imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-16 12:22:03 +00:00
Code Activity

gcloud: Wed May 1 09:26:55 UTC 2024

Browse source
This commit is contained in:
Automated 2024-05-01 09:26:55 +00:00
parent 3740758467
commit 48fac7efd4
454 changed files with 11765 additions and 12790 deletions
Download patch file Download diff file Expand all files Collapse all files

40
gcloud/alpha/container/backup-restore/backup-plans/create
View file

@ -10,9 +10,12 @@ SYNOPSIS
[--deactivated] [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
[--backup-delete-lock-days=BACKUP_DELETE_LOCK_DAYS
--backup-retain-days=BACKUP_RETAIN_DAYS --locked]
[--cron-schedule=CRON_SCHEDULE : --paused]
[--encryption-key=ENCRYPTION_KEY
--include-secrets --include-volume-data] [GCLOUD_WIDE_FLAG ...]
--include-secrets --include-volume-data]
[--paused --cron-schedule=CRON_SCHEDULE
[--target-rpo-minutes=TARGET_RPO_MINUTES
: --exclusion-windows-file=EXCLUSION_WINDOWS_FILE]]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Create a Backup for GKE backup plan.
@ -130,18 +133,6 @@ OPTIONAL FLAGS
If set, subsequent updates are not allowed to the backup plan's
retention policy and this value cannot be changed.
--cron-schedule=CRON_SCHEDULE
Schedule on which backups will be automatically created.
Use standard cron (http://en.wikipedia.org/wiki/Cron#Overview) syntax.
For example, 10 3 * * * will automatically create a backup at 0310
every day. All times are interpreted as UTC. The minimum interval
between scheduled backups is 10 minutes.
--paused
If set, automatic backup creation is suppressed. When unset, automatic
backup creation resumes with the next scheduled create event.
--encryption-key=ENCRYPTION_KEY
Encryption key used for encrypting the backup.
@ -158,6 +149,27 @@ OPTIONAL FLAGS
PersistentVolumeClaims that fall within the scope. If unset, the
default is false.
--paused
If set, automatic backup creation is suppressed. When unset, automatic
backup creation resumes with the next scheduled create event.
--cron-schedule=CRON_SCHEDULE
Schedule on which backups will be automatically created.
Use standard cron (http://en.wikipedia.org/wiki/Cron#Overview) syntax.
For example, 10 3 * * * will automatically create a backup at 0310
every day. All times are interpreted as UTC. The minimum interval
between scheduled backups is 10 minutes.
--target-rpo-minutes=TARGET_RPO_MINUTES
Schedule backups based on target RPO minutes instead of fixed cron
schedules. Cannot be used with --cron-schedule.
--exclusion-windows-file=EXCLUSION_WINDOWS_FILE
If provided, defines an array of exclusion windows for RPO based
schedules from the given config file in yaml. Only used together with
--target-rpo-minutes for creation and rpo-based plans during update.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

39
gcloud/alpha/container/backup-restore/backup-plans/update
View file

@ -12,9 +12,11 @@ SYNOPSIS
[--backup-delete-lock-days=BACKUP_DELETE_LOCK_DAYS
--backup-retain-days=BACKUP_RETAIN_DAYS --locked]
[--clear-labels | --remove-labels=[KEY,...]]
[--cron-schedule=CRON_SCHEDULE --paused]
[--encryption-key=ENCRYPTION_KEY
--include-secrets --include-volume-data] [GCLOUD_WIDE_FLAG ...]
--include-secrets --include-volume-data]
[--paused --cron-schedule=CRON_SCHEDULE
--exclusion-windows-file=EXCLUSION_WINDOWS_FILE
--target-rpo-minutes=TARGET_RPO_MINUTES] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Update a Backup for GKE backup plan.
@ -147,18 +149,6 @@ FLAGS
silently ignored. If --update-labels is also specified then
--update-labels is applied first.
--cron-schedule=CRON_SCHEDULE
Schedule on which backups will be automatically created.
Use standard cron (http://en.wikipedia.org/wiki/Cron#Overview) syntax.
For example, 10 3 * * * will automatically create a backup at 0310
every day. All times are interpreted as UTC. The minimum interval
between scheduled backups is 10 minutes.
--paused
If set, automatic backup creation is suppressed. When unset, automatic
backup creation resumes with the next scheduled create event.
--encryption-key=ENCRYPTION_KEY
Encryption key used for encrypting the backup.
@ -175,6 +165,27 @@ FLAGS
PersistentVolumeClaims that fall within the scope. If unset, the
default is false.
--paused
If set, automatic backup creation is suppressed. When unset, automatic
backup creation resumes with the next scheduled create event.
--cron-schedule=CRON_SCHEDULE
Schedule on which backups will be automatically created.
Use standard cron (http://en.wikipedia.org/wiki/Cron#Overview) syntax.
For example, 10 3 * * * will automatically create a backup at 0310
every day. All times are interpreted as UTC. The minimum interval
between scheduled backups is 10 minutes.
--exclusion-windows-file=EXCLUSION_WINDOWS_FILE
If provided, defines an array of exclusion windows for RPO based
schedules from the given config file in yaml. Only used together with
--target-rpo-minutes for creation and rpo-based plans during update.
--target-rpo-minutes=TARGET_RPO_MINUTES
Schedule backups based on target RPO minutes instead of fixed cron
schedules. Cannot be used with --cron-schedule.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

