1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-17 14:26:34 +00:00

gcloud: Wed Apr 23 10:54:24 UTC 2025

This commit is contained in:
Automated 2025-04-23 10:54:24 +00:00
parent b589c4c4ad
commit 4d8dd33b3e
138 changed files with 4506 additions and 597 deletions

View file

@ -9,8 +9,8 @@ SYNOPSIS
gpu-partition-size=GPU_PARTITION_SIZE,
gpu-sharing-strategy=GPU_SHARING_STRATEGY,
max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]]
[--addons=[ADDON,...]] [--allow-route-overlap] [--async]
[--auto-monitoring-scope=AUTO_MONITORING_SCOPE]
[--addons=[ADDON[=ENABLED|DISABLED],...]] [--allow-route-overlap]
[--async] [--auto-monitoring-scope=AUTO_MONITORING_SCOPE]
[--autoprovisioning-enable-insecure-kubelet-readonly-port]
[--autoprovisioning-network-tags=TAGS,[TAGS,...]]
[--autoprovisioning-resource-manager-tags=[KEY=VALUE,...]]
@ -135,7 +135,6 @@ SYNOPSIS
--master-ipv4-cidr=MASTER_IPV4_CIDR --private-cluster]
[--enable-secret-manager --enable-secret-manager-rotation
--secret-manager-rotation-interval=SECRET_MANAGER_ROTATION_INTERVAL]
[--enable-tpu --enable-tpu-service-networking | --tpu-ipv4-cidr=CIDR]
[--ephemeral-storage[=[local-ssd-count=LOCAL-SSD-COUNT]]
| --ephemeral-storage-local-ssd[=[count=COUNT]]
| --local-nvme-ssd-block[=[count=COUNT]]
@ -212,7 +211,7 @@ FLAGS
(Optional) The max number of containers allowed to share each GPU
on the node. This field is used together with gpu-sharing-strategy.
--addons=[ADDON,...]
--addons=[ADDON[=ENABLED|DISABLED],...]
Addons
(https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.locations.clusters#Cluster.AddonsConfig)
are additional Kubernetes cluster components. Addons specified by this
@ -2157,36 +2156,6 @@ FLAGS
Set the rotation period for secrets in the Secret Manager CSI driver
provider component.
Flags relating to Cloud TPUs:
--enable-tpu
Enable Cloud TPUs for this cluster.
Can not be specified unless --enable-ip-alias is also specified.
At most one of these can be specified:
--enable-tpu-service-networking
Enable Cloud TPU's Service Networking mode. In this mode, the CIDR
blocks used by the Cloud TPUs will be allocated and managed by
Service Networking, instead of Kubernetes Engine.
This cannot be specified if tpu-ipv4-cidr is specified.
--tpu-ipv4-cidr=CIDR
Set the IP range for the Cloud TPUs.
Can be specified as a netmask size (e.g. '/20') or as in CIDR
notion (e.g. '10.100.0.0/20'). If given as a netmask size, the IP
range will be chosen automatically from the available space in the
network.
If unspecified, the TPU CIDR range will use automatic default
'/20'.
Can not be specified unless '--enable-tpu' and '--enable-ip-alias'
are also specified.
At most one of these can be specified:
--ephemeral-storage[=[local-ssd-count=LOCAL-SSD-COUNT]]

View file

@ -110,7 +110,6 @@ SYNOPSIS
--enable-insecure-binding-system-unauthenticated
| --enable-secret-manager --enable-secret-manager-rotation
--secret-manager-rotation-interval=SECRET_MANAGER_ROTATION_INTERVAL
| --enable-tpu --enable-tpu-service-networking | --tpu-ipv4-cidr=CIDR
| --logging-service=LOGGING_SERVICE
--monitoring-service=MONITORING_SERVICE
| --password=PASSWORD --enable-basic-auth
@ -1534,36 +1533,6 @@ REQUIRED FLAGS
Set the rotation period for secrets in the Secret Manager CSI
driver provider component.
Flags relating to Cloud TPUs:
--enable-tpu
Enable Cloud TPUs for this cluster.
Can not be specified unless --enable-ip-alias is also specified.
At most one of these can be specified:
--enable-tpu-service-networking
Enable Cloud TPU's Service Networking mode. In this mode, the
CIDR blocks used by the Cloud TPUs will be allocated and managed
by Service Networking, instead of Kubernetes Engine.
This cannot be specified if tpu-ipv4-cidr is specified.
--tpu-ipv4-cidr=CIDR
Set the IP range for the Cloud TPUs.
Can be specified as a netmask size (e.g. '/20') or as in CIDR
notion (e.g. '10.100.0.0/20'). If given as a netmask size, the IP
range will be chosen automatically from the available space in
the network.
If unspecified, the TPU CIDR range will use automatic default
'/20'.
Can not be specified unless '--enable-tpu' and
'--enable-ip-alias' are also specified.
--logging-service=LOGGING_SERVICE
(DEPRECATED) Logging service to use for the cluster. Options are:
"logging.googleapis.com/kubernetes" (the Google Cloud Logging service

