit level. Valid values are
architectural, standard and enhanced. PERFORMANCE_MONITORING_UNIT must

13
gcloud/beta/container/clusters/update
View file

@ -38,7 +38,7 @@ SYNOPSIS
| --logging-variant=LOGGING_VARIANT | --maintenance-window=START_TIME
| --network-performance-configs=[PROPERTY1=VALUE1,...]
| --notification-config=[pubsub=ENABLED|DISABLED,
pubsub-topic=TOPIC,...]
pubsub-topic=TOPIC,...] | --patch-update=[PATCH_UPDATE]
| --private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE
| --release-channel=[CHANNEL] | --remove-labels=[KEY,...]
| --remove-workload-policies=REMOVE_WORKLOAD_POLICIES
@ -618,6 +618,17 @@ REQUIRED FLAGS
The project of the Pub/Sub topic must be the same one as the cluster.
It can be either the project ID or the project number.
--patch-update=[PATCH_UPDATE]
The patch update to use for the cluster.
Setting to 'accelerated' automatically upgrades the cluster to the
latest patch available within the cluster's current minor version and
release channel. Setting to 'default' automatically upgrades the
cluster to the default patch upgrade targetversion available within
the cluster's current minor version and release channel.
PATCH_UPDATE must be one of: accelerated, default.
--private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE
Sets the type of private access to Google services over IPv6.

36
gcloud/beta/container/fleet/scopes/add-app-operator-binding
View file

@ -5,12 +5,12 @@ NAME
SYNOPSIS
gcloud beta container fleet scopes add-app-operator-binding SCOPE
--role=ROLE (--group=GROUP | --user=USER) [--labels=[KEY=VALUE,...]]
[GCLOUD_WIDE_FLAG ...]
(--custom-role=CUSTOM_ROLE | --role=ROLE) (--group=GROUP | --user=USER)
[--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) One binding consists of an app operator principal (user/group) and a
role (view/edit/admin).
role (view/edit/admin or a custom role).
This command sets up the different permissions required for an app
operator, including usage of fleet scopes, connect gateway, logging, and
@ -66,6 +66,26 @@ EXAMPLES
▪ creates fleet scope RBAC role binding: role admin with a random ID
for user person@google.com.
---
The following command:
$ gcloud beta container fleet scopes add-app-operator-binding \
SCOPE --custom-role=my-custom-role --user=person@google.com \
--project=PROJECT_ID
▪ adds IAM policy binding: roles/gkehub.scopeViewer on SCOPE
▪ adds IAM policy binding: roles/gkehub.scopeEditorProjectLevel on
PROJECT_ID
▪ adds IAM policy binding: roles/logging.viewAccessor on PROJECT_ID
with condition where bucket corresponds to SCOPE
▪ creates fleet scope RBAC role binding: role my-custom-role with a
random ID for user person@google.com.
For any tailored IAM permissions required when using a custom role, the
user or group can separately be granted additional IAM permissions on the
project.
POSITIONAL ARGUMENTS
Scope resource - The group of arguments defining the Fleet Scope. This
represents a Cloud resource. (NOTE) Some attributes are not given
@ -91,8 +111,14 @@ POSITIONAL ARGUMENTS
▸ provide the argument SCOPE on the command line.
REQUIRED FLAGS
--role=ROLE
Role to assign. ROLE must be one of: admin, edit, view.
Exactly one of these must be specified:
--custom-role=CUSTOM_ROLE
Custom role to assign to principal.
--role=ROLE
Predefined role to assign to principal (admin, edit, view). ROLE must
be one of: admin, edit, view.
Exactly one of these must be specified:

2
gcloud/beta/container/fleet/scopes/list-app-operator-bindings
View file

@ -15,7 +15,7 @@ DESCRIPTION
permissions required for an app operator, including usage of fleet scopes,
connect gateway, logging, and metrics. The overarching principal role
(view/edit/admin, or custom) is determined by (1) the fleet scope RBAC role
(view, edit, or admin), (2) the fleet scope-level IAM role
(view, edit, admin or a custom role), (2) the fleet scope-level IAM role
(roles/gkehub.scopeViewer, roles/gkehub.scopeEditor, or
roles/gkehub.scopeAdmin), (3) the project-level IAM role
(roles/gkehub.scopeViewerProjectLevel, or