85
gcloud/alpha/container/backup-restore/backups/get-backup-index-download-url Normal file
View file

@ -0,0 +1,85 @@
NAME
gcloud alpha container backup-restore backups get-backup-index-download-url
- get a backup index download URL
SYNOPSIS
gcloud alpha container backup-restore backups get-backup-index-download-url
(BACKUP : --backup-plan=BACKUP_PLAN --location=LOCATION)
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Get backup index download URL for a Backup for GKE backup. Backup
index displays resources' basic information stored in the backup.
EXAMPLES
To get the backup index associated with a backup my-backup in backup plan
my-backup-plan in project my-project in location us-central1, run:
$ gcloud alpha container backup-restore backups \
get-backup-index-download-url my-backup --project=my-project \
--location=us-central1 --backup-plan=my-backup-plan
POSITIONAL ARGUMENTS
Backup resource - Name of the backup to create. Once the backup is
created, this name can't be changed. This must be 63 or fewer characters
long and must be unique within the project, location, and backup plan. The
name may be provided either as a relative name, e.g.
projects/<project>/locations/<location>/backupPlans/<backupPlan>/backups/<backup>
or as a single ID name (with the parent resources provided via options or
through properties), e.g. BACKUP --project=<project> --location=<location>
--backup_plan=<backupPlan>. The arguments in this group can be used to
specify the attributes of this resource. (NOTE) Some attributes are not
given arguments in this group but can be set in other ways.
To set the project attribute:
◆ provide the argument backup on the command line with a fully
specified name;
◆ provide the argument --project on the command line;
◆ set the property core/project.
This must be specified.
BACKUP
ID of the backup or fully qualified identifier for the backup.
To set the name attribute:
▸ provide the argument backup on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--backup-plan=BACKUP_PLAN
Backup Plan name.
To set the backup-plan attribute:
▸ provide the argument backup on the command line with a fully
specified name;
▸ provide the argument --backup-plan on the command line;
▸ set the property gkebackup/backup_plan.
--location=LOCATION
Google Cloud location.
To set the location attribute:
▸ provide the argument backup on the command line with a fully
specified name;
▸ provide the argument --location on the command line;
▸ set the property gkebackup/location.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container backup-restore backups \
get-backup-index-download-url

3
gcloud/alpha/container/backup-restore/backups/help
View file

@ -25,6 +25,9 @@ COMMANDS
describe
(ALPHA) Describe a backup.
get-backup-index-download-url
(ALPHA) Get a backup index download URL.
get-iam-policy
(ALPHA) Get the IAM policy for a backup.

4
gcloud/alpha/container/binauthz/policy/export-system-policy
View file

@ -35,8 +35,8 @@ FLAGS
asia-south2, asia-southeast1, asia-southeast2, australia-southeast1,
australia-southeast2, europe-central2, europe-north1,
europe-southwest1, europe-west1, europe-west10, europe-west12,
europe-west2, europe-west3, europe-west4, europe-west5, europe-west6,
europe-west8, europe-west9, me-central1, me-central2, me-west1,
europe-west2, europe-west3, europe-west4, europe-west6, europe-west8,
europe-west9, me-central1, me-central2, me-west1,
northamerica-northeast1, northamerica-northeast2, southamerica-east1,
southamerica-west1, us-central1, us-central2, us-east1, us-east4,
us-east5, us-east7, us-south1, us-west1, us-west2, us-west3, us-west4,