View file

@ -100,6 +100,9 @@ GROUPS
service-directory
(ALPHA) Manage the Service Directory Feature.
workload-identity
(ALPHA) Manage Workload Identity Feature.
COMMANDS
COMMAND is one of the following:

View file

@ -4,7 +4,10 @@ NAME
SYNOPSIS
gcloud alpha container fleet rbacrolebindingactuation update
--allowed-custom-roles=ROLES,[ROLES,...] [GCLOUD_WIDE_FLAG ...]
(--add-allowed-custom-role=ADD_ALLOWED_CUSTOM_ROLE
| --allowed-custom-roles=[ROLES,...]
| --remove-allowed-custom-role=REMOVE_ALLOWED_CUSTOM_ROLE)
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) This command updates RbacRoleBinding Actuation Feature in a fleet.
@ -14,11 +17,23 @@ EXAMPLES
$ gcloud container fleet rbacrolebinding-actuation update \
--allowed-custom-roles=role1,role2
$ gcloud container fleet rbacrolebinding-actuation update \
--add-allowed-custom-role=role1
$ gcloud container fleet rbacrolebinding-actuation update \
--remove-allowed-custom-role=role2
REQUIRED FLAGS
--allowed-custom-roles=ROLES,[ROLES,...]
The list of allowed custom roles that can be used in scope
RBACRoleBindings.
Exactly one of these must be specified:
--add-allowed-custom-role=ADD_ALLOWED_CUSTOM_ROLE
Add a single custom role to the allowed custom roles list.
--allowed-custom-roles=[ROLES,...]
The list of allowed custom roles that can be used in scope
RBACRoleBindings.
--remove-allowed-custom-role=REMOVE_ALLOWED_CUSTOM_ROLE
Remove a single custom role from the allowed custom roles list.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,

View file

@ -0,0 +1,26 @@
NAME
gcloud alpha container fleet workload-identity describe - describe the
status of Workload Identity Feature resource
SYNOPSIS
gcloud alpha container fleet workload-identity describe
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Describe the status of the Workload Identity Feature resource in a
fleet.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,30 @@
NAME
gcloud alpha container fleet workload-identity disable - disable Workload
Identity Feature
SYNOPSIS
gcloud alpha container fleet workload-identity disable [--force]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Disable the Workload Identity Feature in a fleet.
FLAGS
--force
Disable this feature, even if it is currently in use. Force disablement
may result in unexpected behavior.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,25 @@
NAME
gcloud alpha container fleet workload-identity enable - enable Workload
Identity Feature
SYNOPSIS
gcloud alpha container fleet workload-identity enable
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Enable the Workload Identity Feature in a fleet.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,40 @@
NAME
gcloud alpha container fleet workload-identity - manage Workload Identity
Feature
SYNOPSIS
gcloud alpha container fleet workload-identity GROUP | COMMAND
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Manage Workload Identity Feature.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
GROUPS
GROUP is one of the following:
scope-tenancy-pool
(ALPHA) Manage Workload Identity Feature scope tenancy pool.
COMMANDS
COMMAND is one of the following:
describe
(ALPHA) Describe the status of Workload Identity Feature resource.
disable
(ALPHA) Disable Workload Identity Feature.
enable
(ALPHA) Enable Workload Identity Feature.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,31 @@
NAME
gcloud alpha container fleet workload-identity scope-tenancy-pool - manage
Workload Identity Feature scope tenancy pool
SYNOPSIS
gcloud alpha container fleet workload-identity scope-tenancy-pool COMMAND
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Manage Workload Identity Feature scope tenancy pool.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
set
(ALPHA) Set Scope Tenancy Pool.
unset
(ALPHA) Unset Scope Tenancy Pool.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,51 @@
NAME
gcloud alpha container fleet workload-identity scope-tenancy-pool set - set
Scope Tenancy Pool
SYNOPSIS
gcloud alpha container fleet workload-identity scope-tenancy-pool set
WORKLOAD_IDENTITY_POOL [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Set the scope tenancy pool for a fleet.
POSITIONAL ARGUMENTS
Workloadidentitypool resource - The group of arguments defining a Workload
Identity Pool. This represents a Cloud resource. (NOTE) Some attributes
are not given arguments in this group but can be set in other ways.
To set the project attribute:
◆ provide the argument WORKLOAD_IDENTITY_POOL on the command line with
a fully specified name;
◆ provide the argument --project on the command line;
◆ set the property core/project.
To set the location attribute:
◆ provide the argument WORKLOAD_IDENTITY_POOL on the command line with
a fully specified name;
◆ provide the argument --location on the command line;
◆ set the property gkehub/location.
This must be specified.
WORKLOAD_IDENTITY_POOL
ID of the workloadidentitypool or fully qualified identifier for the
workloadidentitypool.
To set the workloadidentitypool attribute:
▸ provide the argument WORKLOAD_IDENTITY_POOL on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,25 @@
NAME
gcloud alpha container fleet workload-identity scope-tenancy-pool unset -
unset Scope Tenancy Pool
SYNOPSIS
gcloud alpha container fleet workload-identity scope-tenancy-pool unset
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Unset the scope tenancy pool for a fleet.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -100,6 +100,9 @@ GROUPS
service-directory
(ALPHA) Manage the Service Directory Feature.
workload-identity
(ALPHA) Manage Workload Identity Feature.
COMMANDS
COMMAND is one of the following:

