From 4f9f7457393f65d8b93b1d695c92f2de9e813146 Mon Sep 17 00:00:00 2001 From: Automated Date: Wed, 6 Aug 2025 11:07:54 +0000 Subject: [PATCH] gcloud: Wed Aug 6 11:07:54 UTC 2025 --- gcloud/_version | 10 +- gcloud/alpha/backup-dr/backup-vaults/update | 43 +++- gcloud/alpha/backup-dr/backups/update | 29 ++- gcloud/alpha/compute/backend-services/create | 56 +++-- gcloud/alpha/compute/backend-services/update | 57 +++-- gcloud/alpha/compute/help | 7 + gcloud/alpha/compute/instances/bulk/create | 13 +- gcloud/alpha/compute/instances/create | 8 +- .../compute/instances/network-interfaces/add | 4 +- .../instances/network-interfaces/update | 4 +- .../compute/instances/report-host-as-faulty | 4 +- gcloud/alpha/compute/migration/help | 41 ++++ .../compute/migration/image-imports/create | 163 ++++++++++++++ .../compute/migration/image-imports/delete | 73 ++++++ .../compute/migration/image-imports/describe | 72 ++++++ .../compute/migration/image-imports/help | 63 ++++++ .../compute/migration/image-imports/list | 92 ++++++++ .../migration/machine-image-imports/create | 209 ++++++++++++++++++ .../migration/machine-image-imports/delete | 74 +++++++ .../migration/machine-image-imports/describe | 72 ++++++ .../migration/machine-image-imports/help | 67 ++++++ .../migration/machine-image-imports/list | 94 ++++++++ .../compute/migration/target-projects/help | 33 +++ .../compute/migration/target-projects/list | 71 ++++++ gcloud/alpha/compute/queued-resources/create | 13 +- .../compute/zone-vm-extension-policies/create | 110 +++++++++ .../compute/zone-vm-extension-policies/delete | 57 +++++ .../zone-vm-extension-policies/describe | 57 +++++ .../compute/zone-vm-extension-policies/help | 40 ++++ .../compute/zone-vm-extension-policies/list | 67 ++++++ .../compute/zone-vm-extension-policies/update | 110 +++++++++ gcloud/alpha/container/clusters/create | 176 +++++++++++---- gcloud/alpha/container/fleet/cloudrun/disable | 6 +- .../container/fleet/config-management/disable | 6 +- .../fleet/dataplane-v2-encryption/disable | 6 +- .../fleet/fleetobservability/disable | 6 +- .../container/fleet/identity-service/disable | 6 +- gcloud/alpha/container/fleet/ingress/disable | 6 +- .../fleet/multi-cluster-services/disable | 6 +- .../container/fleet/namespaceactuation/delete | 6 +- .../container/fleet/service-directory/disable | 6 +- .../container/fleet/workload-identity/disable | 6 +- gcloud/alpha/container/hub/cloudrun/disable | 6 +- .../container/hub/config-management/disable | 6 +- .../hub/dataplane-v2-encryption/disable | 6 +- .../container/hub/fleetobservability/disable | 6 +- .../container/hub/identity-service/disable | 6 +- gcloud/alpha/container/hub/ingress/disable | 6 +- .../hub/multi-cluster-services/disable | 6 +- .../container/hub/namespaceactuation/delete | 6 +- .../container/hub/service-directory/disable | 6 +- .../container/hub/workload-identity/disable | 6 +- gcloud/alpha/container/node-pools/create | 172 ++++++++++---- gcloud/alpha/container/node-pools/update | 180 +++++++++++---- gcloud/alpha/firestore/databases/clone | 138 ++++++++++++ .../firestore/databases/connection-string | 25 ++- gcloud/alpha/firestore/databases/help | 3 + .../wasm-plugin-versions/create | 8 +- gcloud/backup-dr/backup-vaults/update | 42 +++- gcloud/backup-dr/backups/update | 29 ++- gcloud/beta/compute/backend-services/create | 47 ++-- gcloud/beta/compute/backend-services/update | 47 ++-- gcloud/beta/compute/instances/create | 8 +- .../compute/instances/network-interfaces/add | 4 +- .../instances/network-interfaces/update | 4 +- .../compute/instances/report-host-as-faulty | 4 +- gcloud/beta/container/clusters/create | 176 +++++++++++---- gcloud/beta/container/fleet/cloudrun/disable | 6 +- .../container/fleet/config-management/disable | 6 +- .../fleet/dataplane-v2-encryption/disable | 6 +- .../fleet/fleetobservability/disable | 6 +- .../container/fleet/identity-service/disable | 6 +- gcloud/beta/container/fleet/ingress/disable | 6 +- .../fleet/multi-cluster-services/disable | 6 +- gcloud/beta/container/hub/cloudrun/disable | 6 +- .../container/hub/config-management/disable | 6 +- .../hub/dataplane-v2-encryption/disable | 6 +- .../container/hub/fleetobservability/disable | 6 +- .../container/hub/identity-service/disable | 6 +- gcloud/beta/container/hub/ingress/disable | 6 +- .../hub/multi-cluster-services/disable | 6 +- gcloud/beta/container/node-pools/create | 172 ++++++++++---- gcloud/beta/container/node-pools/update | 180 +++++++++++---- .../firestore/databases/connection-string | 25 ++- gcloud/beta/managed-kafka/clusters/create | 27 ++- gcloud/beta/managed-kafka/clusters/update | 38 +++- .../wasm-plugin-versions/create | 8 +- gcloud/compute/help | 4 + .../instances/network-interfaces/update | 4 +- .../compute/instances/report-host-as-faulty | 4 +- gcloud/compute/migration/help | 37 ++++ gcloud/compute/migration/image-imports/create | 159 +++++++++++++ gcloud/compute/migration/image-imports/delete | 70 ++++++ .../compute/migration/image-imports/describe | 68 ++++++ gcloud/compute/migration/image-imports/help | 60 +++++ gcloud/compute/migration/image-imports/list | 88 ++++++++ .../migration/machine-image-imports/create | 206 +++++++++++++++++ .../migration/machine-image-imports/delete | 71 ++++++ .../migration/machine-image-imports/describe | 69 ++++++ .../migration/machine-image-imports/help | 64 ++++++ .../migration/machine-image-imports/list | 89 ++++++++ gcloud/compute/migration/target-projects/help | 29 +++ gcloud/compute/migration/target-projects/list | 68 ++++++ gcloud/container/clusters/create | 176 +++++++++++---- gcloud/container/fleet/cloudrun/disable | 6 +- .../fleet/dataplane-v2-encryption/disable | 6 +- .../fleet/fleetobservability/disable | 6 +- .../container/fleet/identity-service/disable | 6 +- gcloud/container/fleet/ingress/disable | 6 +- .../fleet/multi-cluster-services/disable | 6 +- gcloud/container/hub/cloudrun/disable | 6 +- .../hub/dataplane-v2-encryption/disable | 6 +- .../container/hub/fleetobservability/disable | 6 +- gcloud/container/hub/identity-service/disable | 6 +- gcloud/container/hub/ingress/disable | 6 +- .../hub/multi-cluster-services/disable | 6 +- gcloud/container/node-pools/create | 172 ++++++++++---- gcloud/container/node-pools/update | 180 +++++++++++---- gcloud/infra-manager/previews/create | 7 +- gcloud/managed-kafka/clusters/create | 27 ++- gcloud/managed-kafka/clusters/update | 38 +++- .../org-address-groups/create | 7 +- .../org-address-groups/update | 6 +- gcloud/run/deploy | 13 +- gcloud/run/services/update | 13 +- .../wasm-plugin-versions/create | 8 +- 126 files changed, 4671 insertions(+), 668 deletions(-) create mode 100644 gcloud/alpha/compute/migration/help create mode 100644 gcloud/alpha/compute/migration/image-imports/create create mode 100644 gcloud/alpha/compute/migration/image-imports/delete create mode 100644 gcloud/alpha/compute/migration/image-imports/describe create mode 100644 gcloud/alpha/compute/migration/image-imports/help create mode 100644 gcloud/alpha/compute/migration/image-imports/list create mode 100644 gcloud/alpha/compute/migration/machine-image-imports/create create mode 100644 gcloud/alpha/compute/migration/machine-image-imports/delete create mode 100644 gcloud/alpha/compute/migration/machine-image-imports/describe create mode 100644 gcloud/alpha/compute/migration/machine-image-imports/help create mode 100644 gcloud/alpha/compute/migration/machine-image-imports/list create mode 100644 gcloud/alpha/compute/migration/target-projects/help create mode 100644 gcloud/alpha/compute/migration/target-projects/list create mode 100644 gcloud/alpha/compute/zone-vm-extension-policies/create create mode 100644 gcloud/alpha/compute/zone-vm-extension-policies/delete create mode 100644 gcloud/alpha/compute/zone-vm-extension-policies/describe create mode 100644 gcloud/alpha/compute/zone-vm-extension-policies/help create mode 100644 gcloud/alpha/compute/zone-vm-extension-policies/list create mode 100644 gcloud/alpha/compute/zone-vm-extension-policies/update create mode 100644 gcloud/alpha/firestore/databases/clone create mode 100644 gcloud/compute/migration/help create mode 100644 gcloud/compute/migration/image-imports/create create mode 100644 gcloud/compute/migration/image-imports/delete create mode 100644 gcloud/compute/migration/image-imports/describe create mode 100644 gcloud/compute/migration/image-imports/help create mode 100644 gcloud/compute/migration/image-imports/list create mode 100644 gcloud/compute/migration/machine-image-imports/create create mode 100644 gcloud/compute/migration/machine-image-imports/delete create mode 100644 gcloud/compute/migration/machine-image-imports/describe create mode 100644 gcloud/compute/migration/machine-image-imports/help create mode 100644 gcloud/compute/migration/machine-image-imports/list create mode 100644 gcloud/compute/migration/target-projects/help create mode 100644 gcloud/compute/migration/target-projects/list diff --git a/gcloud/_version b/gcloud/_version index 434e8565a..6e3c9c937 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 532.0.0 -alpha 2025.07.25 -beta 2025.07.25 -bq 2.1.21 +Google Cloud SDK 533.0.0 +alpha 2025.08.01 +beta 2025.08.01 +bq 2.1.22 bundled-python3-unix 3.12.9 -core 2025.07.25 +core 2025.08.01 gcloud-crc32c 1.0.0 gsutil 5.35 diff --git a/gcloud/alpha/backup-dr/backup-vaults/update b/gcloud/alpha/backup-dr/backup-vaults/update index 76cc258d6..c551c03c9 100644 --- a/gcloud/alpha/backup-dr/backup-vaults/update +++ b/gcloud/alpha/backup-dr/backup-vaults/update @@ -4,11 +4,12 @@ NAME SYNOPSIS gcloud alpha backup-dr backup-vaults update - (BACKUP_VAULT : --location=LOCATION) [--no-async] + (BACKUP_VAULT : --location=LOCATION) + [--access-restriction=ACCESS_RESTRICTION] [--no-async] [--backup-min-enforced-retention=BACKUP_MIN_ENFORCED_RETENTION] [--description=DESCRIPTION] [--effective-time=EFFECTIVE_TIME] - [--force-update] [--unlock-backup-min-enforced-retention] - [GCLOUD_WIDE_FLAG ...] + [--force-update] [--force-update-access-restriction] + [--unlock-backup-min-enforced-retention] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update a Backup and DR backup vault. @@ -61,6 +62,37 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line. FLAGS + --access-restriction=ACCESS_RESTRICTION + Authorize certain sources and destinations for data being sent into, or + restored from the current backup vault. + + Access restrictions can be modified to be more or less restrictive. + + ::: More restrictive access restriction update will fail by default if there will be non compliant Data Sources. + To allow such updates, use the --force-update-access-restriction flag. + ::: For Google Cloud Console resources, the following changes are allowed to make access restrictions more restrictive: + * `UNRESTRICTED` to `WITHIN_PROJECT` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` / `WITHIN_ORGANIZATION` + * `WITHIN_PROJECT` to `WITHIN_ORGANIZATION` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` + + ::: For Management Server resources, the following changes are allowed to make access restrictions more restrictive: + * `UNRESTRICTED` to `WITHIN_PROJECT` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` / `WITHIN_ORGANIZATION` + * `WITHIN_PROJECT` to `WITHIN_ORGANIZATION` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` + + ::: For both Google Cloud Console and Management Server resources, the following changes are allowed to make access restrictions more restrictive: + * `UNRESTRICTED` to `WITHIN_PROJECT` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` / `WITHIN_ORGANIZATION` + * `WITHIN_PROJECT` to `WITHIN_ORGANIZATION` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` + + ::: For Google Cloud Console resources, the following changes are allowed to make access restrictions less restrictive: + * `WITHIN_ORGANIZATION` to `UNRESTRICTED` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` + * `WITHIN_PROJECT` to `UNRESTRICTED` + * `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` to `UNRESTRICTED` + + ::: For Management Server resources, the following changes are allowed to make access restrictions less restrictive: + * `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` to `UNRESTRICTED` + + ACCESS_RESTRICTION must be one of: within-project, within-org, + unrestricted, within-org-but-unrestricted-for-ba. + --no-async Wait for the operation in progress to complete. @@ -84,6 +116,11 @@ FLAGS defined by the associated backup plan is shorter than the minimum retention set by the backup vault. + --force-update-access-restriction + If set, the access restriction can be updated even if there are + non-compliant data sources. Backups for those data sources will fail + afterward. + --unlock-backup-min-enforced-retention Removes the lock on the backup minimum enforced retention period, and resets the effective time. When unlocked, the enforced retention period diff --git a/gcloud/alpha/backup-dr/backups/update b/gcloud/alpha/backup-dr/backups/update index 907155597..131b35ec2 100644 --- a/gcloud/alpha/backup-dr/backups/update +++ b/gcloud/alpha/backup-dr/backups/update @@ -5,8 +5,8 @@ SYNOPSIS gcloud alpha backup-dr backups update (BACKUP : --backup-vault=BACKUP_VAULT --data-source=DATA_SOURCE --location=LOCATION) - --enforced-retention-end-time=ENFORCED_RETENTION_END_TIME [--async] - [GCLOUD_WIDE_FLAG ...] + (--enforced-retention-end-time=ENFORCED_RETENTION_END_TIME + --expire-time=EXPIRE_TIME) [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update the specified Backup. @@ -69,15 +69,24 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line. REQUIRED FLAGS - --enforced-retention-end-time=ENFORCED_RETENTION_END_TIME - Backups cannot be deleted until this time or later. This period can be - extended, but not shortened. It should be specified in the format of - "YYYY-MM-DD". + Update Backup Flags - ◆ For backup configured with a backup appliance, there are additional - restrictions: 1. Enforced retention cannot be extended past the - expiry time. 2. Enforced retention can only be updated for finalized - backups. + At least one of these must be specified: + + --enforced-retention-end-time=ENFORCED_RETENTION_END_TIME + Backups cannot be deleted until this time or later. This period can + be extended, but not shortened. It should be specified in the format + of "YYYY-MM-DD". + + ▸ For backup configured with a backup appliance, there are + additional restrictions: 1. Enforced retention cannot be extended + past the expiry time. 2. Enforced retention can only be updated for + finalized backups. + + --expire-time=EXPIRE_TIME + The date when this backup is automatically expired. This date can be + extended, but not shortened. It should be specified in the format of + "YYYY-MM-DD". OPTIONAL FLAGS --async diff --git a/gcloud/alpha/compute/backend-services/create b/gcloud/alpha/compute/backend-services/create index b909d895e..2facf28bb 100644 --- a/gcloud/alpha/compute/backend-services/create +++ b/gcloud/alpha/compute/backend-services/create @@ -5,7 +5,7 @@ SYNOPSIS gcloud alpha compute backend-services create BACKEND_SERVICE_NAME [--affinity-cookie-name=AFFINITY_COOKIE_NAME] [--affinity-cookie-path=AFFINITY_COOKIE_PATH] - [--affinity-cookie-ttl=AFFINITY_COOKIE_TTL] + [--affinity-cookie-ttl=AFFINITY_COOKIE_TTL] [--[no-]allow-multinetwork] [--bypass-cache-on-request-headers=BYPASS_CACHE_ON_REQUEST_HEADERS] [--no-cache-key-include-host] [--cache-key-include-http-header=[HEADER_FIELD_NAME,...]] @@ -91,6 +91,13 @@ FLAGS session cookie. See $ gcloud topic datetimes for information on duration formats. + --[no-]allow-multinetwork + Allow or disallow backend services to be discovered across networks in + multi-network meshes. Only available for backend services with + --load-balancing-scheme=INTERNAL_SELF_MANAGED. This is disabled by + default. Use --allow-multinetwork to enable and --no-allow-multinetwork + to disable. + --bypass-cache-on-request-headers=BYPASS_CACHE_ON_REQUEST_HEADERS Bypass the cache when the specified request headers are matched - e.g. Pragma or Authorization headers. Up to 5 headers can be specified. @@ -758,42 +765,51 @@ FLAGS TRACKING_MODE must be one of: PER_CONNECTION, PER_SESSION. --zonal-affinity-spillover=ZONAL_AFFINITY_SPILLOVER - Specifies whether zonal affinity is enabled or not. + Specifies whether zonal affinity is enabled or not. For further + details, refer to Zonal affinity options + (https://cloud.google.com/load-balancing/docs/internal/zonal-affinity#zonal_affinity_options). Can only be set if load balancing scheme is INTERNAL, The possible values are: ZONAL_AFFINITY_DISABLED - Zonal Affinity is disabled. The load balancer distributes new - connections to all healthy backend endpoints across all zones. + Default Value. Zonal Affinity is disabled. The load balancer + distributes new connections to all healthy backend VMs across all + zones. ZONAL_AFFINITY_STAY_WITHIN_ZONE Zonal Affinity is enabled. The load balancer distributes new - connections to all healthy backend endpoints in the local zone only. - If there are no healthy backend endpoints in the local zone, the load - balancer distributes new connections to all backend endpoints in the - local zone. + connections to all healthy backend VMs in the client VM's zone only. + If there are no healthy backend VMs in the client VM's zone, the load + balancer distributes new connections to all backend VMs in the client + VM's zone. ZONAL_AFFINITY_SPILL_CROSS_ZONE Zonal Affinity is enabled. The load balancer distributes new - connections to all healthy backend endpoints in the local zone only. - If there aren't enough healthy backend endpoints in the local zone, - the load balancer distributes new connections to all healthy backend - endpoints across all zones. + connections to all healthy backend VMs in the client VM's zone only. + If there aren't enough healthy backend VMs in the client VM's zone, + the load balancer distributes some new connections to backend VMs in + zones other than the client VM's zone. This distribution depends on a + configurable spillover ratio that determines when traffic starts + spilling over to backend VMs in other zones. ZONAL_AFFINITY_SPILLOVER must be one of: ZONAL_AFFINITY_DISABLED, ZONAL_AFFINITY_STAY_WITHIN_ZONE, ZONAL_AFFINITY_SPILL_CROSS_ZONE. --zonal-affinity-spillover-ratio=ZONAL_AFFINITY_SPILLOVER_RATIO - The value of the field must be in [0, 1]. When the ratio of the count - of healthy backend endpoints in a zone to the count of backend - endpoints in that same zone is equal to or above this threshold, the - load balancer distributes new connections to all healthy endpoints in - the local zone only. When the ratio of the count of healthy backend - endpoints in a zone to the count of backend endpoints in that same zone - is below this threshold, the load balancer distributes all new - connections to all healthy endpoints across all zones. + The value of the field can range from 0.0 to 1.0, inclusive. If not + specified, a default value of 0.0 is used. + + This ratio indicates the threshold value for keeping traffic in the + client VM's zone. If the proportion of healthy backend VMs in a zone + falls below the configured spillover ratio, some new connections from + the client VM are distributed to healthy backend VMs in zones other + than the client VM's zone. + + For further details, refer to How ZONAL_AFFINITY_SPILL_CROSS_ZONE and + spillover ratio work + (https://cloud.google.com/load-balancing/docs/internal/zonal-affinity#zonal-affinity-spillover-ratio). At most one of these can be specified: diff --git a/gcloud/alpha/compute/backend-services/update b/gcloud/alpha/compute/backend-services/update index e8a8b94f7..a5422f857 100644 --- a/gcloud/alpha/compute/backend-services/update +++ b/gcloud/alpha/compute/backend-services/update @@ -5,7 +5,8 @@ SYNOPSIS gcloud alpha compute backend-services update BACKEND_SERVICE_NAME [--affinity-cookie-name=AFFINITY_COOKIE_NAME] [--affinity-cookie-path=AFFINITY_COOKIE_PATH] - [--affinity-cookie-ttl=AFFINITY_COOKIE_TTL] [--cache-key-include-host] + [--affinity-cookie-ttl=AFFINITY_COOKIE_TTL] [--[no-]allow-multinetwork] + [--cache-key-include-host] [--cache-key-include-http-header=[HEADER_FIELD_NAME,...]] [--cache-key-include-named-cookie=[NAMED_COOKIE,...]] [--cache-key-include-protocol] [--cache-key-include-query-string] @@ -89,6 +90,13 @@ FLAGS session cookie. See $ gcloud topic datetimes for information on duration formats. + --[no-]allow-multinetwork + Allow or disallow backend services to be discovered across networks in + multi-network meshes. Only available for backend services with + --load-balancing-scheme=INTERNAL_SELF_MANAGED. This is disabled by + default. Use --allow-multinetwork to enable and --no-allow-multinetwork + to disable. + --cache-key-include-host Enable including host in cache key. If enabled, requests to different hosts will be cached separately. Can only be applied for global @@ -563,42 +571,51 @@ FLAGS TRACKING_MODE must be one of: PER_CONNECTION, PER_SESSION. --zonal-affinity-spillover=ZONAL_AFFINITY_SPILLOVER - Specifies whether zonal affinity is enabled or not. + Specifies whether zonal affinity is enabled or not. For further + details, refer to Zonal affinity options + (https://cloud.google.com/load-balancing/docs/internal/zonal-affinity#zonal_affinity_options). Can only be set if load balancing scheme is INTERNAL, The possible values are: ZONAL_AFFINITY_DISABLED - Zonal Affinity is disabled. The load balancer distributes new - connections to all healthy backend endpoints across all zones. + Default Value. Zonal Affinity is disabled. The load balancer + distributes new connections to all healthy backend VMs across all + zones. ZONAL_AFFINITY_STAY_WITHIN_ZONE Zonal Affinity is enabled. The load balancer distributes new - connections to all healthy backend endpoints in the local zone only. - If there are no healthy backend endpoints in the local zone, the load - balancer distributes new connections to all backend endpoints in the - local zone. + connections to all healthy backend VMs in the client VM's zone only. + If there are no healthy backend VMs in the client VM's zone, the load + balancer distributes new connections to all backend VMs in the client + VM's zone. ZONAL_AFFINITY_SPILL_CROSS_ZONE Zonal Affinity is enabled. The load balancer distributes new - connections to all healthy backend endpoints in the local zone only. - If there aren't enough healthy backend endpoints in the local zone, - the load balancer distributes new connections to all healthy backend - endpoints across all zones. + connections to all healthy backend VMs in the client VM's zone only. + If there aren't enough healthy backend VMs in the client VM's zone, + the load balancer distributes some new connections to backend VMs in + zones other than the client VM's zone. This distribution depends on a + configurable spillover ratio that determines when traffic starts + spilling over to backend VMs in other zones. ZONAL_AFFINITY_SPILLOVER must be one of: ZONAL_AFFINITY_DISABLED, ZONAL_AFFINITY_STAY_WITHIN_ZONE, ZONAL_AFFINITY_SPILL_CROSS_ZONE. --zonal-affinity-spillover-ratio=ZONAL_AFFINITY_SPILLOVER_RATIO - The value of the field must be in [0, 1]. When the ratio of the count - of healthy backend endpoints in a zone to the count of backend - endpoints in that same zone is equal to or above this threshold, the - load balancer distributes new connections to all healthy endpoints in - the local zone only. When the ratio of the count of healthy backend - endpoints in a zone to the count of backend endpoints in that same zone - is below this threshold, the load balancer distributes all new - connections to all healthy endpoints across all zones. + The value of the field can range from 0.0 to 1.0, inclusive. If not + specified, a default value of 0.0 is used. + + This ratio indicates the threshold value for keeping traffic in the + client VM's zone. If the proportion of healthy backend VMs in a zone + falls below the configured spillover ratio, some new connections from + the client VM are distributed to healthy backend VMs in zones other + than the client VM's zone. + + For further details, refer to How ZONAL_AFFINITY_SPILL_CROSS_ZONE and + spillover ratio work + (https://cloud.google.com/load-balancing/docs/internal/zonal-affinity#zonal-affinity-spillover-ratio). At most one of these can be specified: diff --git a/gcloud/alpha/compute/help b/gcloud/alpha/compute/help index 314c27b3c..6d42e16bf 100644 --- a/gcloud/alpha/compute/help +++ b/gcloud/alpha/compute/help @@ -109,6 +109,10 @@ GROUPS machine-types (ALPHA) Read Compute Engine virtual machine types. + migration + (ALPHA) Provides Migrate to Virtual Machines (VM migration) service + functionality. + network-attachments (ALPHA) Manage Compute Engine network attachment resources. @@ -247,6 +251,9 @@ GROUPS vpn-tunnels (ALPHA) Read and manipulate Compute Engine VPN tunnels. + zone-vm-extension-policies + (ALPHA) Compute Engine zone VM extension policies. + zones (ALPHA) List Compute Engine zones. diff --git a/gcloud/alpha/compute/instances/bulk/create b/gcloud/alpha/compute/instances/bulk/create index 230edd426..11404b1ba 100644 --- a/gcloud/alpha/compute/instances/bulk/create +++ b/gcloud/alpha/compute/instances/bulk/create @@ -61,7 +61,8 @@ SYNOPSIS | --confidential-compute-type=CONFIDENTIAL_COMPUTE_TYPE] [--custom-cpu=CUSTOM_CPU --custom-memory=CUSTOM_MEMORY : --custom-extensions --custom-vm-type=CUSTOM_VM_TYPE] - [--image-project=IMAGE_PROJECT --image=IMAGE + [--image-project=IMAGE_PROJECT + --source-snapshot-region=SOURCE_SNAPSHOT_REGION --image=IMAGE | --image-family=IMAGE_FAMILY | --source-snapshot=SOURCE_SNAPSHOT] [--maintenance-policy=MAINTENANCE_POLICY | --on-host-maintenance=MAINTENANCE_POLICY] @@ -392,6 +393,11 @@ OPTIONAL FLAGS to. You must provide exactly two replica zones, and one zone must be the same as the instance zone. + source-snapshot-region + The region of the source snapshot that will be used to create the + disk. You can provide region name to use scoped snapshot as the + source snapshot. + --description=DESCRIPTION Specifies a textual description of the instances. @@ -1022,6 +1028,11 @@ OPTIONAL FLAGS ◆ If not specified and either image or image-family is provided, the current default project is used. + --source-snapshot-region=SOURCE_SNAPSHOT_REGION + Sets the region for the --source-snapshot flag. By default, when + specifying a snapshot, the global snapshot scope is used. Use this flag + to override this behavior to use regionally scoped snapshots. + At most one of these can be specified: --image=IMAGE diff --git a/gcloud/alpha/compute/instances/create b/gcloud/alpha/compute/instances/create index 2e7e3e75d..fb0a83dd3 100644 --- a/gcloud/alpha/compute/instances/create +++ b/gcloud/alpha/compute/instances/create @@ -457,7 +457,7 @@ FLAGS source-snapshot-region The region of the source snapshot that will be used to create the - disk. You can provide region name to use regional snapshot as the + disk. You can provide region name to use scoped snapshot as the source snapshot. --csek-key-file=FILE @@ -1201,9 +1201,9 @@ FLAGS current default project is used. --source-snapshot-region=SOURCE_SNAPSHOT_REGION - Sets the scope for the --source-snapshot flag. By default, when - specifying an snapshot, the global snapshot scope is used. Use this - flag to override this behavior to use regional snapshots. + Sets the region for the --source-snapshot flag. By default, when + specifying a snapshot, the global snapshot scope is used. Use this flag + to override this behavior to use regionally scoped snapshots. At most one of these can be specified: diff --git a/gcloud/alpha/compute/instances/network-interfaces/add b/gcloud/alpha/compute/instances/network-interfaces/add index a17ce8056..bcfbd9e97 100644 --- a/gcloud/alpha/compute/instances/network-interfaces/add +++ b/gcloud/alpha/compute/instances/network-interfaces/add @@ -54,8 +54,8 @@ FLAGS --external-ipv6-address=EXTERNAL_IPV6_ADDRESS Assigns the given external IPv6 address to an instance. The address - must be the first IP in the range. This option is applicable only to - dual-stack instances with stack-type=IPV4_ONLY. + must be the first IP in the range. This option is not applicable to + instances with stack-type=IPV4_ONLY. --external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH The prefix length of the external IPv6 address range. This flag should diff --git a/gcloud/alpha/compute/instances/network-interfaces/update b/gcloud/alpha/compute/instances/network-interfaces/update index e79424162..10f77da21 100644 --- a/gcloud/alpha/compute/instances/network-interfaces/update +++ b/gcloud/alpha/compute/instances/network-interfaces/update @@ -52,8 +52,8 @@ FLAGS --external-ipv6-address=EXTERNAL_IPV6_ADDRESS Assigns the given external IPv6 address to an instance. The address - must be the first IP in the range. This option is applicable only to - dual-stack instances with stack-type=IPV4_ONLY. + must be the first IP in the range. This option is not applicable to + instances with stack-type=IPV4_ONLY. --external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH The prefix length of the external IPv6 address range. This flag should diff --git a/gcloud/alpha/compute/instances/report-host-as-faulty b/gcloud/alpha/compute/instances/report-host-as-faulty index f4b866cc9..25769b19c 100644 --- a/gcloud/alpha/compute/instances/report-host-as-faulty +++ b/gcloud/alpha/compute/instances/report-host-as-faulty @@ -29,8 +29,8 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --disruption-schedule=DISRUPTION_SCHEDULE Specifies the timing for initiating the fault reporting process. The - default value is ['IMMEDIATE'] which initiates the process right away. - DISRUPTION_SCHEDULE must be (only one value is supported): IMMEDIATE. + default value is IMMEDIATE which initiates the process right away. + DISRUPTION_SCHEDULE must be one of: IMMEDIATE, FUTURE. --fault-reasons=[behavior=BEHAVIOR],[description=DESCRIPTION] Specified and can include one or more of the following types: diff --git a/gcloud/alpha/compute/migration/help b/gcloud/alpha/compute/migration/help new file mode 100644 index 000000000..f03651034 --- /dev/null +++ b/gcloud/alpha/compute/migration/help @@ -0,0 +1,41 @@ +NAME + gcloud alpha compute migration - provides Migrate to Virtual Machines + (VM migration) service functionality + +SYNOPSIS + gcloud alpha compute migration GROUP [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) The gcloud alpha migration vms command group provides the CLI for + the Migrate to Virtual Machines API. Google Cloud Migrate to Virtual + Machines migrates VMs from on-premises data center and other cloud + providers to Google Compute Engine virtual machine (VM) instances. VM + Migration API must be enabled in your project. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + image-imports + (ALPHA) Imports images to Google Compute Engine from Google Cloud + Storage. + + machine-image-imports + (ALPHA) Imports machine images to Google Compute Engine from Google + Cloud Storage. + + target-projects + (ALPHA) Manage Target Projects. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration + diff --git a/gcloud/alpha/compute/migration/image-imports/create b/gcloud/alpha/compute/migration/image-imports/create new file mode 100644 index 000000000..d93886719 --- /dev/null +++ b/gcloud/alpha/compute/migration/image-imports/create @@ -0,0 +1,163 @@ +NAME + gcloud alpha compute migration image-imports create - import Virtual Disk + images to Google Compute Engine + +SYNOPSIS + gcloud alpha compute migration image-imports create + (IMAGE_IMPORT_NAME : --location=LOCATION) --source-file=SOURCE_FILE + [--additional-licenses=[ADDITIONAL_LICENSES,...]] + [--description=DESCRIPTION] [--family-name=FAMILY_NAME] + [--image-name=IMAGE_NAME] [--kms-key=KMS_KEY] + [--labels=[KEY=VALUE,...]] [--single-region-storage] + [--target-project=TARGET_PROJECT] + [--skip-os-adaptation | --adaptation-modifiers=ADAPTATION_MODIFIERS + --boot-conversion=BOOT_CONVERSION + --generalize --license-type=LICENSE_TYPE --rootfs-uuid=ROOTFS_UUID] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute migration image-imports create imports images + such as VMWare VMDK files and VHD files, from a Google Cloud Storage file + (gs://...) to Google Compute Engine, using the Migrate to Virtual Machines + service API. This command creates an Image Import resource with a nested + Image Import Job resource. The Image Import Job resource tracks the image + import progress. To use this command, you must enable VM Migration API in + your project. + +EXAMPLES + To import my-ubuntu22.04.vmdk from my-images-bucket to my-target-project in + us-central1, create my-image-import resource in my-project in us-central1. + Run: $ gcloud alpha compute migration image-imports create \ + my-image-import \ + --source-file=gs://my-images-bucket/my-ubuntu22.04.vmdk \ + --image-name=my-ubuntu-image --location=us-central1 \ + --target-project=projects/my-project/locations/global/\ + targetProjects/my-target-project --project=my-project + +POSITIONAL ARGUMENTS + Image import resource - The Image Import resource you want to create. This + would be the image name if --image-name is not given. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +REQUIRED FLAGS + --source-file=SOURCE_FILE + The path to the Google Cloud Storage file from which the image should + be imported. + +OPTIONAL FLAGS + --additional-licenses=[ADDITIONAL_LICENSES,...] + Comma-separated list of the additional licenses to assign to the image. + + --description=DESCRIPTION + A description of the image. + + --family-name=FAMILY_NAME + The name of the image family to which the new image belongs. + + --image-name=IMAGE_NAME + The name of the image that will be imported to Google Compute Engine. + Default is the Image Import name. + + --kms-key=KMS_KEY + Fully qualified identifier for the Cloud KMS (Key Management Service) + cryptokey that will be used to protect the image. + + --labels=[KEY=VALUE,...] + A map of labels to associate with the image. + + --single-region-storage + If true, the location of the imported image will be the region of the + import job. Otherwise the closest multi-region is selected. Default is + false. + + --target-project=TARGET_PROJECT + The target project resource path to which the image will be imported. + Default is the customer project. To get a list of the target projects + run the gcloud alpha migration vms target-projects list command. + + OS adaptation parameters + + At most one of these can be specified: + + --skip-os-adaptation + If true, skip OS adaptation. Default false. + + --adaptation-modifiers=ADAPTATION_MODIFIERS + A map of flags to pass to the OS adaptation process. The actual value + depends on the modifier and can also be empty. e.g. + --adaptation-modifiers=flag1=value1,flag2 + + --boot-conversion=BOOT_CONVERSION + This property will trigger an internal process which will convert the + image from using the existing boot option to another. The size of the + boot disk might be increased to allow the conversion. Currently only + support BIOS_TO_EFI. + + BOOT_CONVERSION must be one of: bios-to-efi, + boot-conversion-unspecified, none. + + --generalize + If true, generalize the imported image. Default false. The + generalization process enables co-existence of multiple VMs created + from the same image. For Windows, generalizing the image removes + computer-specific information such as installed drivers and the + computer security identifier (SID). + + --license-type=LICENSE_TYPE + The license to use post migration. LICENSE_TYPE must be one of: + compute-engine-license-type-byol, + compute-engine-license-type-default, + compute-engine-license-type-payg. + + --rootfs-uuid=ROOTFS_UUID + Identifies the file system to adapt. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration image-imports create + diff --git a/gcloud/alpha/compute/migration/image-imports/delete b/gcloud/alpha/compute/migration/image-imports/delete new file mode 100644 index 000000000..c169a6ba1 --- /dev/null +++ b/gcloud/alpha/compute/migration/image-imports/delete @@ -0,0 +1,73 @@ +NAME + gcloud alpha compute migration image-imports delete - delete an Image + Import resource + +SYNOPSIS + gcloud alpha compute migration image-imports delete + (IMAGE_IMPORT_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute migration image-imports delete deletes an + Image Import resource. To use this command, you must enable VM Migration + API in your project. + + This command does not delete any images imported to Google Compute Engine. + +EXAMPLES + To delete my-image-import resource in us-central1 in the default project, + run: $ gcloud alpha compute migration image-imports delete \ + my-image-import --location=us-central1 + +POSITIONAL ARGUMENTS + Image import resource - The Image Import resource you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration image-imports delete + diff --git a/gcloud/alpha/compute/migration/image-imports/describe b/gcloud/alpha/compute/migration/image-imports/describe new file mode 100644 index 000000000..601e5bfbb --- /dev/null +++ b/gcloud/alpha/compute/migration/image-imports/describe @@ -0,0 +1,72 @@ +NAME + gcloud alpha compute migration image-imports describe - describe an Image + Import + +SYNOPSIS + gcloud alpha compute migration image-imports describe + (IMAGE_IMPORT_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute migration image-imports describe describes an + Image Import resource with a nested Image Import Job. The Image Import Job + resource tracks the image import progress. To use this command, you must + enable VM Migration API in your project. + +EXAMPLES + To describe my-image-import resource in us-central1 in the default project, + run: $ gcloud alpha compute migration image-imports describe \ + my-image-import --location=us-central1 + +POSITIONAL ARGUMENTS + Image import resource - The Image Import you want to describe. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration image-imports describe + diff --git a/gcloud/alpha/compute/migration/image-imports/help b/gcloud/alpha/compute/migration/image-imports/help new file mode 100644 index 000000000..17e3a31a2 --- /dev/null +++ b/gcloud/alpha/compute/migration/image-imports/help @@ -0,0 +1,63 @@ +NAME + gcloud alpha compute migration image-imports - imports images to Google + Compute Engine from Google Cloud Storage + +SYNOPSIS + gcloud alpha compute migration image-imports COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha migration vms image-imports provides a more robust and + better supported method for importing images to Google Compute Engine. + Other image-related operations (for example, list) can be done using gcloud + compute images, as usual. + + The commands use VM Migartion API which supports importing of an image from + a Google Cloud Storage file (gs://...) to a target project. VM Migration + API must be enabled in your project. + + gcloud alpha migration vms image-imports create creates an Image Import + resource with a nested Image Import Job resource. The Image Import Job + resource tracks the image import progress. After the Image Import Job + completes, successfully or otherwise, there's no further use for the Image + Import resource. + + The image is imported to a Google Cloud Project, desginated by the Target + Project resource. To get a list of Target Projects, run the gcloud alpha + migration vms target-projects list command. Use the Google Cloud console to + add target project resources. For information on adding target projects, + see + https://cloud.google.com/migrate/virtual-machines/docs/5.0/how-to/target-project. + + A project can support a maximum of 1000 Image Import resources per project. + Hence it's recommended to delete an Image Import resource after the Image + Import Job is complete to avoid reaching the Image Import resources limit. + Deletion of Image Import resource does not affect the imported image. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) import Virtual Disk images to Google Compute Engine. + + delete + (ALPHA) delete an Image Import resource. + + describe + (ALPHA) describe an Image Import. + + list + (ALPHA) list Image Imports. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration image-imports + diff --git a/gcloud/alpha/compute/migration/image-imports/list b/gcloud/alpha/compute/migration/image-imports/list new file mode 100644 index 000000000..76a20de59 --- /dev/null +++ b/gcloud/alpha/compute/migration/image-imports/list @@ -0,0 +1,92 @@ +NAME + gcloud alpha compute migration image-imports list - list Image Imports + +SYNOPSIS + gcloud alpha compute migration image-imports list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute migration image-imports list prints a detailed + list of Image Import resources. To use this command, you must enable VM + Migration API in your project. + +EXAMPLES + To list the Image Import resources in us-central1 in the default project, + run: $ gcloud alpha compute migration image-imports list \ + --location=us-central1 + +FLAGS + Location resource - The compute/region of the Image Import. To get a list + of the available regions, run gcloud compute regions list command. If not + specified, the value of the [compute/zone] property in the current gcloud + configuration is used. This represents a Cloud resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property compute/region with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration image-imports list + diff --git a/gcloud/alpha/compute/migration/machine-image-imports/create b/gcloud/alpha/compute/migration/machine-image-imports/create new file mode 100644 index 000000000..5ac5fbc2f --- /dev/null +++ b/gcloud/alpha/compute/migration/machine-image-imports/create @@ -0,0 +1,209 @@ +NAME + gcloud alpha compute migration machine-image-imports create - import + machine images to Google Compute Engine + +SYNOPSIS + gcloud alpha compute migration machine-image-imports create + (IMAGE_IMPORT_NAME : --location=LOCATION) --source-file=SOURCE_FILE + [--additional-licenses=[ADDITIONAL_LICENSES,...]] + [--description=DESCRIPTION] [--kms-key=KMS_KEY] + [--labels=[KEY=VALUE,...]] [--machine-image-name=MACHINE_IMAGE_NAME] + [--machine-type=MACHINE_TYPE] + [--network-interface=[network=NETWORK], + [networkTier=NETWORKTIER],[subnetwork=SUBNETWORK]] + [--single-region-storage] [--tags=[TAGS,...]] + [--target-project=TARGET_PROJECT] + [--enable-integrity-monitoring --enable-vtpm --secure-boot=SECURE_BOOT] + [--scopes=[SCOPES,...] --service-account=SERVICE_ACCOUNT] + [--skip-os-adaptation | --adaptation-modifiers=ADAPTATION_MODIFIERS + --boot-conversion=BOOT_CONVERSION + --generalize --license-type=LICENSE_TYPE --rootfs-uuid=ROOTFS_UUID] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute migration machine-image-imports create Imports + machine images such as OVA and OVF files, from a Google Cloud Storage file + (gs://...) to Google Compute Engine, using the Migrate to Virtual Machines + service API. This command creates an Image Import resource with a nested + Image Import Job resource. The Image Import Job resource tracks the image + import progress. To use this command, you must enable VM Migration API in + your project. + +EXAMPLES + To import ub-14.04.5.ova from my-images-bucket to my-target-project in + us-central1, create my-image-import resource in my-project in us-central1. + Run: $ gcloud alpha compute migration machine-image-imports create \ + my-machine-image-import \ + --source-file=gs://my-images-bucket/ub-14.04.5.ova \ + --image-name=my-ubuntu-machine-image --location=us-central1 \ + --target-project=projects/my-project/locations/global/\ + targetProjects/my-target-project --project=my-project + +POSITIONAL ARGUMENTS + Image import resource - The Image Import resource you want to create. This + would be the machine image name if --machine-image-name is not given. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +REQUIRED FLAGS + --source-file=SOURCE_FILE + The path to the Google Cloud Storage file from which the image should + be imported. + +OPTIONAL FLAGS + --additional-licenses=[ADDITIONAL_LICENSES,...] + Comma-separated list of the additional licenses to assign to the + machine image. + + --description=DESCRIPTION + A description of the machine image. + + --kms-key=KMS_KEY + Fully qualified identifier for the Cloud KMS (Key Management Service) + cryptokey that will be used to protect the image. + + --labels=[KEY=VALUE,...] + A map of labels to associate with the machine image. + + --machine-image-name=MACHINE_IMAGE_NAME + The name of the machine image that will be imported to Google Compute + Engine. Default is the Image Import name. + + --machine-type=MACHINE_TYPE + The machine type to create the machine image with. If not provided, the + service will choose a relevant machine type series based on the + information from the source image. + + --network-interface=[network=NETWORK],[networkTier=NETWORKTIER],[subnetwork=SUBNETWORK] + The network interface to use for the instance created by the machine + image. This is a dicionary with the following keys: + ◆ network: The network to use for this network interface. + ◆ subnetwork: The subnetwork to use for this network interface. + ◆ network-tier: The network tier to use for this network interface. + This argument can be specified multiple times in case of multiple + nics. + + --single-region-storage + If true, the location of the imported machine image will be the region + of the import job. Otherwise the closest multi-region is selected. + Default is false. + + --tags=[TAGS,...] + The tags to apply to the instance created by the machine image. + + --target-project=TARGET_PROJECT + The target project resource path to which the machine image will be + imported. Default is the host project. To get a list of the target + projects run the gcloud alpha migration vms target-projects list + command. + + Shielded instance configuration. + + --enable-integrity-monitoring + Defines whether the instance created by the machine image has + integrity monitoring enabled. This can be set to true only if the + image boot option is EFI, and vTPM is enabled. + + --enable-vtpm + Defines whether the instance created by the machine image has vTPM + enabled. This can be set to true only if the image boot option is + EFI. + + --secure-boot=SECURE_BOOT + Defines whether the instance created by the machine image has Secure + Boot enabled. This can be set to true only if the image boot option + is EFI. If not specified we will use the configuration of the source. + SECURE_BOOT must be one of: false, secure-boot-unspecified, true. + + The service account to assign to the instance created by the machine + image. + + --scopes=[SCOPES,...] + The list of scopes to be made available for the service account. + + --service-account=SERVICE_ACCOUNT + The email address of the service account. + + OS adaptation parameters. + + At most one of these can be specified: + + --skip-os-adaptation + If true, skip OS adaptation. Default false. + + --adaptation-modifiers=ADAPTATION_MODIFIERS + A map of flags to pass to the OS adaptation process. The actual value + depends on the modifier and can also be empty. e.g. + --adaptation-modifiers=flag1=value1,flag2 + + --boot-conversion=BOOT_CONVERSION + This property will trigger an internal process which will convert the + image from using the existing boot option to another. The size of the + boot disk might be increased to allow the conversion. Currently only + support BIOS_TO_EFI. BOOT_CONVERSION must be one of: bios-to-efi, + boot-conversion-unspecified, none. + + --generalize + If true, generalize the imported machine image. Default false. The + generalization process enables co-existence of multiple VMs created + from the same machine image. For Windows, generalizing the machine + image removes computer-specific information such as installed drivers + and the computer security identifier (SID). + + --license-type=LICENSE_TYPE + The license to use post migration. LICENSE_TYPE must be one of: + compute-engine-license-type-byol, + compute-engine-license-type-default, + compute-engine-license-type-payg. + + --rootfs-uuid=ROOTFS_UUID + Identifies the file system to adapt. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration machine-image-imports create + diff --git a/gcloud/alpha/compute/migration/machine-image-imports/delete b/gcloud/alpha/compute/migration/machine-image-imports/delete new file mode 100644 index 000000000..344da511c --- /dev/null +++ b/gcloud/alpha/compute/migration/machine-image-imports/delete @@ -0,0 +1,74 @@ +NAME + gcloud alpha compute migration machine-image-imports delete - delete an + Image Import resource + +SYNOPSIS + gcloud alpha compute migration machine-image-imports delete + (IMAGE_IMPORT_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute migration machine-image-imports delete deletes + an Image Import resource. To use this command, you must enable VM Migration + API in your project. + + This command does not delete any machine images imported to Google Compute + Engine. + +EXAMPLES + To delete my-image-import resource in us-central1 in the default project, + run: $ gcloud alpha compute migration machine-image-imports delete \ + my-image-import --location=us-central1 + +POSITIONAL ARGUMENTS + Image import resource - The Image Import resource you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration machine-image-imports delete + diff --git a/gcloud/alpha/compute/migration/machine-image-imports/describe b/gcloud/alpha/compute/migration/machine-image-imports/describe new file mode 100644 index 000000000..a91e3e5b9 --- /dev/null +++ b/gcloud/alpha/compute/migration/machine-image-imports/describe @@ -0,0 +1,72 @@ +NAME + gcloud alpha compute migration machine-image-imports describe - describe an + Image Import + +SYNOPSIS + gcloud alpha compute migration machine-image-imports describe + (IMAGE_IMPORT_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute migration machine-image-imports describe + describes an Image Import resource with a nested Image Import Job. The + Image Import Job resource tracks the image import progress. To use this + command, you must enable VM Migration API in your project. + +EXAMPLES + To describe my-image-import resource in us-central1 in the default project, + run: $ gcloud alpha compute migration machine-image-imports describe \ + my-image-import --location=us-central1 + +POSITIONAL ARGUMENTS + Image import resource - The Image Import you want to describe. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration machine-image-imports describe + diff --git a/gcloud/alpha/compute/migration/machine-image-imports/help b/gcloud/alpha/compute/migration/machine-image-imports/help new file mode 100644 index 000000000..dbfddc161 --- /dev/null +++ b/gcloud/alpha/compute/migration/machine-image-imports/help @@ -0,0 +1,67 @@ +NAME + gcloud alpha compute migration machine-image-imports - imports machine + images to Google Compute Engine from Google Cloud Storage + +SYNOPSIS + gcloud alpha compute migration machine-image-imports COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud migration vms machine-image-imports provides a more robust + and better supported method for importing machine images to Google Compute + Engine. Other image-related operations (for example, list) can be done + using gcloud compute images, as usual. + + The commands use VM Migration API which supports importing of a machine + image from a Google Cloud Storage file (gs://...) to a target project. VM + Migration API must be enabled in your project. + + gcloud migration vms machine-image-imports create creates a machine Image + Import resource with a nested Image Import Job resource. The Image Import + Job resource tracks the machine image import progress. After the Image + Import Job completes, successfully or otherwise, there's no further use for + the Image Import resource. + + The machine image is imported to a Google Cloud Project, desginated by the + Target Project resource. To get a list of Target Projects, run the gcloud + alpha migration vms target-projects list command. Use the Google Cloud + console to add target project resources. For information on adding target + projects, see + https://cloud.google.com/migrate/virtual-machines/docs/5.0/how-to/target-project. + + A project can support up to a certain number of Image Import resources per + project. Hence it's recommended to delete an Image Import resource after + the Image Import Job is complete to avoid reaching the Image Import + resources limit. Deletion of Image Import resource does not affect the + imported machine image. For more information about the image import + resource, see + https://cloud.google.com/migrate/virtual-machines/docs/5.0/migrate/image_import. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) import machine images to Google Compute Engine. + + delete + (ALPHA) delete an Image Import resource. + + describe + (ALPHA) describe an Image Import. + + list + (ALPHA) list Image Imports. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration machine-image-imports + diff --git a/gcloud/alpha/compute/migration/machine-image-imports/list b/gcloud/alpha/compute/migration/machine-image-imports/list new file mode 100644 index 000000000..5c19e69d0 --- /dev/null +++ b/gcloud/alpha/compute/migration/machine-image-imports/list @@ -0,0 +1,94 @@ +NAME + gcloud alpha compute migration machine-image-imports list - list Image + Imports + +SYNOPSIS + gcloud alpha compute migration machine-image-imports list + [--location=LOCATION] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute migration machine-image-imports list prints a + detailed list of Image Import resources. To use this command, you must + enable VM Migration API in your project. + +EXAMPLES + To list the Image Import resources in us-central1 in the default project, + run: $ gcloud alpha compute migration machine-image-imports list \ + --location=us-central1 + +FLAGS + Location resource - The compute/region of the Image Import. To get a list + of the available regions, run gcloud compute regions list command. If not + specified, the value of the [compute/zone] property in the current gcloud + configuration is used. This represents a Cloud resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property compute/region with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration machine-image-imports list + diff --git a/gcloud/alpha/compute/migration/target-projects/help b/gcloud/alpha/compute/migration/target-projects/help new file mode 100644 index 000000000..12748d42f --- /dev/null +++ b/gcloud/alpha/compute/migration/target-projects/help @@ -0,0 +1,33 @@ +NAME + gcloud alpha compute migration target-projects - manage Target Projects + +SYNOPSIS + gcloud alpha compute migration target-projects COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) target-projects sub-group is used to manage Target Project + resources of the Migrate to Virtual Machines service. Target projects are + defined for each customer project in the global location. A Target Project + could be used as the target project of various migration commands. VM + Migration API must be enabled in your project. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + list + (ALPHA) list Target Projects. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration target-projects + diff --git a/gcloud/alpha/compute/migration/target-projects/list b/gcloud/alpha/compute/migration/target-projects/list new file mode 100644 index 000000000..6d41804fd --- /dev/null +++ b/gcloud/alpha/compute/migration/target-projects/list @@ -0,0 +1,71 @@ +NAME + gcloud alpha compute migration target-projects list - list Target Projects + +SYNOPSIS + gcloud alpha compute migration target-projects list [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute migration target-projects list lists Target + Project resources, which are required for setting the target project for + migration. Target projects are defined for each customer project in the + global location. To use this command, you must enable VM Migration API in + your project. + +EXAMPLES + To list the Target Project resources in the global location in the default + project, run: $ gcloud alpha compute migration target-projects list + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud compute migration target-projects list + diff --git a/gcloud/alpha/compute/queued-resources/create b/gcloud/alpha/compute/queued-resources/create index 78b9d2bbc..7e97f7313 100644 --- a/gcloud/alpha/compute/queued-resources/create +++ b/gcloud/alpha/compute/queued-resources/create @@ -61,7 +61,8 @@ SYNOPSIS | --confidential-compute-type=CONFIDENTIAL_COMPUTE_TYPE] [--custom-cpu=CUSTOM_CPU --custom-memory=CUSTOM_MEMORY : --custom-extensions --custom-vm-type=CUSTOM_VM_TYPE] - [--image-project=IMAGE_PROJECT --image=IMAGE + [--image-project=IMAGE_PROJECT + --source-snapshot-region=SOURCE_SNAPSHOT_REGION --image=IMAGE | --image-family=IMAGE_FAMILY | --source-snapshot=SOURCE_SNAPSHOT] [--maintenance-policy=MAINTENANCE_POLICY | --on-host-maintenance=MAINTENANCE_POLICY] @@ -376,6 +377,11 @@ OPTIONAL FLAGS to. You must provide exactly two replica zones, and one zone must be the same as the instance zone. + source-snapshot-region + The region of the source snapshot that will be used to create the + disk. You can provide region name to use scoped snapshot as the + source snapshot. + --description=DESCRIPTION Specifies a textual description of the instances. @@ -1019,6 +1025,11 @@ OPTIONAL FLAGS ◆ If not specified and either image or image-family is provided, the current default project is used. + --source-snapshot-region=SOURCE_SNAPSHOT_REGION + Sets the region for the --source-snapshot flag. By default, when + specifying a snapshot, the global snapshot scope is used. Use this flag + to override this behavior to use regionally scoped snapshots. + At most one of these can be specified: --image=IMAGE diff --git a/gcloud/alpha/compute/zone-vm-extension-policies/create b/gcloud/alpha/compute/zone-vm-extension-policies/create new file mode 100644 index 000000000..bca350326 --- /dev/null +++ b/gcloud/alpha/compute/zone-vm-extension-policies/create @@ -0,0 +1,110 @@ +NAME + gcloud alpha compute zone-vm-extension-policies create - create a Compute + Engine zone VM extension policy + +SYNOPSIS + gcloud alpha compute zone-vm-extension-policies create NAME + --extensions=EXTENSIONS [--description=DESCRIPTION] + [--filestore-config=FILESTORE_CONFIG] + [--filestore-version=FILESTORE_VERSION] + [--inclusion-labels=INCLUSION_LABELS] + [--priority=PRIORITY; default=1000] [--zone=ZONE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a Compute Engine zone VM extension policy. + +EXAMPLES + To create a zone VM extension policy, run: + + $ gcloud alpha compute zone-vm-extension-policies create \ + test-policy-name --description="test policy" \ + --extensions=filestore --filestore-version=20250101RC00 \ + --filestore-config=config1 --inclusion-labels=env=prod \ + --inclusion-labels=env=preprod,workload=load-test \ + --priority=1000 + +POSITIONAL ARGUMENTS + NAME + Name of the zone vm extension policy to create. + +REQUIRED FLAGS + --extensions=EXTENSIONS + A list of extensions to be added to the policy. EXTENSIONS must be + (only one value is supported): filestore. + +OPTIONAL FLAGS + --description=DESCRIPTION + An optional textual description for the this extension policy. + + --filestore-config=FILESTORE_CONFIG + The config send to the extension when extension starts. + + --filestore-version=FILESTORE_VERSION + The pinned version for filestore. + + If not specified, the latest version will be used, and will be upgraded + automatically. + + --inclusion-labels=INCLUSION_LABELS + A list of inclusion labels to select the target VMs. + + The expected format for a single selector is "key1=value1,key2=value2". + A VM is selected if it has ALL the inclusion labels. + + When the option is specified multiple times, it assumes a logical OR + between the selectors. + + For example, if the inclusion labels are ["env=prod,workload=frontend", + "workload=backend"], the following VMs will be selected: + ◆ VM1: env=prod, workload=frontend, something=else + ◆ VM2: env=prod, workload=backend But not: + ◆ VM3: env=prod + + If not specified, ALL VMs in the zone will be selected. + + --priority=PRIORITY; default=1000 + The priority of the policy. Lower the number, higher the priority. When + two policies tries to apply the same extension, the one with the higher + priority takes precedence. If the priority is the same, the one with + the more recent update timestamp takes precedence. When a policy is + deleted, the extension would remain installed on the VM if a lower + priority policy still applies. + + Range from 0 to 65535. Default is 1000. + + --zone=ZONE + Zone of the zone vm extension policy to create. If not specified and + the compute/zone property isn't set, you might be prompted to select a + zone (interactive mode only). + + To avoid prompting when this flag is omitted, you can set the + compute/zone property: + + $ gcloud config set compute/zone ZONE + + A list of zones can be fetched by running: + + $ gcloud compute zones list + + To unset the property, run: + + $ gcloud config unset compute/zone + + Alternatively, the zone can be stored in the environment variable + CLOUDSDK_COMPUTE_ZONE. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/zone-vm-extension-policies/delete b/gcloud/alpha/compute/zone-vm-extension-policies/delete new file mode 100644 index 000000000..1d95e0f3f --- /dev/null +++ b/gcloud/alpha/compute/zone-vm-extension-policies/delete @@ -0,0 +1,57 @@ +NAME + gcloud alpha compute zone-vm-extension-policies delete - delete a Compute + Engine zone VM extension policy + +SYNOPSIS + gcloud alpha compute zone-vm-extension-policies delete NAME [--zone=ZONE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete a Compute Engine zone VM extension policy. + +EXAMPLES + To delete a zone VM extension policy, run: + + $ gcloud alpha compute zone-vm-extension-policies delete \ + test-policy-name + +POSITIONAL ARGUMENTS + NAME + Name of the zone vm extension policy to delete. + +FLAGS + --zone=ZONE + Zone of the zone vm extension policy to delete. If not specified and + the compute/zone property isn't set, you might be prompted to select a + zone (interactive mode only). + + To avoid prompting when this flag is omitted, you can set the + compute/zone property: + + $ gcloud config set compute/zone ZONE + + A list of zones can be fetched by running: + + $ gcloud compute zones list + + To unset the property, run: + + $ gcloud config unset compute/zone + + Alternatively, the zone can be stored in the environment variable + CLOUDSDK_COMPUTE_ZONE. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/zone-vm-extension-policies/describe b/gcloud/alpha/compute/zone-vm-extension-policies/describe new file mode 100644 index 000000000..81555c835 --- /dev/null +++ b/gcloud/alpha/compute/zone-vm-extension-policies/describe @@ -0,0 +1,57 @@ +NAME + gcloud alpha compute zone-vm-extension-policies describe - describe a + Compute Engine zone VM extension policy + +SYNOPSIS + gcloud alpha compute zone-vm-extension-policies describe NAME [--zone=ZONE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe a Compute Engine zone VM extension policy. + +EXAMPLES + To describe a zone VM extension policy, run: + + $ gcloud alpha compute zone-vm-extension-policies describe \ + test-policy-name + +POSITIONAL ARGUMENTS + NAME + Name of the zone vm extension policy to describe. + +FLAGS + --zone=ZONE + Zone of the zone vm extension policy to describe. If not specified and + the compute/zone property isn't set, you might be prompted to select a + zone (interactive mode only). + + To avoid prompting when this flag is omitted, you can set the + compute/zone property: + + $ gcloud config set compute/zone ZONE + + A list of zones can be fetched by running: + + $ gcloud compute zones list + + To unset the property, run: + + $ gcloud config unset compute/zone + + Alternatively, the zone can be stored in the environment variable + CLOUDSDK_COMPUTE_ZONE. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/zone-vm-extension-policies/help b/gcloud/alpha/compute/zone-vm-extension-policies/help new file mode 100644 index 000000000..77884c67d --- /dev/null +++ b/gcloud/alpha/compute/zone-vm-extension-policies/help @@ -0,0 +1,40 @@ +NAME + gcloud alpha compute zone-vm-extension-policies - compute Engine zone VM + extension policies + +SYNOPSIS + gcloud alpha compute zone-vm-extension-policies COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Compute Engine zone VM extension policies. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) Create a Compute Engine zone VM extension policy. + + delete + (ALPHA) Delete a Compute Engine zone VM extension policy. + + describe + (ALPHA) Describe a Compute Engine zone VM extension policy. + + list + (ALPHA) List Compute Engine zone VM extension policies. + + update + (ALPHA) Update a Compute Engine zone VM extension policy. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/zone-vm-extension-policies/list b/gcloud/alpha/compute/zone-vm-extension-policies/list new file mode 100644 index 000000000..4932bfbdd --- /dev/null +++ b/gcloud/alpha/compute/zone-vm-extension-policies/list @@ -0,0 +1,67 @@ +NAME + gcloud alpha compute zone-vm-extension-policies list - list Compute Engine + zone VM extension policies + +SYNOPSIS + gcloud alpha compute zone-vm-extension-policies list --zone=ZONE + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List Compute Engine zone VM extension policies. + +EXAMPLES + To list all zone VM extension policy, run: + + $ gcloud alpha compute zone-vm-extension-policies list --zone= + +REQUIRED FLAGS + --zone=ZONE + The zone to list the extension policies from. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/zone-vm-extension-policies/update b/gcloud/alpha/compute/zone-vm-extension-policies/update new file mode 100644 index 000000000..b65262101 --- /dev/null +++ b/gcloud/alpha/compute/zone-vm-extension-policies/update @@ -0,0 +1,110 @@ +NAME + gcloud alpha compute zone-vm-extension-policies update - update a Compute + Engine zone VM extension policy + +SYNOPSIS + gcloud alpha compute zone-vm-extension-policies update NAME + --extensions=EXTENSIONS [--description=DESCRIPTION] + [--filestore-config=FILESTORE_CONFIG] + [--filestore-version=FILESTORE_VERSION] + [--inclusion-labels=INCLUSION_LABELS] + [--priority=PRIORITY; default=1000] [--zone=ZONE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update a Compute Engine zone VM extension policy. + +EXAMPLES + To update a zone VM extension policy, run: + + $ gcloud alpha compute zone-vm-extension-policies update \ + test-policy-name --description="test policy" \ + --extensions=filestore --filestore-version=20250101RC00 \ + --filestore-config=config1 --inclusion-labels=env=prod \ + --inclusion-labels=env=preprod,workload=load-test \ + --priority=1000 + +POSITIONAL ARGUMENTS + NAME + Name of the zone vm extension policy to update. + +REQUIRED FLAGS + --extensions=EXTENSIONS + A list of extensions to be added to the policy. EXTENSIONS must be + (only one value is supported): filestore. + +OPTIONAL FLAGS + --description=DESCRIPTION + An optional textual description for the this extension policy. + + --filestore-config=FILESTORE_CONFIG + The config send to the extension when extension starts. + + --filestore-version=FILESTORE_VERSION + The pinned version for filestore. + + If not specified, the latest version will be used, and will be upgraded + automatically. + + --inclusion-labels=INCLUSION_LABELS + A list of inclusion labels to select the target VMs. + + The expected format for a single selector is "key1=value1,key2=value2". + A VM is selected if it has ALL the inclusion labels. + + When the option is specified multiple times, it assumes a logical OR + between the selectors. + + For example, if the inclusion labels are ["env=prod,workload=frontend", + "workload=backend"], the following VMs will be selected: + ◆ VM1: env=prod, workload=frontend, something=else + ◆ VM2: env=prod, workload=backend But not: + ◆ VM3: env=prod + + If not specified, ALL VMs in the zone will be selected. + + --priority=PRIORITY; default=1000 + The priority of the policy. Lower the number, higher the priority. When + two policies tries to apply the same extension, the one with the higher + priority takes precedence. If the priority is the same, the one with + the more recent update timestamp takes precedence. When a policy is + deleted, the extension would remain installed on the VM if a lower + priority policy still applies. + + Range from 0 to 65535. Default is 1000. + + --zone=ZONE + Zone of the zone vm extension policy to update. If not specified and + the compute/zone property isn't set, you might be prompted to select a + zone (interactive mode only). + + To avoid prompting when this flag is omitted, you can set the + compute/zone property: + + $ gcloud config set compute/zone ZONE + + A list of zones can be fetched by running: + + $ gcloud compute zones list + + To unset the property, run: + + $ gcloud config unset compute/zone + + Alternatively, the zone can be stored in the environment variable + CLOUDSDK_COMPUTE_ZONE. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/container/clusters/create b/gcloud/alpha/container/clusters/create index b5139829a..b0fbceb36 100644 --- a/gcloud/alpha/container/clusters/create +++ b/gcloud/alpha/container/clusters/create @@ -229,8 +229,8 @@ FLAGS ADDON must be one of: HttpLoadBalancing, HorizontalPodAutoscaling, KubernetesDashboard, NetworkPolicy, NodeLocalDNS, ConfigConnector, GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, BackupRestore, - GcsFuseCsiDriver, ParallelstoreCsiDriver, LustreCsiDriver, RayOperator, - Istio, CloudBuild, CloudRun. + GcsFuseCsiDriver, ParallelstoreCsiDriver, HighScaleCheckpointing, + LustreCsiDriver, RayOperator, Istio, CloudBuild, CloudRun. --allow-route-overlap Allows the provided cluster CIDRs to overlap with existing routes that @@ -1414,46 +1414,61 @@ FLAGS List of supported kubelet configs in 'kubeletConfig'. - KEY VALUE - cpuManagerPolicy either 'static' or 'none' - cpuCFSQuota true or false (enabled by - default) - cpuCFSQuotaPeriod interval (e.g., '100ms') - memoryManager specify memory manager policy - topologyManager specify topology manager policy - and scope - podPidsLimit integer (The value must be - greater than or equal to 1024 and - less than 4194304.) - containerLogMaxSize positive number plus unit suffix - (e.g., '100Mi', '0.2Gi'. The - value must be between 10Mi and - 500Mi.) - containerLogMaxFiles integer (The value must be - between [2, 10].) - imageGcLowThresholdPercent integer (The value must be - between [10, 85], and lower than - imageGcHighThresholdPercent.) - imageGcHighThresholdPercent integer (The value must be - between [10, 85], and greater - than imageGcLowThresholdPercent.) - imageMinimumGcAge interval (e.g., '100s', '1m'. The - value must be less than '2m'.) - imageMaximumGcAge interval (e.g., '100s', '1m'. The - value must be greater than - imageMinimumGcAge.) - allowedUnsafeSysctls list of sysctls (Allowlisted - groups: 'kernel.shm*', - 'kernel.msg*', 'kernel.sem', - 'fs.mqueue.*', and 'net.*', and - sysctls under the groups.) - singleProcessOomKill true or false - maxParallelImagePulls integer (The value must be - between [2, 5].) + KEY VALUE + cpuManagerPolicy either 'static' or 'none' + cpuCFSQuota true or false (enabled by + default) + cpuCFSQuotaPeriod interval (e.g., '100ms') + memoryManager specify memory manager policy + topologyManager specify topology manager policy + and scope + podPidsLimit integer (The value must be + greater than or equal to 1024 + and less than 4194304.) + containerLogMaxSize positive number plus unit suffix + (e.g., '100Mi', '0.2Gi'. The + value must be between 10Mi and + 500Mi.) + containerLogMaxFiles integer (The value must be + between [2, 10].) + imageGcLowThresholdPercent integer (The value must be + between [10, 85], and lower than + imageGcHighThresholdPercent.) + imageGcHighThresholdPercent integer (The value must be + between [10, 85], and greater + than + imageGcLowThresholdPercent.) + imageMinimumGcAge interval (e.g., '100s', '1m'. + The value must be less than + '2m'.) + imageMaximumGcAge interval (e.g., '100s', '1m'. + The value must be greater than + imageMinimumGcAge.) + evictionSoft specify eviction soft thresholds + evictionSoftGracePeriod specify eviction soft grace + period + evictionMinimumReclaim specify eviction minimum reclaim + thresholds + evictionMaxPodGracePeriodSeconds integer (Max grace period for + pod termination during eviction, + in seconds. The value must be + between [0, 300].) + allowedUnsafeSysctls list of sysctls (Allowlisted + groups: 'kernel.shm*', + 'kernel.msg*', 'kernel.sem', + 'fs.mqueue.*', and 'net.*', and + sysctls under the groups.) + singleProcessOomKill true or false + maxParallelImagePulls integer (The value must be + between [2, 5].) + + List of supported keys in memoryManager in 'kubeletConfig'. KEY VALUE policy either 'Static' or 'None' + List of supported keys in topologyManager in 'kubeletConfig'. + KEY VALUE policy either 'none' or 'best-effort' or @@ -1462,6 +1477,89 @@ FLAGS scope either 'pod' or 'container' + List of supported keys in evictionSoft in 'kubeletConfig'. + + KEY VALUE + memoryAvailable quantity (e.g., '100Mi', '1Gi'. Represents + the amount of memory available before soft + eviction. The value must be at least 100Mi + and less than 50% of the node's memory.) + nodefsAvailable percentage (e.g., '20%'. Represents the + nodefs available before soft eviction. The + value must be between 10% and 50%, + inclusive.) + nodefsInodesFree percentage (e.g., '20%'. Represents the + nodefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + imagefsAvailable percentage (e.g., '20%'. Represents the + imagefs available before soft eviction. The + value must be between 15% and 50%, + inclusive.) + imagefsInodesFree percentage (e.g., '20%'. Represents the + imagefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + pidAvailable percentage (e.g., '20%'. Represents the pid + available before soft eviction. The value + must be between 10% and 50%, inclusive.) + + List of supported keys in evictionSoftGracePeriod in 'kubeletConfig'. + + KEY VALUE + memoryAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + pidAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + + List of supported keys in evictionMinimumReclaim in 'kubeletConfig'. + + KEY VALUE + memoryAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for memory + available. The value must be positive and + no more than 10%.) + nodefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + available. The value must be positive and + no more than 10%.) + nodefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs inodes + free. The value must be positive and no + more than 10%.) + imagefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + available. The value must be positive and + no more than 10%.) + imagefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + inodes free. The value must be positive and + no more than 10%.) + pidAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for pid + available. The value must be positive and + no more than 10%.) + List of supported sysctls in 'linuxConfig'. KEY VALUE @@ -1817,7 +1915,7 @@ FLAGS --boot-disk-provisioned-throughput=BOOT_DISK_PROVISIONED_THROUGHPUT Configure the Provisioned Throughput for the node pool boot disks. - Only valid for hyperdisk-throughput boot disks. + Only valid for hyperdisk-balanced boot disks. ClusterDNS diff --git a/gcloud/alpha/container/fleet/cloudrun/disable b/gcloud/alpha/container/fleet/cloudrun/disable index 430c49535..018418300 100644 --- a/gcloud/alpha/container/fleet/cloudrun/disable +++ b/gcloud/alpha/container/fleet/cloudrun/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/fleet/config-management/disable b/gcloud/alpha/container/fleet/config-management/disable index a6f4ae60a..548b0401a 100644 --- a/gcloud/alpha/container/fleet/config-management/disable +++ b/gcloud/alpha/container/fleet/config-management/disable @@ -32,9 +32,9 @@ FLAGS Does not change existing membership configurations. --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/fleet/dataplane-v2-encryption/disable b/gcloud/alpha/container/fleet/dataplane-v2-encryption/disable index ee1ae2173..e8066b42c 100644 --- a/gcloud/alpha/container/fleet/dataplane-v2-encryption/disable +++ b/gcloud/alpha/container/fleet/dataplane-v2-encryption/disable @@ -17,9 +17,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/fleet/fleetobservability/disable b/gcloud/alpha/container/fleet/fleetobservability/disable index f5a07aa58..11b86728d 100644 --- a/gcloud/alpha/container/fleet/fleetobservability/disable +++ b/gcloud/alpha/container/fleet/fleetobservability/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/fleet/identity-service/disable b/gcloud/alpha/container/fleet/identity-service/disable index 83aa2b93a..c07b70907 100644 --- a/gcloud/alpha/container/fleet/identity-service/disable +++ b/gcloud/alpha/container/fleet/identity-service/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/fleet/ingress/disable b/gcloud/alpha/container/fleet/ingress/disable index ff17044aa..533cf122c 100644 --- a/gcloud/alpha/container/fleet/ingress/disable +++ b/gcloud/alpha/container/fleet/ingress/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/fleet/multi-cluster-services/disable b/gcloud/alpha/container/fleet/multi-cluster-services/disable index 7d84e3eda..f622d535a 100644 --- a/gcloud/alpha/container/fleet/multi-cluster-services/disable +++ b/gcloud/alpha/container/fleet/multi-cluster-services/disable @@ -17,9 +17,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/fleet/namespaceactuation/delete b/gcloud/alpha/container/fleet/namespaceactuation/delete index 0cb605788..3186949eb 100644 --- a/gcloud/alpha/container/fleet/namespaceactuation/delete +++ b/gcloud/alpha/container/fleet/namespaceactuation/delete @@ -18,9 +18,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/fleet/service-directory/disable b/gcloud/alpha/container/fleet/service-directory/disable index 2edaf6072..010550b26 100644 --- a/gcloud/alpha/container/fleet/service-directory/disable +++ b/gcloud/alpha/container/fleet/service-directory/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/fleet/workload-identity/disable b/gcloud/alpha/container/fleet/workload-identity/disable index ba007872a..4dde90e0e 100644 --- a/gcloud/alpha/container/fleet/workload-identity/disable +++ b/gcloud/alpha/container/fleet/workload-identity/disable @@ -11,9 +11,9 @@ DESCRIPTION FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/hub/cloudrun/disable b/gcloud/alpha/container/hub/cloudrun/disable index 71c30b4eb..5d5c65f90 100644 --- a/gcloud/alpha/container/hub/cloudrun/disable +++ b/gcloud/alpha/container/hub/cloudrun/disable @@ -15,9 +15,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/hub/config-management/disable b/gcloud/alpha/container/hub/config-management/disable index 92a74d38d..b0e82ee26 100644 --- a/gcloud/alpha/container/hub/config-management/disable +++ b/gcloud/alpha/container/hub/config-management/disable @@ -32,9 +32,9 @@ FLAGS Does not change existing membership configurations. --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/hub/dataplane-v2-encryption/disable b/gcloud/alpha/container/hub/dataplane-v2-encryption/disable index 89ef171b8..0912566f3 100644 --- a/gcloud/alpha/container/hub/dataplane-v2-encryption/disable +++ b/gcloud/alpha/container/hub/dataplane-v2-encryption/disable @@ -17,9 +17,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/hub/fleetobservability/disable b/gcloud/alpha/container/hub/fleetobservability/disable index d0b50371a..4d404b0a6 100644 --- a/gcloud/alpha/container/hub/fleetobservability/disable +++ b/gcloud/alpha/container/hub/fleetobservability/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/hub/identity-service/disable b/gcloud/alpha/container/hub/identity-service/disable index 6ee63f51b..6ffa485ae 100644 --- a/gcloud/alpha/container/hub/identity-service/disable +++ b/gcloud/alpha/container/hub/identity-service/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/hub/ingress/disable b/gcloud/alpha/container/hub/ingress/disable index c67983388..26c2e2b28 100644 --- a/gcloud/alpha/container/hub/ingress/disable +++ b/gcloud/alpha/container/hub/ingress/disable @@ -15,9 +15,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/hub/multi-cluster-services/disable b/gcloud/alpha/container/hub/multi-cluster-services/disable index 716ca0d41..1c0c376e0 100644 --- a/gcloud/alpha/container/hub/multi-cluster-services/disable +++ b/gcloud/alpha/container/hub/multi-cluster-services/disable @@ -17,9 +17,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/hub/namespaceactuation/delete b/gcloud/alpha/container/hub/namespaceactuation/delete index 664a4e374..e94aef449 