42
gcloud/alpha/container/clusters/create
View file

@ -18,6 +18,7 @@ SYNOPSIS
[--cluster-ipv4-cidr=CLUSTER_IPV4_CIDR]
[--cluster-secondary-range-name=NAME]
[--cluster-version=CLUSTER_VERSION]
[--containerd-config-from-file=CONTAINERD_CONFIG_FROM_FILE]
[--create-subnetwork=[KEY=VALUE,...]]
[--database-encryption-key=DATABASE_ENCRYPTION_KEY]
[--default-max-pods-per-node=DEFAULT_MAX_PODS_PER_NODE]
@ -36,10 +37,10 @@ SYNOPSIS
[--enable-l4-ilb-subsetting] [--enable-legacy-authorization]
[--enable-logging-monitoring-system-only] [--enable-managed-prometheus]
[--enable-master-global-access] [--enable-multi-networking]
[--enable-network-policy] [--enable-pod-security-policy]
[--enable-secret-manager] [--enable-service-externalips]
[--enable-shielded-nodes] [--enable-stackdriver-kubernetes]
[--enable-vertical-pod-autoscaling]
[--enable-nested-virtualization] [--enable-network-policy]
[--enable-pod-security-policy] [--enable-secret-manager]
[--enable-service-externalips] [--enable-shielded-nodes]
[--enable-stackdriver-kubernetes] [--enable-vertical-pod-autoscaling]
[--fleet-project=PROJECT_ID_OR_NUMBER] [--gateway-api=GATEWAY_API]
[--identity-provider=IDENTITY_PROVIDER] [--image-type=IMAGE_TYPE]
[--in-transit-encryption=IN_TRANSIT_ENCRYPTION]
@ -167,10 +168,10 @@ FLAGS
(Optional) The NVIDIA driver version to install. GPU_DRIVER_VERSION
must be one of:
`default`: Install the default driver version.
`default`: Install the default driver version for this GKE version.
`latest`: Install the latest available driver version. Available only for
nodes that use Container-Optimized OS.
`latest`: Install the latest driver version available for this GKE version.
Can only be used for nodes that use Container-Optimized OS.
`disabled`: Skip automatic driver installation. You must manually install a
driver after you create the cluster. If you omit the flag `gpu-driver-version`,
@ -299,6 +300,10 @@ FLAGS
within VPCs that peer with this cluster. You should specify
--cluster-ipv4-cidr to prevent conflicts.
This field is not applicable in a Shared VPC setup where the IP address
range for the pods must be specified with
--cluster-secondary-range-name
--cluster-secondary-range-name=NAME
Set the secondary range to be used as the source for pod IPs. Alias
ranges will be allocated from this secondary range. NAME must be the
@ -316,6 +321,17 @@ FLAGS
$ gcloud container get-server-config
--containerd-config-from-file=CONTAINERD_CONFIG_FROM_FILE
Path of the YAML file that contains containerd configuration entries
like configuring access to private image registries.
For detailed information on the configuration usage, please refer to
https://cloud.google.com/kubernetes-engine/docs/how-to/customize-containerd-configuration.
Note: Updating the containerd configuration of an existing cluster or
node pool requires recreation of the existing nodes, which might cause
disruptions in running workloads.
--create-subnetwork=[KEY=VALUE,...]
Create a new subnetwork for the cluster. The name and range of the
subnetwork can be customized via optional 'name' and 'range' key-value
@ -599,6 +615,12 @@ FLAGS
Enables multi-networking on the cluster. Multi-networking is disabled
by default.
--enable-nested-virtualization
Enables the use of nested virtualization on the default initial node
pool. Defaults to false. Can only be enabled on UBUNTU_CONTAINERD base
image or COS_CONTAINERD base image with version 1.28.4-gke.1083000 and
above.
--enable-network-policy
Enable network policy enforcement for this cluster. If you are enabling
network policy on an existing cluster the network policy addon must
@ -1208,9 +1230,9 @@ FLAGS
sysctl:
net.core.somaxconn: '2048'
net.ipv4.tcp_rmem: '4096 87380 6291456'
hugepageConfig:
hugepage_size2m: '1024'
hugepage_size1g: '2'
hugepageConfig:
hugepage_size2m: '1024'
hugepage_size1g: '2'
List of supported kubelet configs in 'kubeletConfig'.