View file

@ -4,7 +4,10 @@ NAME
SYNOPSIS
gcloud alpha container hub rbacrolebindingactuation update
--allowed-custom-roles=ROLES,[ROLES,...] [GCLOUD_WIDE_FLAG ...]
(--add-allowed-custom-role=ADD_ALLOWED_CUSTOM_ROLE
| --allowed-custom-roles=[ROLES,...]
| --remove-allowed-custom-role=REMOVE_ALLOWED_CUSTOM_ROLE)
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) This command updates RbacRoleBinding Actuation Feature in a fleet.
@ -14,11 +17,23 @@ EXAMPLES
$ gcloud container fleet rbacrolebinding-actuation update \
--allowed-custom-roles=role1,role2
$ gcloud container fleet rbacrolebinding-actuation update \
--add-allowed-custom-role=role1
$ gcloud container fleet rbacrolebinding-actuation update \
--remove-allowed-custom-role=role2
REQUIRED FLAGS
--allowed-custom-roles=ROLES,[ROLES,...]
The list of allowed custom roles that can be used in scope
RBACRoleBindings.
Exactly one of these must be specified:
--add-allowed-custom-role=ADD_ALLOWED_CUSTOM_ROLE
Add a single custom role to the allowed custom roles list.
--allowed-custom-roles=[ROLES,...]
The list of allowed custom roles that can be used in scope
RBACRoleBindings.
--remove-allowed-custom-role=REMOVE_ALLOWED_CUSTOM_ROLE
Remove a single custom role from the allowed custom roles list.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,

View file

@ -0,0 +1,26 @@
NAME
gcloud alpha container hub workload-identity describe - describe the status
of Workload Identity Feature resource
SYNOPSIS
gcloud alpha container hub workload-identity describe
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Describe the status of the Workload Identity Feature resource in a
fleet.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,30 @@
NAME
gcloud alpha container hub workload-identity disable - disable Workload
Identity Feature
SYNOPSIS
gcloud alpha container hub workload-identity disable [--force]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Disable the Workload Identity Feature in a fleet.
FLAGS
--force
Disable this feature, even if it is currently in use. Force disablement
may result in unexpected behavior.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,24 @@
NAME
gcloud alpha container hub workload-identity enable - enable Workload
Identity Feature
SYNOPSIS
gcloud alpha container hub workload-identity enable [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Enable the Workload Identity Feature in a fleet.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,40 @@
NAME
gcloud alpha container hub workload-identity - manage Workload Identity
Feature
SYNOPSIS
gcloud alpha container hub workload-identity GROUP | COMMAND
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Manage Workload Identity Feature.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
GROUPS
GROUP is one of the following:
scope-tenancy-pool
(ALPHA) Manage Workload Identity Feature scope tenancy pool.
COMMANDS
COMMAND is one of the following:
describe
(ALPHA) Describe the status of Workload Identity Feature resource.
disable
(ALPHA) Disable Workload Identity Feature.
enable
(ALPHA) Enable Workload Identity Feature.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,31 @@
NAME
gcloud alpha container hub workload-identity scope-tenancy-pool - manage
Workload Identity Feature scope tenancy pool
SYNOPSIS
gcloud alpha container hub workload-identity scope-tenancy-pool COMMAND
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Manage Workload Identity Feature scope tenancy pool.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
set
(ALPHA) Set Scope Tenancy Pool.
unset
(ALPHA) Unset Scope Tenancy Pool.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,51 @@
NAME
gcloud alpha container hub workload-identity scope-tenancy-pool set - set
Scope Tenancy Pool
SYNOPSIS
gcloud alpha container hub workload-identity scope-tenancy-pool set
WORKLOAD_IDENTITY_POOL [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Set the scope tenancy pool for a fleet.
POSITIONAL ARGUMENTS
Workloadidentitypool resource - The group of arguments defining a Workload
Identity Pool. This represents a Cloud resource. (NOTE) Some attributes
are not given arguments in this group but can be set in other ways.
To set the project attribute:
◆ provide the argument WORKLOAD_IDENTITY_POOL on the command line with
a fully specified name;
◆ provide the argument --project on the command line;
◆ set the property core/project.
To set the location attribute:
◆ provide the argument WORKLOAD_IDENTITY_POOL on the command line with
a fully specified name;
◆ provide the argument --location on the command line;
◆ set the property gkehub/location.
This must be specified.
WORKLOAD_IDENTITY_POOL
ID of the workloadidentitypool or fully qualified identifier for the
workloadidentitypool.
To set the workloadidentitypool attribute:
▸ provide the argument WORKLOAD_IDENTITY_POOL on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.

View file

@ -0,0 +1,25 @@
NAME
gcloud alpha container hub workload-identity scope-tenancy-pool unset -
unset Scope Tenancy Pool
SYNOPSIS
gcloud alpha container hub workload-identity scope-tenancy-pool unset
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Unset the scope tenancy pool for a fleet.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.