19
gcloud/beta/container/fleet/scopes/remove-app-operator-binding
View file

@ -61,7 +61,24 @@ EXAMPLES
The following command:
$ gcloud beta container fleet scopes remove-app-operator-binding \
SCOPE --role=admin --user=person@google.com --project=PROJECT_ID
SCOPE --user=person@google.com --project=PROJECT_ID
assuming the user already has a custom role:
▪ removes IAM policy binding: roles/gkehub.scopeViewer from SCOPE
▪ removes IAM policy binding: roles/gkehub.scopeEditorProjectLevel from
PROJECT_ID if the user does not have the edit/admin role for any other
scope under the project
▪ removes IAM policy binding: roles/logging.viewAccessor from
PROJECT_ID condition where bucket corresponds to SCOPE
▪ deletes existing fleet scope RBAC role binding: role admin for user
person@google.com.
---
The following command:
$ gcloud beta container fleet scopes remove-app-operator-binding \
SCOPE --user=person@google.com --project=PROJECT_ID
assuming the user already has the admin role:
▪ removes IAM policy binding: roles/gkehub.scopeAdmin from SCOPE

38
gcloud/beta/container/hub/scopes/add-app-operator-binding
View file

@ -4,13 +4,13 @@ NAME
scope RBAC role binding for an app operator principal
SYNOPSIS
gcloud beta container hub scopes add-app-operator-binding SCOPE --role=ROLE
(--group=GROUP | --user=USER) [--labels=[KEY=VALUE,...]]
[GCLOUD_WIDE_FLAG ...]
gcloud beta container hub scopes add-app-operator-binding SCOPE
(--custom-role=CUSTOM_ROLE | --role=ROLE) (--group=GROUP | --user=USER)
[--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) One binding consists of an app operator principal (user/group) and a
role (view/edit/admin).
role (view/edit/admin or a custom role).
This command sets up the different permissions required for an app
operator, including usage of fleet scopes, connect gateway, logging, and
@ -66,6 +66,26 @@ EXAMPLES
▪ creates fleet scope RBAC role binding: role admin with a random ID
for user person@google.com.
---
The following command:
$ gcloud beta container hub scopes add-app-operator-binding SCOPE \
--custom-role=my-custom-role --user=person@google.com \
--project=PROJECT_ID
▪ adds IAM policy binding: roles/gkehub.scopeViewer on SCOPE
▪ adds IAM policy binding: roles/gkehub.scopeEditorProjectLevel on
PROJECT_ID
▪ adds IAM policy binding: roles/logging.viewAccessor on PROJECT_ID
with condition where bucket corresponds to SCOPE
▪ creates fleet scope RBAC role binding: role my-custom-role with a
random ID for user person@google.com.
For any tailored IAM permissions required when using a custom role, the
user or group can separately be granted additional IAM permissions on the
project.
POSITIONAL ARGUMENTS
Scope resource - The group of arguments defining the Fleet Scope. This
represents a Cloud resource. (NOTE) Some attributes are not given
@ -91,8 +111,14 @@ POSITIONAL ARGUMENTS
▸ provide the argument SCOPE on the command line.
REQUIRED FLAGS
--role=ROLE
Role to assign. ROLE must be one of: admin, edit, view.
Exactly one of these must be specified:
--custom-role=CUSTOM_ROLE
Custom role to assign to principal.
--role=ROLE
Predefined role to assign to principal (admin, edit, view). ROLE must
be one of: admin, edit, view.
Exactly one of these must be specified:

2
gcloud/beta/container/hub/scopes/list-app-operator-bindings
View file

@ -15,7 +15,7 @@ DESCRIPTION
permissions required for an app operator, including usage of fleet scopes,
connect gateway, logging, and metrics. The overarching principal role
(view/edit/admin, or custom) is determined by (1) the fleet scope RBAC role
(view, edit, or admin), (2) the fleet scope-level IAM role
(view, edit, admin or a custom role), (2) the fleet scope-level IAM role
(roles/gkehub.scopeViewer, roles/gkehub.scopeEditor, or
roles/gkehub.scopeAdmin), (3) the project-level IAM role
(roles/gkehub.scopeViewerProjectLevel, or

19
gcloud/beta/container/hub/scopes/remove-app-operator-binding
View file

@ -61,7 +61,24 @@ EXAMPLES
The following command:
$ gcloud beta container hub scopes remove-app-operator-binding \
SCOPE --role=admin --user=person@google.com --project=PROJECT_ID
SCOPE --user=person@google.com --project=PROJECT_ID
assuming the user already has a custom role:
▪ removes IAM policy binding: roles/gkehub.scopeViewer from SCOPE
▪ removes IAM policy binding: roles/gkehub.scopeEditorProjectLevel from
PROJECT_ID if the user does not have the edit/admin role for any other
scope under the project
▪ removes IAM policy binding: roles/logging.viewAccessor from
PROJECT_ID condition where bucket corresponds to SCOPE
▪ deletes existing fleet scope RBAC role binding: role admin for user
person@google.com.
---
The following command:
$ gcloud beta container hub scopes remove-app-operator-binding \
SCOPE --user=person@google.com --project=PROJECT_ID
assuming the user already has the admin role:
▪ removes IAM policy binding: roles/gkehub.scopeAdmin from SCOPE