16
gcloud/alpha/container/clusters/create-auto
View file

@ -10,6 +10,7 @@ SYNOPSIS
[--cluster-ipv4-cidr=CLUSTER_IPV4_CIDR]
[--cluster-secondary-range-name=NAME]
[--cluster-version=CLUSTER_VERSION]
[--containerd-config-from-file=CONTAINERD_CONFIG_FROM_FILE]
[--create-subnetwork=[KEY=VALUE,...]]
[--database-encryption-key=DATABASE_ENCRYPTION_KEY]
[--enable-backup-restore] [--enable-cilium-clusterwide-network-policy]
@ -124,6 +125,10 @@ FLAGS
within VPCs that peer with this cluster. You should specify
--cluster-ipv4-cidr to prevent conflicts.
This field is not applicable in a Shared VPC setup where the IP address
range for the pods must be specified with
--cluster-secondary-range-name
--cluster-secondary-range-name=NAME
Set the secondary range to be used as the source for pod IPs. Alias
ranges will be allocated from this secondary range. NAME must be the
@ -140,6 +145,17 @@ FLAGS
$ gcloud container get-server-config
--containerd-config-from-file=CONTAINERD_CONFIG_FROM_FILE
Path of the YAML file that contains containerd configuration entries
like configuring access to private image registries.
For detailed information on the configuration usage, please refer to
https://cloud.google.com/kubernetes-engine/docs/how-to/customize-containerd-configuration.
Note: Updating the containerd configuration of an existing cluster or
node pool requires recreation of the existing nodes, which might cause
disruptions in running workloads.
--create-subnetwork=[KEY=VALUE,...]
Create a new subnetwork for the cluster. The name and range of the
subnetwork can be customized via optional 'name' and 'range' key-value

12
gcloud/alpha/container/clusters/update
View file

@ -8,6 +8,7 @@ SYNOPSIS
| --autoprovisioning-resource-manager-tags=[KEY=VALUE,...]
| --autoscaling-profile=AUTOSCALING_PROFILE | --clear-fleet-project
| --complete-credential-rotation | --complete-ip-rotation
| --containerd-config-from-file=CONTAINERD_CONFIG_FROM_FILE
| --database-encryption-key=DATABASE_ENCRYPTION_KEY
| --disable-database-encryption | --disable-default-snat
| --disable-workload-identity | --enable-autoscaling
@ -199,6 +200,17 @@ REQUIRED FLAGS
single IP state. See documentation for more details:
https://cloud.google.com/kubernetes-engine/docs/how-to/ip-rotation.
--containerd-config-from-file=CONTAINERD_CONFIG_FROM_FILE
Path of the YAML file that contains containerd configuration entries
like configuring access to private image registries.
For detailed information on the configuration usage, please refer to
https://cloud.google.com/kubernetes-engine/docs/how-to/customize-containerd-configuration.
Note: Updating the containerd configuration of an existing cluster or
node pool requires recreation of the existing nodes, which might
cause disruptions in running workloads.
--database-encryption-key=DATABASE_ENCRYPTION_KEY
Enable Database Encryption.

61
gcloud/alpha/container/fleet/mesh/debug/bug-report Normal file
View file

@ -0,0 +1,61 @@
NAME
gcloud alpha container fleet mesh debug bug-report - capture cluster
information and logs into archive to help diagnose problems
SYNOPSIS
gcloud alpha container fleet mesh debug bug-report
(--membership=MEMBERSHIP : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Example: $gcloud alpha container fleet mesh debug bug-report
--project=projectId --membership=membershipId --location=location
REQUIRED FLAGS
Membership resource - The group of arguments defining a membership. The
arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.
To set the project attribute:
◆ provide the argument --membership on the command line with a fully
specified name;
◆ provide the argument --project on the command line;
◆ set the property core/project.
This must be specified.
--membership=MEMBERSHIP
ID of the membership or fully qualified identifier for the
membership.
To set the membership attribute:
▸ provide the argument --membership on the command line.
This flag argument must be specified if any of the other arguments in
this group are specified.
--location=LOCATION
Location for the membership.
To set the location attribute:
▸ provide the argument --membership on the command line with a
fully specified name;
▸ provide the argument --location on the command line;
▸ set the property gkehub/location.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container fleet mesh debug bug-report