100644 --- a/gcloud/alpha/container/hub/namespaceactuation/delete +++ b/gcloud/alpha/container/hub/namespaceactuation/delete @@ -18,9 +18,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/hub/service-directory/disable b/gcloud/alpha/container/hub/service-directory/disable index 6521c0aeb..e23f0a428 100644 --- a/gcloud/alpha/container/hub/service-directory/disable +++ b/gcloud/alpha/container/hub/service-directory/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/hub/workload-identity/disable b/gcloud/alpha/container/hub/workload-identity/disable index 4d9bf2a27..f1ac87754 100644 --- a/gcloud/alpha/container/hub/workload-identity/disable +++ b/gcloud/alpha/container/hub/workload-identity/disable @@ -11,9 +11,9 @@ DESCRIPTION FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/node-pools/create b/gcloud/alpha/container/node-pools/create index 79a47bd03..6652fbb35 100644 --- a/gcloud/alpha/container/node-pools/create +++ b/gcloud/alpha/container/node-pools/create @@ -201,7 +201,7 @@ FLAGS --boot-disk-provisioned-throughput=BOOT_DISK_PROVISIONED_THROUGHPUT Configure the Provisioned Throughput for the node pool boot disks. Only - valid for hyperdisk-throughput boot disks. + valid for hyperdisk-balanced boot disks. --cluster=CLUSTER The cluster to add the node pool to. Overrides the default @@ -798,46 +798,61 @@ FLAGS List of supported kubelet configs in 'kubeletConfig'. - KEY VALUE - cpuManagerPolicy either 'static' or 'none' - cpuCFSQuota true or false (enabled by - default) - cpuCFSQuotaPeriod interval (e.g., '100ms') - memoryManager specify memory manager policy - topologyManager specify topology manager policy - and scope - podPidsLimit integer (The value must be - greater than or equal to 1024 and - less than 4194304.) - containerLogMaxSize positive number plus unit suffix - (e.g., '100Mi', '0.2Gi'. The - value must be between 10Mi and - 500Mi.) - containerLogMaxFiles integer (The value must be - between [2, 10].) - imageGcLowThresholdPercent integer (The value must be - between [10, 85], and lower than - imageGcHighThresholdPercent.) - imageGcHighThresholdPercent integer (The value must be - between [10, 85], and greater - than imageGcLowThresholdPercent.) - imageMinimumGcAge interval (e.g., '100s', '1m'. The - value must be less than '2m'.) - imageMaximumGcAge interval (e.g., '100s', '1m'. The - value must be greater than - imageMinimumGcAge.) - allowedUnsafeSysctls list of sysctls (Allowlisted - groups: 'kernel.shm*', - 'kernel.msg*', 'kernel.sem', - 'fs.mqueue.*', and 'net.*', and - sysctls under the groups.) - singleProcessOomKill true or false - maxParallelImagePulls integer (The value must be - between [2, 5].) + KEY VALUE + cpuManagerPolicy either 'static' or 'none' + cpuCFSQuota true or false (enabled by + default) + cpuCFSQuotaPeriod interval (e.g., '100ms') + memoryManager specify memory manager policy + topologyManager specify topology manager policy + and scope + podPidsLimit integer (The value must be + greater than or equal to 1024 + and less than 4194304.) + containerLogMaxSize positive number plus unit suffix + (e.g., '100Mi', '0.2Gi'. The + value must be between 10Mi and + 500Mi.) + containerLogMaxFiles integer (The value must be + between [2, 10].) + imageGcLowThresholdPercent integer (The value must be + between [10, 85], and lower than + imageGcHighThresholdPercent.) + imageGcHighThresholdPercent integer (The value must be + between [10, 85], and greater + than + imageGcLowThresholdPercent.) + imageMinimumGcAge interval (e.g., '100s', '1m'. + The value must be less than + '2m'.) + imageMaximumGcAge interval (e.g., '100s', '1m'. + The value must be greater than + imageMinimumGcAge.) + evictionSoft specify eviction soft thresholds + evictionSoftGracePeriod specify eviction soft grace + period + evictionMinimumReclaim specify eviction minimum reclaim + thresholds + evictionMaxPodGracePeriodSeconds integer (Max grace period for + pod termination during eviction, + in seconds. The value must be + between [0, 300].) + allowedUnsafeSysctls list of sysctls (Allowlisted + groups: 'kernel.shm*', + 'kernel.msg*', 'kernel.sem', + 'fs.mqueue.*', and 'net.*', and + sysctls under the groups.) + singleProcessOomKill true or false + maxParallelImagePulls integer (The value must be + between [2, 5].) + + List of supported keys in memoryManager in 'kubeletConfig'. KEY VALUE policy either 'Static' or 'None' + List of supported keys in topologyManager in 'kubeletConfig'. + KEY VALUE policy either 'none' or 'best-effort' or @@ -846,6 +861,89 @@ FLAGS scope either 'pod' or 'container' + List of supported keys in evictionSoft in 'kubeletConfig'. + + KEY VALUE + memoryAvailable quantity (e.g., '100Mi', '1Gi'. Represents + the amount of memory available before soft + eviction. The value must be at least 100Mi + and less than 50% of the node's memory.) + nodefsAvailable percentage (e.g., '20%'. Represents the + nodefs available before soft eviction. The + value must be between 10% and 50%, + inclusive.) + nodefsInodesFree percentage (e.g., '20%'. Represents the + nodefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + imagefsAvailable percentage (e.g., '20%'. Represents the + imagefs available before soft eviction. The + value must be between 15% and 50%, + inclusive.) + imagefsInodesFree percentage (e.g., '20%'. Represents the + imagefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + pidAvailable percentage (e.g., '20%'. Represents the pid + available before soft eviction. The value + must be between 10% and 50%, inclusive.) + + List of supported keys in evictionSoftGracePeriod in 'kubeletConfig'. + + KEY VALUE + memoryAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + pidAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + + List of supported keys in evictionMinimumReclaim in 'kubeletConfig'. + + KEY VALUE + memoryAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for memory + available. The value must be positive and + no more than 10%.) + nodefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + available. The value must be positive and + no more than 10%.) + nodefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs inodes + free. The value must be positive and no + more than 10%.) + imagefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + available. The value must be positive and + no more than 10%.) + imagefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + inodes free. The value must be positive and + no more than 10%.) + pidAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for pid + available. The value must be positive and + no more than 10%.) + List of supported sysctls in 'linuxConfig'. KEY VALUE diff --git a/gcloud/alpha/container/node-pools/update b/gcloud/alpha/container/node-pools/update index b1957af75..2f6b0ae11 100644 --- a/gcloud/alpha/container/node-pools/update +++ b/gcloud/alpha/container/node-pools/update @@ -310,50 +310,65 @@ REQUIRED FLAGS List of supported kubelet configs in 'kubeletConfig'. - KEY VALUE - cpuManagerPolicy either 'static' or 'none' - cpuCFSQuota true or false (enabled by - default) - cpuCFSQuotaPeriod interval (e.g., '100ms') - memoryManager specify memory manager policy - topologyManager specify topology manager policy - and scope - podPidsLimit integer (The value must be - greater than or equal to 1024 - and less than 4194304.) - containerLogMaxSize positive number plus unit - suffix (e.g., '100Mi', '0.2Gi'. - The value must be between 10Mi - and 500Mi.) - containerLogMaxFiles integer (The value must be - between [2, 10].) - imageGcLowThresholdPercent integer (The value must be - between [10, 85], and lower - than - imageGcHighThresholdPercent.) - imageGcHighThresholdPercent integer (The value must be - between [10, 85], and greater - than - imageGcLowThresholdPercent.) - imageMinimumGcAge interval (e.g., '100s', '1m'. - The value must be less than - '2m'.) - imageMaximumGcAge interval (e.g., '100s', '1m'. - The value must be greater than - imageMinimumGcAge.) - allowedUnsafeSysctls list of sysctls (Allowlisted - groups: 'kernel.shm*', - 'kernel.msg*', 'kernel.sem', - 'fs.mqueue.*', and 'net.*', and - sysctls under the groups.) - singleProcessOomKill true or false - maxParallelImagePulls integer (The value must be - between [2, 5].) + KEY VALUE + cpuManagerPolicy either 'static' or 'none' + cpuCFSQuota true or false (enabled by + default) + cpuCFSQuotaPeriod interval (e.g., '100ms') + memoryManager specify memory manager policy + topologyManager specify topology manager + policy and scope + podPidsLimit integer (The value must be + greater than or equal to 1024 + and less than 4194304.) + containerLogMaxSize positive number plus unit + suffix (e.g., '100Mi', + '0.2Gi'. The value must be + between 10Mi and 500Mi.) + containerLogMaxFiles integer (The value must be + between [2, 10].) + imageGcLowThresholdPercent integer (The value must be + between [10, 85], and lower + than + imageGcHighThresholdPercent.) + imageGcHighThresholdPercent integer (The value must be + between [10, 85], and greater + than + imageGcLowThresholdPercent.) + imageMinimumGcAge interval (e.g., '100s', '1m'. + The value must be less than + '2m'.) + imageMaximumGcAge interval (e.g., '100s', '1m'. + The value must be greater than + imageMinimumGcAge.) + evictionSoft specify eviction soft + thresholds + evictionSoftGracePeriod specify eviction soft grace + period + evictionMinimumReclaim specify eviction minimum + reclaim thresholds + evictionMaxPodGracePeriodSeconds integer (Max grace period for + pod termination during + eviction, in seconds. The + value must be between [0, + 300].) + allowedUnsafeSysctls list of sysctls (Allowlisted + groups: 'kernel.shm*', + 'kernel.msg*', 'kernel.sem', + 'fs.mqueue.*', and 'net.*', + and sysctls under the groups.) + singleProcessOomKill true or false + maxParallelImagePulls integer (The value must be + between [2, 5].) + + List of supported keys in memoryManager in 'kubeletConfig'. KEY VALUE policy either 'Static' or 'None' + List of supported keys in topologyManager in 'kubeletConfig'. + KEY VALUE policy either 'none' or 'best-effort' or @@ -362,6 +377,91 @@ REQUIRED FLAGS scope either 'pod' or 'container' + List of supported keys in evictionSoft in 'kubeletConfig'. + + KEY VALUE + memoryAvailable quantity (e.g., '100Mi', '1Gi'. + Represents the amount of memory available + before soft eviction. The value must be + at least 100Mi and less than 50% of the + node's memory.) + nodefsAvailable percentage (e.g., '20%'. Represents the + nodefs available before soft eviction. + The value must be between 10% and 50%, + inclusive.) + nodefsInodesFree percentage (e.g., '20%'. Represents the + nodefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + imagefsAvailable percentage (e.g., '20%'. Represents the + imagefs available before soft eviction. + The value must be between 15% and 50%, + inclusive.) + imagefsInodesFree percentage (e.g., '20%'. Represents the + imagefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + pidAvailable percentage (e.g., '20%'. Represents the + pid available before soft eviction. The + value must be between 10% and 50%, + inclusive.) + + List of supported keys in evictionSoftGracePeriod in 'kubeletConfig'. + + KEY VALUE + memoryAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + nodefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + nodefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + imagefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + imagefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + pidAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + + List of supported keys in evictionMinimumReclaim in 'kubeletConfig'. + + KEY VALUE + memoryAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for memory + available. The value must be positive and + no more than 10%.) + nodefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + available. The value must be positive and + no more than 10%.) + nodefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + inodes free. The value must be positive + and no more than 10%.) + imagefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + available. The value must be positive and + no more than 10%.) + imagefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + inodes free. The value must be positive + and no more than 10%.) + pidAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for pid + available. The value must be positive and + no more than 10%.) + List of supported sysctls in 'linuxConfig'. KEY VALUE @@ -655,7 +755,7 @@ REQUIRED FLAGS --boot-disk-provisioned-throughput=BOOT_DISK_PROVISIONED_THROUGHPUT Configure the Provisioned Throughput for the node pool boot disks. - Only valid for hyperdisk-throughput boot disks. + Only valid for hyperdisk-balanced boot disks. --disk-size=DISK_SIZE Size for node VM boot disks in GB. Defaults to 100GB. diff --git a/gcloud/alpha/firestore/databases/clone b/gcloud/alpha/firestore/databases/clone new file mode 100644 index 000000000..8c0b9550a --- /dev/null +++ b/gcloud/alpha/firestore/databases/clone @@ -0,0 +1,138 @@ +NAME + gcloud alpha firestore databases clone - clone a Google Cloud Firestore + database from another + +SYNOPSIS + gcloud alpha firestore databases clone + --destination-database=DESTINATION_DATABASE + --snapshot-time=SNAPSHOT_TIME --source-database=SOURCE_DATABASE + [--tags=[KEY=VALUE,...]] + [--encryption-type=ENCRYPTION_TYPE : --kms-key-name=KMS_KEY_NAME] + [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To clone a database from another: + + $ gcloud alpha firestore databases clone \ + --source-database=projects/PROJECT_ID/databases/\ + SOURCE_DATABASE --snapshot-time=2025-05-26T10:20:00.00Z \ + --destination-database=DATABASE_ID + + To clone to a CMEK-enabled database: + + $ gcloud alpha firestore databases clone \ + --source-database=projects/PROJECT_ID/databases/\ + SOURCE_DATABASE --snapshot-time=2025-05-26T10:20:00.00Z \ + --destination-database=DATABASE_ID \ + --encryption-type=customer-managed-encryption \ + --kms-key-name=projects/PROJECT_ID/locations/LOCATION_ID/\ + keyRings/KEY_RING_ID/cryptoKeys/CRYPTO_KEY_ID + +REQUIRED FLAGS + --destination-database=DESTINATION_DATABASE + Destination database to clone to. Destination database will be created + in the same location as the source database. + + This value should be 4-63 characters. Valid characters are + /[a-z][0-9]-/ with first character a letter and the last a letter or a + number. Must not be UUID-like /[0-9a-f]8(-[0-9a-f]4)3-[0-9a-f]12/. + + Using "(default)" database ID is also allowed. + + For example, to clone to database testdb: + + $ gcloud alpha firestore databases clone \ + --destination-database=testdb + + --snapshot-time=SNAPSHOT_TIME + Snapshot time at which to clone. This must be a whole minute, in the + past, and not earlier than the source database's earliest_version_time. + Additionally, if older than one hour in the past, PITR must be enabled + on the source database. + + For example, to restore from snapshot 2025-05-26T10:20:00.00Z of source + database source-db: + + $ gcloud alpha firestore databases clone \ + --source-database=projects/PROJECT_ID/databases/source-db \ + --snapshot-time=2025-05-26T10:20:00.00Z + + --source-database=SOURCE_DATABASE + The source database to clone from. + + For example, to clone from database source-db: + + $ gcloud alpha firestore databases clone \ + --source-database=projects/PROJECT_ID/databases/source-db + +OPTIONAL FLAGS + --tags=[KEY=VALUE,...] + Tags to attach to the destination database. Example: + --tags=key1=value1,key2=value2 + + For example, to attach tags to a database: + + $ --tags=key1=value1,key2=value2 + + The encryption configuration of the new database being created from the + database. If not specified, the same encryption settings as the database + will be used. + + To create a CMEK-enabled database: + + $ gcloud alpha firestore databases clone \ + --encryption-type=customer-managed-encryption \ + --kms-key-name=projects/PROJECT_ID/locations/LOCATION_ID/\ + keyRings/KEY_RING_ID/cryptoKeys/CRYPTO_KEY_ID + + To create a Google-default-encrypted database: + + $ gcloud alpha firestore databases clone \ + --encryption-type=google-default-encryption + + To create a database using the same encryption settings as the database: + + $ gcloud alpha firestore databases clone \ + --encryption-type=use-source-encryption + + --encryption-type=ENCRYPTION_TYPE + The encryption type of the destination database. ENCRYPTION_TYPE must + be one of: use-source-encryption, customer-managed-encryption, + google-default-encryption. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --kms-key-name=KMS_KEY_NAME + The resource ID of a Cloud KMS key. If set, the database created will + be a Customer-Managed Encryption Key (CMEK) database encrypted with + this key. This feature is allowlist only in initial launch. + + Only a key in the same location as this database is allowed to be + used for encryption. For Firestore's nam5 multi-region, this + corresponds to Cloud KMS location us. For Firestore's eur3 + multi-region, this corresponds to Cloud KMS location europe. See + https://cloud.google.com/kms/docs/locations. + + This value should be the KMS key resource ID in the format of + projects/{project_id}/locations/{kms_location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}. + How to retrieve this resource ID is listed at + https://cloud.google.com/kms/docs/getting-resource-ids#getting_the_id_for_a_key_and_version. + + This flag must only be specified when encryption-type is + customer-managed-encryption. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/databases/connection-string b/gcloud/alpha/firestore/databases/connection-string index 4f35ed17c..f71005f55 100644 --- a/gcloud/alpha/firestore/databases/connection-string +++ b/gcloud/alpha/firestore/databases/connection-string @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud alpha firestore databases connection-string --database=DATABASE - [--auth=AUTH; default="none"] [GCLOUD_WIDE_FLAG ...] + [--auth=AUTH; default="none" | --validate=VALIDATE] + [GCLOUD_WIDE_FLAG ...] EXAMPLES To get the connection string for a Firestore database with a databaseId @@ -28,15 +29,23 @@ REQUIRED FLAGS $ gcloud alpha firestore databases connection-string --database='foo' OPTIONAL FLAGS - --auth=AUTH; default="none" - The auth configuration for the connection string. + At most one of these can be specified: - If connecting from a Google Compute Engine VM, use gce-vm. For short - term access using the gcloud CLI's access token, use access-token. For - password auth use scram-sha-256. Otherwise, use none and configure auth - manually. + --auth=AUTH; default="none" + The auth configuration for the connection string. - AUTH must be one of: none, gce-vm, access-token, scram-sha-256. + If connecting from a Google Compute Engine VM, use gce-vm. For short + term access using the gcloud CLI's access token, use access-token. + For password auth use scram-sha-256. Otherwise, use none and + configure auth manually. + + AUTH must be one of: none, gce-vm, access-token, scram-sha-256. + + --validate=VALIDATE + Validate the specified connection string for the current database. + This command checks that the connection string is well formed, + contains the required parameters, and specifies correct configuration + values for the current database. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/firestore/databases/help b/gcloud/alpha/firestore/databases/help index 6a8e0c889..be64f0b4f 100644 --- a/gcloud/alpha/firestore/databases/help +++ b/gcloud/alpha/firestore/databases/help @@ -16,6 +16,9 @@ GCLOUD WIDE FLAGS COMMANDS COMMAND is one of the following: + clone + (ALPHA) Clone a Google Cloud Firestore database from another. + connection-string (ALPHA) Prints the mongo connection string for the given Firestore database. diff --git a/gcloud/alpha/service-extensions/wasm-plugin-versions/create b/gcloud/alpha/service-extensions/wasm-plugin-versions/create index 8bfa30846..c9616a2e5 100644 --- a/gcloud/alpha/service-extensions/wasm-plugin-versions/create +++ b/gcloud/alpha/service-extensions/wasm-plugin-versions/create @@ -63,8 +63,8 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --image=IMAGE - URI of the container image containing the plugin's Wasm module, stored - in the Artifact Registry. + URI of the image containing the plugin's Wasm module, stored in the + Artifact Registry. OPTIONAL FLAGS --async @@ -92,8 +92,8 @@ OPTIONAL FLAGS plugin_config_file. --plugin-config-uri=PLUGIN_CONFIG_URI - URI of the container image containing the plugin's configuration, - stored in the Artifact Registry. + URI of the image containing the plugin's configuration, stored in the + Artifact Registry. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/backup-dr/backup-vaults/update b/gcloud/backup-dr/backup-vaults/update index a02463dfa..66ed46f74 100644 --- a/gcloud/backup-dr/backup-vaults/update +++ b/gcloud/backup-dr/backup-vaults/update @@ -3,11 +3,11 @@ NAME SYNOPSIS gcloud backup-dr backup-vaults update (BACKUP_VAULT : --location=LOCATION) - [--no-async] + [--access-restriction=ACCESS_RESTRICTION] [--no-async] [--backup-min-enforced-retention=BACKUP_MIN_ENFORCED_RETENTION] [--description=DESCRIPTION] [--effective-time=EFFECTIVE_TIME] - [--force-update] [--unlock-backup-min-enforced-retention] - [GCLOUD_WIDE_FLAG ...] + [--force-update] [--force-update-access-restriction] + [--unlock-backup-min-enforced-retention] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Update a Backup and DR backup vault. @@ -60,6 +60,37 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line. FLAGS + --access-restriction=ACCESS_RESTRICTION + Authorize certain sources and destinations for data being sent into, or + restored from the current backup vault. + + Access restrictions can be modified to be more or less restrictive. + + ::: More restrictive access restriction update will fail by default if there will be non compliant Data Sources. + To allow such updates, use the --force-update-access-restriction flag. + ::: For Google Cloud Console resources, the following changes are allowed to make access restrictions more restrictive: + * `UNRESTRICTED` to `WITHIN_PROJECT` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` / `WITHIN_ORGANIZATION` + * `WITHIN_PROJECT` to `WITHIN_ORGANIZATION` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` + + ::: For Management Server resources, the following changes are allowed to make access restrictions more restrictive: + * `UNRESTRICTED` to `WITHIN_PROJECT` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` / `WITHIN_ORGANIZATION` + * `WITHIN_PROJECT` to `WITHIN_ORGANIZATION` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` + + ::: For both Google Cloud Console and Management Server resources, the following changes are allowed to make access restrictions more restrictive: + * `UNRESTRICTED` to `WITHIN_PROJECT` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` / `WITHIN_ORGANIZATION` + * `WITHIN_PROJECT` to `WITHIN_ORGANIZATION` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` + + ::: For Google Cloud Console resources, the following changes are allowed to make access restrictions less restrictive: + * `WITHIN_ORGANIZATION` to `UNRESTRICTED` / `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` + * `WITHIN_PROJECT` to `UNRESTRICTED` + * `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` to `UNRESTRICTED` + + ::: For Management Server resources, the following changes are allowed to make access restrictions less restrictive: + * `WITHIN_ORG_BUT_UNRESTRICTED_FOR_BA` to `UNRESTRICTED` + + ACCESS_RESTRICTION must be one of: within-project, within-org, + unrestricted, within-org-but-unrestricted-for-ba. + --no-async Wait for the operation in progress to complete. @@ -83,6 +114,11 @@ FLAGS defined by the associated backup plan is shorter than the minimum retention set by the backup vault. + --force-update-access-restriction + If set, the access restriction can be updated even if there are + non-compliant data sources. Backups for those data sources will fail + afterward. + --unlock-backup-min-enforced-retention Removes the lock on the backup minimum enforced retention period, and resets the effective time. When unlocked, the enforced retention period diff --git a/gcloud/backup-dr/backups/update b/gcloud/backup-dr/backups/update index f84838c2e..41649a317 100644 --- a/gcloud/backup-dr/backups/update +++ b/gcloud/backup-dr/backups/update @@ -5,8 +5,8 @@ SYNOPSIS gcloud backup-dr backups update (BACKUP : --backup-vault=BACKUP_VAULT --data-source=DATA_SOURCE --location=LOCATION) - --enforced-retention-end-time=ENFORCED_RETENTION_END_TIME [--async] - [GCLOUD_WIDE_FLAG ...] + (--enforced-retention-end-time=ENFORCED_RETENTION_END_TIME + --expire-time=EXPIRE_TIME) [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Update the specified Backup. @@ -69,15 +69,24 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line. REQUIRED FLAGS - --enforced-retention-end-time=ENFORCED_RETENTION_END_TIME - Backups cannot be deleted until this time or later. This period can be - extended, but not shortened. It should be specified in the format of - "YYYY-MM-DD". + Update Backup Flags - ◆ For backup configured with a backup appliance, there are additional - restrictions: 1. Enforced retention cannot be extended past the - expiry time. 2. Enforced retention can only be updated for finalized - backups. + At least one of these must be specified: + + --enforced-retention-end-time=ENFORCED_RETENTION_END_TIME + Backups cannot be deleted until this time or later. This period can + be extended, but not shortened. It should be specified in the format + of "YYYY-MM-DD". + + ▸ For backup configured with a backup appliance, there are + additional restrictions: 1. Enforced retention cannot be extended + past the expiry time. 2. Enforced retention can only be updated for + finalized backups. + + --expire-time=EXPIRE_TIME + The date when this backup is automatically expired. This date can be + extended, but not shortened. It should be specified in the format of + "YYYY-MM-DD". OPTIONAL FLAGS --async diff --git a/gcloud/beta/compute/backend-services/create b/gcloud/beta/compute/backend-services/create index 0ab6e502f..62101b9f1 100644 --- a/gcloud/beta/compute/backend-services/create +++ b/gcloud/beta/compute/backend-services/create @@ -758,42 +758,51 @@ FLAGS TRACKING_MODE must be one of: PER_CONNECTION, PER_SESSION. --zonal-affinity-spillover=ZONAL_AFFINITY_SPILLOVER - Specifies whether zonal affinity is enabled or not. + Specifies whether zonal affinity is enabled or not. For further + details, refer to Zonal affinity options + (https://cloud.google.com/load-balancing/docs/internal/zonal-affinity#zonal_affinity_options). Can only be set if load balancing scheme is INTERNAL, The possible values are: ZONAL_AFFINITY_DISABLED - Zonal Affinity is disabled. The load balancer distributes new - connections to all healthy backend endpoints across all zones. + Default Value. Zonal Affinity is disabled. The load balancer + distributes new connections to all healthy backend VMs across all + zones. ZONAL_AFFINITY_STAY_WITHIN_ZONE Zonal Affinity is enabled. The load balancer distributes new - connections to all healthy backend endpoints in the local zone only. - If there are no healthy backend endpoints in the local zone, the load - balancer distributes new connections to all backend endpoints in the - local zone. + connections to all healthy backend VMs in the client VM's zone only. + If there are no healthy backend VMs in the client VM's zone, the load + balancer distributes new connections to all backend VMs in the client + VM's zone. ZONAL_AFFINITY_SPILL_CROSS_ZONE Zonal Affinity is enabled. The load balancer distributes new - connections to all healthy backend endpoints in the local zone only. - If there aren't enough healthy backend endpoints in the local zone, - the load balancer distributes new connections to all healthy backend - endpoints across all zones. + connections to all healthy backend VMs in the client VM's zone only. + If there aren't enough healthy backend VMs in the client VM's zone, + the load balancer distributes some new connections to backend VMs in + zones other than the client VM's zone. This distribution depends on a + configurable spillover ratio that determines when traffic starts + spilling over to backend VMs in other zones. ZONAL_AFFINITY_SPILLOVER must be one of: ZONAL_AFFINITY_DISABLED, ZONAL_AFFINITY_STAY_WITHIN_ZONE, ZONAL_AFFINITY_SPILL_CROSS_ZONE. --zonal-affinity-spillover-ratio=ZONAL_AFFINITY_SPILLOVER_RATIO - The value of the field must be in [0, 1]. When the ratio of the count - of healthy backend endpoints in a zone to the count of backend - endpoints in that same zone is equal to or above this threshold, the - load balancer distributes new connections to all healthy endpoints in - the local zone only. When the ratio of the count of healthy backend - endpoints in a zone to the count of backend endpoints in that same zone - is below this threshold, the load balancer distributes all new - connections to all healthy endpoints across all zones. + The value of the field can range from 0.0 to 1.0, inclusive. If not + specified, a default value of 0.0 is used. + + This ratio indicates the threshold value for keeping traffic in the + client VM's zone. If the proportion of healthy backend VMs in a zone + falls below the configured spillover ratio, some new connections from + the client VM are distributed to healthy backend VMs in zones other + than the client VM's zone. + + For further details, refer to How ZONAL_AFFINITY_SPILL_CROSS_ZONE and + spillover ratio work + (https://cloud.google.com/load-balancing/docs/internal/zonal-affinity#zonal-affinity-spillover-ratio). At most one of these can be specified: diff --git a/gcloud/beta/compute/backend-services/update b/gcloud/beta/compute/backend-services/update index 359000999..a57a6a9a9 100644 --- a/gcloud/beta/compute/backend-services/update +++ b/gcloud/beta/compute/backend-services/update @@ -563,42 +563,51 @@ FLAGS TRACKING_MODE must be one of: PER_CONNECTION, PER_SESSION. --zonal-affinity-spillover=ZONAL_AFFINITY_SPILLOVER - Specifies whether zonal affinity is enabled or not. + Specifies whether zonal affinity is enabled or not. For further + details, refer to Zonal affinity options + (https://cloud.google.com/load-balancing/docs/internal/zonal-affinity#zonal_affinity_options). Can only be set if load balancing scheme is INTERNAL, The possible values are: ZONAL_AFFINITY_DISABLED - Zonal Affinity is disabled. The load balancer distributes new - connections to all healthy backend endpoints across all zones. + Default Value. Zonal Affinity is disabled. The load balancer + distributes new connections to all healthy backend VMs across all + zones. ZONAL_AFFINITY_STAY_WITHIN_ZONE Zonal Affinity is enabled. The load balancer distributes new - connections to all healthy backend endpoints in the local zone only. - If there are no healthy backend endpoints in the local zone, the load - balancer distributes new connections to all backend endpoints in the - local zone. + connections to all healthy backend VMs in the client VM's zone only. + If there are no healthy backend VMs in the client VM's zone, the load + balancer distributes new connections to all backend VMs in the client + VM's zone. ZONAL_AFFINITY_SPILL_CROSS_ZONE Zonal Affinity is enabled. The load balancer distributes new - connections to all healthy backend endpoints in the local zone only. - If there aren't enough healthy backend endpoints in the local zone, - the load balancer distributes new connections to all healthy backend - endpoints across all zones. + connections to all healthy backend VMs in the client VM's zone only. + If there aren't enough healthy backend VMs in the client VM's zone, + the load balancer distributes some new connections to backend VMs in + zones other than the client VM's zone. This distribution depends on a + configurable spillover ratio that determines when traffic starts + spilling over to backend VMs in other zones. ZONAL_AFFINITY_SPILLOVER must be one of: ZONAL_AFFINITY_DISABLED, ZONAL_AFFINITY_STAY_WITHIN_ZONE, ZONAL_AFFINITY_SPILL_CROSS_ZONE. --zonal-affinity-spillover-ratio=ZONAL_AFFINITY_SPILLOVER_RATIO - The value of the field must be in [0, 1]. When the ratio of the count - of healthy backend endpoints in a zone to the count of