35
gcloud/alpha/container/fleet/mesh/debug/help Normal file
View file

@ -0,0 +1,35 @@
NAME
gcloud alpha container fleet mesh debug - debug Service Mesh memberships
SYNOPSIS
gcloud alpha container fleet mesh debug COMMAND [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Debug Service Mesh memberships.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
bug-report
(ALPHA) Capture cluster information and logs into archive to help
diagnose problems.
proxy-config
(ALPHA) Retrieve a configuration summary for a given Envoy instance.
proxy-status
(ALPHA) Retrieve the envoy configuration sync status.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container fleet mesh debug

90
gcloud/alpha/container/fleet/mesh/debug/proxy-config Normal file
View file

@ -0,0 +1,90 @@
NAME
gcloud alpha container fleet mesh debug proxy-config - retrieve a
configuration summary for a given Envoy instance
SYNOPSIS
gcloud alpha container fleet mesh debug proxy-config POD_NAME_NAMESPACE
--type=TYPE (--membership=MEMBERSHIP : --location=LOCATION)
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Retrieve a configuration summary for a given Envoy instance.
EXAMPLES
To retrieve the type cluster config dump for Pod instance pn.default.
$gcloud alpha container fleet mesh debug proxy-config pn.default --type=cluster
--project=projectId
--membership=membershipId
--location=us-central1
POSITIONAL ARGUMENTS
POD_NAME_NAMESPACE
Pod to check against. Use in format of <pod-name[.Namespace]>
REQUIRED FLAGS
--type=TYPE
Proxy configuration type, one of
all|clusters|listeners|routes|endpoints|bootstrap|log|secret
all Retrieves all configuration for the Envoy in the specified pod
bootstrap Retrieves bootstrap configuration for the Envoy in the specified pod
cluster Retrieves cluster configuration for the Envoy in the specified pod
ecds Retrieves typed extension configuration for the Envoy in the specified pod
endpoint Retrieves endpoint configuration for the Envoy in the specified pod
listener Retrieves listener configuration for the Envoy in the specified pod
log Retrieves logging levels of the Envoy in the specified pod
route Retrieves route configuration for the Envoy in the specified pod
secret Retrieves secret configuration for the Envoy in the specified pod
TYPE must be one of: all, bootstrap, cluster, listeners, routes,
endpoints, listener, log, secret.
Membership resource - The group of arguments defining a membership. The
arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.
To set the project attribute:
◆ provide the argument --membership on the command line with a fully
specified name;
◆ provide the argument --project on the command line;
◆ set the property core/project.
This must be specified.
--membership=MEMBERSHIP
ID of the membership or fully qualified identifier for the
membership.
To set the membership attribute:
▸ provide the argument --membership on the command line.
This flag argument must be specified if any of the other arguments in
this group are specified.
--location=LOCATION
Location for the membership.
To set the location attribute:
▸ provide the argument --membership on the command line with a
fully specified name;
▸ provide the argument --location on the command line;
▸ set the property gkehub/location.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container fleet mesh debug proxy-config

66
gcloud/alpha/container/fleet/mesh/debug/proxy-status Normal file
View file

@ -0,0 +1,66 @@
NAME
gcloud alpha container fleet mesh debug proxy-status - retrieve the envoy
configuration sync status
SYNOPSIS
gcloud alpha container fleet mesh debug proxy-status
(--membership=MEMBERSHIP : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Retrieve the envoy configuration sync status.
EXAMPLES
Retrieve the configuration sync status of all the proxies with the control
plane.
Example: $gcloud alpha container fleet mesh debug proxy-status --project=projectId --membership=membershipId --location=us-central1
REQUIRED FLAGS
Membership resource - The group of arguments defining a membership. The
arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.
To set the project attribute:
◆ provide the argument --membership on the command line with a fully
specified name;
◆ provide the argument --project on the command line;
◆ set the property core/project.
This must be specified.
--membership=MEMBERSHIP
ID of the membership or fully qualified identifier for the
membership.
To set the membership attribute:
▸ provide the argument --membership on the command line.
This flag argument must be specified if any of the other arguments in
this group are specified.
--location=LOCATION
Location for the membership.
To set the location attribute:
▸ provide the argument --membership on the command line with a
fully specified name;
▸ provide the argument --location on the command line;
▸ set the property gkehub/location.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container fleet mesh debug proxy-status

6
gcloud/alpha/container/fleet/mesh/help
View file

@ -12,6 +12,12 @@ GCLOUD WIDE FLAGS
Run $ gcloud help for details.
GROUPS
GROUP is one of the following:
debug
(ALPHA) Debug Service Mesh memberships.
COMMANDS
COMMAND is one of the following:

61
gcloud/alpha/container/hub/mesh/debug/bug-report Normal file
View file

@ -0,0 +1,61 @@
NAME
gcloud alpha container hub mesh debug bug-report - capture cluster
information and logs into archive to help diagnose problems
SYNOPSIS
gcloud alpha container hub mesh debug bug-report
(--membership=MEMBERSHIP : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Example: $gcloud alpha container hub mesh debug bug-report
--project=projectId --membership=membershipId --location=location
REQUIRED FLAGS
Membership resource - The group of arguments defining a membership. The
arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.
To set the project attribute:
◆ provide the argument --membership on the command line with a fully
specified name;
◆ provide the argument --project on the command line;
◆ set the property core/project.
This must be specified.
--membership=MEMBERSHIP
ID of the membership or fully qualified identifier for the
membership.
To set the membership attribute:
▸ provide the argument --membership on the command line.
This flag argument must be specified if any of the other arguments in
this group are specified.
--location=LOCATION
Location for the membership.
To set the location attribute:
▸ provide the argument --membership on the command line with a
fully specified name;
▸ provide the argument --location on the command line;
▸ set the property gkehub/location.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container hub mesh debug bug-report

35
gcloud/alpha/container/hub/mesh/debug/help Normal file
View file

@ -0,0 +1,35 @@
NAME
gcloud alpha container hub mesh debug - debug Service Mesh memberships
SYNOPSIS
gcloud alpha container hub mesh debug COMMAND [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Debug Service Mesh memberships.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
bug-report
(ALPHA) Capture cluster information and logs into archive to help
diagnose problems.
proxy-config
(ALPHA) Retrieve a configuration summary for a given Envoy instance.
proxy-status
(ALPHA) Retrieve the envoy configuration sync status.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container hub mesh debug

90
gcloud/alpha/container/hub/mesh/debug/proxy-config Normal file
View file

@ -0,0 +1,90 @@
NAME
gcloud alpha container hub mesh debug proxy-config - retrieve a
configuration summary for a given Envoy instance
SYNOPSIS
gcloud alpha container hub mesh debug proxy-config POD_NAME_NAMESPACE
--type=TYPE (--membership=MEMBERSHIP : --location=LOCATION)
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Retrieve a configuration summary for a given Envoy instance.
EXAMPLES
To retrieve the type cluster config dump for Pod instance pn.default.
$gcloud alpha container hub mesh debug proxy-config pn.default --type=cluster
--project=projectId
--membership=membershipId
--location=us-central1
POSITIONAL ARGUMENTS
POD_NAME_NAMESPACE
Pod to check against. Use in format of <pod-name[.Namespace]>
REQUIRED FLAGS
--type=TYPE
Proxy configuration type, one of
all|clusters|listeners|routes|endpoints|bootstrap|log|secret
all Retrieves all configuration for the Envoy in the specified pod
bootstrap Retrieves bootstrap configuration for the Envoy in the specified pod
cluster Retrieves cluster configuration for the Envoy in the specified pod
ecds Retrieves typed extension configuration for the Envoy in the specified pod
endpoint Retrieves endpoint configuration for the Envoy in the specified pod
listener Retrieves listener configuration for the Envoy in the specified pod
log Retrieves logging levels of the Envoy in the specified pod
route Retrieves route configuration for the Envoy in the specified pod
secret Retrieves secret configuration for the Envoy in the specified pod
TYPE must be one of: all, bootstrap, cluster, listeners, routes,
endpoints, listener, log, secret.
Membership resource - The group of arguments defining a membership. The
arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.
To set the project attribute:
◆ provide the argument --membership on the command line with a fully
specified name;
◆ provide the argument --project on the command line;
◆ set the property core/project.
This must be specified.
--membership=MEMBERSHIP
ID of the membership or fully qualified identifier for the
membership.
To set the membership attribute:
▸ provide the argument --membership on the command line.
This flag argument must be specified if any of the other arguments in
this group are specified.
--location=LOCATION
Location for the membership.
To set the location attribute:
▸ provide the argument --membership on the command line with a
fully specified name;
▸ provide the argument --location on the command line;
▸ set the property gkehub/location.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container hub mesh debug proxy-config

66
gcloud/alpha/container/hub/mesh/debug/proxy-status Normal file
View file

@ -0,0 +1,66 @@
NAME
gcloud alpha container hub mesh debug proxy-status - retrieve the envoy
configuration sync status
SYNOPSIS
gcloud alpha container hub mesh debug proxy-status
(--membership=MEMBERSHIP : --location=LOCATION) [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Retrieve the envoy configuration sync status.
EXAMPLES
Retrieve the configuration sync status of all the proxies with the control
plane.
Example: $gcloud alpha container hub mesh debug proxy-status --project=projectId --membership=membershipId --location=us-central1
REQUIRED FLAGS
Membership resource - The group of arguments defining a membership. The
arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.
To set the project attribute:
◆ provide the argument --membership on the command line with a fully
specified name;
◆ provide the argument --project on the command line;
◆ set the property core/project.
This must be specified.
--membership=MEMBERSHIP
ID of the membership or fully qualified identifier for the
membership.
To set the membership attribute:
▸ provide the argument --membership on the command line.
This flag argument must be specified if any of the other arguments in
this group are specified.
--location=LOCATION
Location for the membership.
To set the location attribute:
▸ provide the argument --membership on the command line with a
fully specified name;
▸ provide the argument --location on the command line;
▸ set the property gkehub/location.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container hub mesh debug proxy-status

6
gcloud/alpha/container/hub/mesh/help
View file

@ -12,6 +12,12 @@ GCLOUD WIDE FLAGS
Run $ gcloud help for details.
GROUPS
GROUP is one of the following:
debug
(ALPHA) Debug Service Mesh memberships.
COMMANDS
COMMAND is one of the following:

53
gcloud/alpha/container/node-pools/create
View file

@ -15,15 +15,16 @@ SYNOPSIS
pod-ipv4-range=SECONDARY_RANGE_NAME,
[max-pods-per-node=NUM_PODS],...]] [--async]
[--boot-disk-kms-key=BOOT_DISK_KMS_KEY] [--cluster=CLUSTER]
[--containerd-config-from-file=CONTAINERD_CONFIG_FROM_FILE]
[--disable-pod-cidr-overprovision] [--disk-size=DISK_SIZE]
[--disk-type=DISK_TYPE] [--enable-autoprovisioning]
[--enable-autorepair] [--no-enable-autoupgrade]
[--enable-blue-green-upgrade] [--enable-confidential-nodes]
[--enable-confidential-storage] [--enable-gvnic]
[--enable-image-streaming] [--enable-private-nodes]
[--enable-queued-provisioning] [--enable-surge-upgrade]
[--image-type=IMAGE_TYPE] [--labels=[KEY=VALUE,...]]
[--linux-sysctls=KEY=VALUE,[KEY=VALUE,...]]
[--enable-image-streaming] [--enable-nested-virtualization]
[--enable-private-nodes] [--enable-queued-provisioning]
[--enable-surge-upgrade] [--image-type=IMAGE_TYPE]
[--labels=[KEY=VALUE,...]] [--linux-sysctls=KEY=VALUE,[KEY=VALUE,...]]
[--logging-variant=LOGGING_VARIANT]
[--machine-type=MACHINE_TYPE, -m MACHINE_TYPE]
[--max-pods-per-node=MAX_PODS_PER_NODE]
@ -40,8 +41,9 @@ SYNOPSIS
[--num-nodes=NUM_NODES; default=3]
[--placement-policy=PLACEMENT_POLICY] [--placement-type=PLACEMENT_TYPE]
[--preemptible] [--resource-manager-tags=[KEY=VALUE,...]]
[--sandbox=[type=TYPE]] [--shielded-integrity-monitoring]
[--shielded-secure-boot]
[--sandbox=[type=TYPE]]
[--secondary-boot-disk=[disk-image=DISK_IMAGE,[mode=MODE],...]]
[--shielded-integrity-monitoring] [--shielded-secure-boot]
[--sole-tenant-node-affinity-file=SOLE_TENANT_NODE_AFFINITY_FILE]
[--spot]
[--standard-rollout-policy=[batch-node-count=BATCH_NODE_COUNT,
@ -112,10 +114,10 @@ FLAGS
(Optional) The NVIDIA driver version to install. GPU_DRIVER_VERSION
must be one of:
`default`: Install the default driver version.
`default`: Install the default driver version for this GKE version.
`latest`: Install the latest available driver version. Available only for
nodes that use Container-Optimized OS.
`latest`: Install the latest driver version available for this GKE version.
Can only be used for nodes that use Container-Optimized OS.
`disabled`: Skip automatic driver installation. You must manually install a
driver after you create the cluster. If you omit the flag `gpu-driver-version`,
@ -186,6 +188,17 @@ FLAGS
The cluster to add the node pool to. Overrides the default
container/cluster property value for this command invocation.
--containerd-config-from-file=CONTAINERD_CONFIG_FROM_FILE
Path of the YAML file that contains containerd configuration entries
like configuring access to private image registries.
For detailed information on the configuration usage, please refer to
https://cloud.google.com/kubernetes-engine/docs/how-to/customize-containerd-configuration.
Note: Updating the containerd configuration of an existing cluster or
node pool requires recreation of the existing nodes, which might cause
disruptions in running workloads.
--disable-pod-cidr-overprovision
Disables pod cidr overprovision on nodes. Pod cidr overprovisioning is
enabled by default.
@ -250,6 +263,11 @@ FLAGS
--enable-image-streaming
Specifies whether to enable image streaming on node pool.
--enable-nested-virtualization
Enables the use of nested virtualization on the node pool. Defaults to
false. Can only be enabled on UBUNTU_CONTAINERD base image or
COS_CONTAINERD base image with version 1.28.4-gke.1083000 and above.
--enable-private-nodes
Enables provisioning nodes with private IP addresses only.
@ -580,6 +598,17 @@ FLAGS
The only supported type is 'gvisor'.
--secondary-boot-disk=[disk-image=DISK_IMAGE,[mode=MODE],...]
Attaches secondary boot disks to all nodes.
disk-image
(Required) The full resource path to the source disk image to
create the secondary boot disks from.
mode
(Optional) The configuration mode for the secondary boot disks. The
default value is "CONTAINER_IMAGE_CACHE".
--shielded-integrity-monitoring
Enables monitoring and attestation of the boot integrity of the
instance. The attestation is performed against the integrity policy
@ -654,9 +683,9 @@ FLAGS
sysctl:
net.core.somaxconn: '2048'
net.ipv4.tcp_rmem: '4096 87380 6291456'
hugepageConfig:
hugepage_size2m: '1024'
hugepage_size1g: '2'
hugepageConfig:
hugepage_size2m: '1024'
hugepage_size1g: '2'
List of supported kubelet configs in 'kubeletConfig'.

20
gcloud/alpha/container/node-pools/update
View file

@ -4,7 +4,8 @@ NAME
SYNOPSIS
gcloud alpha container node-pools update NAME
(--enable-confidential-nodes | --enable-gvnic
(--containerd-config-from-file=CONTAINERD_CONFIG_FROM_FILE
| --enable-confidential-nodes | --enable-gvnic
| --enable-image-streaming | --enable-private-nodes
| --enable-queued-provisioning | --labels=[KEY=VALUE,...]
| --logging-variant=LOGGING_VARIANT
@ -49,6 +50,17 @@ POSITIONAL ARGUMENTS
REQUIRED FLAGS
Exactly one of these must be specified:
--containerd-config-from-file=CONTAINERD_CONFIG_FROM_FILE
Path of the YAML file that contains containerd configuration entries
like configuring access to private image registries.
For detailed information on the configuration usage, please refer to
https://cloud.google.com/kubernetes-engine/docs/how-to/customize-containerd-configuration.
Note: Updating the containerd configuration of an existing cluster or
node pool requires recreation of the existing nodes, which might
cause disruptions in running workloads.
--enable-confidential-nodes
Recreate all the nodes in the node pool to be confidential VM
https://cloud.google.com/compute/confidential-vm/docs/about-cvm.
@ -192,9 +204,9 @@ REQUIRED FLAGS
sysctl:
net.core.somaxconn: '2048'
net.ipv4.tcp_rmem: '4096 87380 6291456'
hugepageConfig:
hugepage_size2m: '1024'
hugepage_size1g: '2'
hugepageConfig:
hugepage_size2m: '1024'
hugepage_size1g: '2'
List of supported kubelet configs in 'kubeletConfig'.