backend - endpoints in that same zone is equal to or above this threshold, the - load balancer distributes new connections to all healthy endpoints in - the local zone only. When the ratio of the count of healthy backend - endpoints in a zone to the count of backend endpoints in that same zone - is below this threshold, the load balancer distributes all new - connections to all healthy endpoints across all zones. + The value of the field can range from 0.0 to 1.0, inclusive. If not + specified, a default value of 0.0 is used. + + This ratio indicates the threshold value for keeping traffic in the + client VM's zone. If the proportion of healthy backend VMs in a zone + falls below the configured spillover ratio, some new connections from + the client VM are distributed to healthy backend VMs in zones other + than the client VM's zone. + + For further details, refer to How ZONAL_AFFINITY_SPILL_CROSS_ZONE and + spillover ratio work + (https://cloud.google.com/load-balancing/docs/internal/zonal-affinity#zonal-affinity-spillover-ratio). At most one of these can be specified: diff --git a/gcloud/beta/compute/instances/create b/gcloud/beta/compute/instances/create index 0357df49c..c835b5ea0 100644 --- a/gcloud/beta/compute/instances/create +++ b/gcloud/beta/compute/instances/create @@ -408,7 +408,7 @@ FLAGS source-snapshot-region The region of the source snapshot that will be used to create the - disk. You can provide region name to use regional snapshot as the + disk. You can provide region name to use scoped snapshot as the source snapshot. --csek-key-file=FILE @@ -1231,9 +1231,9 @@ FLAGS current default project is used. --source-snapshot-region=SOURCE_SNAPSHOT_REGION - Sets the scope for the --source-snapshot flag. By default, when - specifying an snapshot, the global snapshot scope is used. Use this - flag to override this behavior to use regional snapshots. + Sets the region for the --source-snapshot flag. By default, when + specifying a snapshot, the global snapshot scope is used. Use this flag + to override this behavior to use regionally scoped snapshots. At most one of these can be specified: diff --git a/gcloud/beta/compute/instances/network-interfaces/add b/gcloud/beta/compute/instances/network-interfaces/add index acc744699..b40fbb779 100644 --- a/gcloud/beta/compute/instances/network-interfaces/add +++ b/gcloud/beta/compute/instances/network-interfaces/add @@ -52,8 +52,8 @@ FLAGS --external-ipv6-address=EXTERNAL_IPV6_ADDRESS Assigns the given external IPv6 address to an instance. The address - must be the first IP in the range. This option is applicable only to - dual-stack instances with stack-type=IPV4_ONLY. + must be the first IP in the range. This option is not applicable to + instances with stack-type=IPV4_ONLY. --external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH The prefix length of the external IPv6 address range. This flag should diff --git a/gcloud/beta/compute/instances/network-interfaces/update b/gcloud/beta/compute/instances/network-interfaces/update index 51e52199e..1fb74dd71 100644 --- a/gcloud/beta/compute/instances/network-interfaces/update +++ b/gcloud/beta/compute/instances/network-interfaces/update @@ -51,8 +51,8 @@ FLAGS --external-ipv6-address=EXTERNAL_IPV6_ADDRESS Assigns the given external IPv6 address to an instance. The address - must be the first IP in the range. This option is applicable only to - dual-stack instances with stack-type=IPV4_ONLY. + must be the first IP in the range. This option is not applicable to + instances with stack-type=IPV4_ONLY. --external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH The prefix length of the external IPv6 address range. This flag should diff --git a/gcloud/beta/compute/instances/report-host-as-faulty b/gcloud/beta/compute/instances/report-host-as-faulty index d8b33a408..ba76db878 100644 --- a/gcloud/beta/compute/instances/report-host-as-faulty +++ b/gcloud/beta/compute/instances/report-host-as-faulty @@ -29,8 +29,8 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --disruption-schedule=DISRUPTION_SCHEDULE Specifies the timing for initiating the fault reporting process. The - default value is ['IMMEDIATE'] which initiates the process right away. - DISRUPTION_SCHEDULE must be (only one value is supported): IMMEDIATE. + default value is IMMEDIATE which initiates the process right away. + DISRUPTION_SCHEDULE must be one of: IMMEDIATE, FUTURE. --fault-reasons=[behavior=BEHAVIOR],[description=DESCRIPTION] Specified and can include one or more of the following types: diff --git a/gcloud/beta/container/clusters/create b/gcloud/beta/container/clusters/create index ad0d97be2..27cb9a325 100644 --- a/gcloud/beta/container/clusters/create +++ b/gcloud/beta/container/clusters/create @@ -224,8 +224,8 @@ FLAGS ADDON must be one of: HttpLoadBalancing, HorizontalPodAutoscaling, KubernetesDashboard, NetworkPolicy, NodeLocalDNS, ConfigConnector, GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, BackupRestore, - GcsFuseCsiDriver, ParallelstoreCsiDriver, LustreCsiDriver, RayOperator, - Istio, CloudRun. + GcsFuseCsiDriver, ParallelstoreCsiDriver, HighScaleCheckpointing, + LustreCsiDriver, RayOperator, Istio, CloudRun. --allow-route-overlap Allows the provided cluster CIDRs to overlap with existing routes that @@ -1380,46 +1380,61 @@ FLAGS List of supported kubelet configs in 'kubeletConfig'. - KEY VALUE - cpuManagerPolicy either 'static' or 'none' - cpuCFSQuota true or false (enabled by - default) - cpuCFSQuotaPeriod interval (e.g., '100ms') - memoryManager specify memory manager policy - topologyManager specify topology manager policy - and scope - podPidsLimit integer (The value must be - greater than or equal to 1024 and - less than 4194304.) - containerLogMaxSize positive number plus unit suffix - (e.g., '100Mi', '0.2Gi'. The - value must be between 10Mi and - 500Mi.) - containerLogMaxFiles integer (The value must be - between [2, 10].) - imageGcLowThresholdPercent integer (The value must be - between [10, 85], and lower than - imageGcHighThresholdPercent.) - imageGcHighThresholdPercent integer (The value must be - between [10, 85], and greater - than imageGcLowThresholdPercent.) - imageMinimumGcAge interval (e.g., '100s', '1m'. The - value must be less than '2m'.) - imageMaximumGcAge interval (e.g., '100s', '1m'. The - value must be greater than - imageMinimumGcAge.) - allowedUnsafeSysctls list of sysctls (Allowlisted - groups: 'kernel.shm*', - 'kernel.msg*', 'kernel.sem', - 'fs.mqueue.*', and 'net.*', and - sysctls under the groups.) - singleProcessOomKill true or false - maxParallelImagePulls integer (The value must be - between [2, 5].) + KEY VALUE + cpuManagerPolicy either 'static' or 'none' + cpuCFSQuota true or false (enabled by + default) + cpuCFSQuotaPeriod interval (e.g., '100ms') + memoryManager specify memory manager policy + topologyManager specify topology manager policy + and scope + podPidsLimit integer (The value must be + greater than or equal to 1024 + and less than 4194304.) + containerLogMaxSize positive number plus unit suffix + (e.g., '100Mi', '0.2Gi'. The + value must be between 10Mi and + 500Mi.) + containerLogMaxFiles integer (The value must be + between [2, 10].) + imageGcLowThresholdPercent integer (The value must be + between [10, 85], and lower than + imageGcHighThresholdPercent.) + imageGcHighThresholdPercent integer (The value must be + between [10, 85], and greater + than + imageGcLowThresholdPercent.) + imageMinimumGcAge interval (e.g., '100s', '1m'. + The value must be less than + '2m'.) + imageMaximumGcAge interval (e.g., '100s', '1m'. + The value must be greater than + imageMinimumGcAge.) + evictionSoft specify eviction soft thresholds + evictionSoftGracePeriod specify eviction soft grace + period + evictionMinimumReclaim specify eviction minimum reclaim + thresholds + evictionMaxPodGracePeriodSeconds integer (Max grace period for + pod termination during eviction, + in seconds. The value must be + between [0, 300].) + allowedUnsafeSysctls list of sysctls (Allowlisted + groups: 'kernel.shm*', + 'kernel.msg*', 'kernel.sem', + 'fs.mqueue.*', and 'net.*', and + sysctls under the groups.) + singleProcessOomKill true or false + maxParallelImagePulls integer (The value must be + between [2, 5].) + + List of supported keys in memoryManager in 'kubeletConfig'. KEY VALUE policy either 'Static' or 'None' + List of supported keys in topologyManager in 'kubeletConfig'. + KEY VALUE policy either 'none' or 'best-effort' or @@ -1428,6 +1443,89 @@ FLAGS scope either 'pod' or 'container' + List of supported keys in evictionSoft in 'kubeletConfig'. + + KEY VALUE + memoryAvailable quantity (e.g., '100Mi', '1Gi'. Represents + the amount of memory available before soft + eviction. The value must be at least 100Mi + and less than 50% of the node's memory.) + nodefsAvailable percentage (e.g., '20%'. Represents the + nodefs available before soft eviction. The + value must be between 10% and 50%, + inclusive.) + nodefsInodesFree percentage (e.g., '20%'. Represents the + nodefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + imagefsAvailable percentage (e.g., '20%'. Represents the + imagefs available before soft eviction. The + value must be between 15% and 50%, + inclusive.) + imagefsInodesFree percentage (e.g., '20%'. Represents the + imagefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + pidAvailable percentage (e.g., '20%'. Represents the pid + available before soft eviction. The value + must be between 10% and 50%, inclusive.) + + List of supported keys in evictionSoftGracePeriod in 'kubeletConfig'. + + KEY VALUE + memoryAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + pidAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + + List of supported keys in evictionMinimumReclaim in 'kubeletConfig'. + + KEY VALUE + memoryAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for memory + available. The value must be positive and + no more than 10%.) + nodefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + available. The value must be positive and + no more than 10%.) + nodefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs inodes + free. The value must be positive and no + more than 10%.) + imagefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + available. The value must be positive and + no more than 10%.) + imagefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + inodes free. The value must be positive and + no more than 10%.) + pidAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for pid + available. The value must be positive and + no more than 10%.) + List of supported sysctls in 'linuxConfig'. KEY VALUE @@ -1774,7 +1872,7 @@ FLAGS --boot-disk-provisioned-throughput=BOOT_DISK_PROVISIONED_THROUGHPUT Configure the Provisioned Throughput for the node pool boot disks. - Only valid for hyperdisk-throughput boot disks. + Only valid for hyperdisk-balanced boot disks. ClusterDNS diff --git a/gcloud/beta/container/fleet/cloudrun/disable b/gcloud/beta/container/fleet/cloudrun/disable index 274e0f0e8..ae5a597ee 100644 --- a/gcloud/beta/container/fleet/cloudrun/disable +++ b/gcloud/beta/container/fleet/cloudrun/disable @@ -15,9 +15,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/fleet/config-management/disable b/gcloud/beta/container/fleet/config-management/disable index 5a4bb5bf5..64d54d2dc 100644 --- a/gcloud/beta/container/fleet/config-management/disable +++ b/gcloud/beta/container/fleet/config-management/disable @@ -32,9 +32,9 @@ FLAGS Does not change existing membership configurations. --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/fleet/dataplane-v2-encryption/disable b/gcloud/beta/container/fleet/dataplane-v2-encryption/disable index 46befec5a..bfe0e1e13 100644 --- a/gcloud/beta/container/fleet/dataplane-v2-encryption/disable +++ b/gcloud/beta/container/fleet/dataplane-v2-encryption/disable @@ -17,9 +17,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/fleet/fleetobservability/disable b/gcloud/beta/container/fleet/fleetobservability/disable index bb4db4a40..b32ed273f 100644 --- a/gcloud/beta/container/fleet/fleetobservability/disable +++ b/gcloud/beta/container/fleet/fleetobservability/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/fleet/identity-service/disable b/gcloud/beta/container/fleet/identity-service/disable index 0ce1c607f..ad4a8544e 100644 --- a/gcloud/beta/container/fleet/identity-service/disable +++ b/gcloud/beta/container/fleet/identity-service/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/fleet/ingress/disable b/gcloud/beta/container/fleet/ingress/disable index c5c7b37f1..13652a422 100644 --- a/gcloud/beta/container/fleet/ingress/disable +++ b/gcloud/beta/container/fleet/ingress/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/fleet/multi-cluster-services/disable b/gcloud/beta/container/fleet/multi-cluster-services/disable index 9b2e986fb..2f269e3f8 100644 --- a/gcloud/beta/container/fleet/multi-cluster-services/disable +++ b/gcloud/beta/container/fleet/multi-cluster-services/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/hub/cloudrun/disable b/gcloud/beta/container/hub/cloudrun/disable index 8c46c26fd..fb871c50d 100644 --- a/gcloud/beta/container/hub/cloudrun/disable +++ b/gcloud/beta/container/hub/cloudrun/disable @@ -14,9 +14,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/hub/config-management/disable b/gcloud/beta/container/hub/config-management/disable index ce4cff2ac..9cd7ec233 100644 --- a/gcloud/beta/container/hub/config-management/disable +++ b/gcloud/beta/container/hub/config-management/disable @@ -32,9 +32,9 @@ FLAGS Does not change existing membership configurations. --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/hub/dataplane-v2-encryption/disable b/gcloud/beta/container/hub/dataplane-v2-encryption/disable index 9851bde8c..9d6182866 100644 --- a/gcloud/beta/container/hub/dataplane-v2-encryption/disable +++ b/gcloud/beta/container/hub/dataplane-v2-encryption/disable @@ -17,9 +17,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/hub/fleetobservability/disable b/gcloud/beta/container/hub/fleetobservability/disable index ccecba83e..ce90de811 100644 --- a/gcloud/beta/container/hub/fleetobservability/disable +++ b/gcloud/beta/container/hub/fleetobservability/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/hub/identity-service/disable b/gcloud/beta/container/hub/identity-service/disable index 8cca1fd87..43ce8a69c 100644 --- a/gcloud/beta/container/hub/identity-service/disable +++ b/gcloud/beta/container/hub/identity-service/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/hub/ingress/disable b/gcloud/beta/container/hub/ingress/disable index 185f23e04..fea8b57c8 100644 --- a/gcloud/beta/container/hub/ingress/disable +++ b/gcloud/beta/container/hub/ingress/disable @@ -15,9 +15,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/hub/multi-cluster-services/disable b/gcloud/beta/container/hub/multi-cluster-services/disable index 14ddefa96..e585f0edb 100644 --- a/gcloud/beta/container/hub/multi-cluster-services/disable +++ b/gcloud/beta/container/hub/multi-cluster-services/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/container/node-pools/create b/gcloud/beta/container/node-pools/create index 9b9394245..b2fb1d605 100644 --- a/gcloud/beta/container/node-pools/create +++ b/gcloud/beta/container/node-pools/create @@ -198,7 +198,7 @@ FLAGS --boot-disk-provisioned-throughput=BOOT_DISK_PROVISIONED_THROUGHPUT Configure the Provisioned Throughput for the node pool boot disks. Only - valid for hyperdisk-throughput boot disks. + valid for hyperdisk-balanced boot disks. --cluster=CLUSTER The cluster to add the node pool to. Overrides the default @@ -780,46 +780,61 @@ FLAGS List of supported kubelet configs in 'kubeletConfig'. - KEY VALUE - cpuManagerPolicy either 'static' or 'none' - cpuCFSQuota true or false (enabled by - default) - cpuCFSQuotaPeriod interval (e.g., '100ms') - memoryManager specify memory manager policy - topologyManager specify topology manager policy - and scope - podPidsLimit integer (The value must be - greater than or equal to 1024 and - less than 4194304.) - containerLogMaxSize positive number plus unit suffix - (e.g., '100Mi', '0.2Gi'. The - value must be between 10Mi and - 500Mi.) - containerLogMaxFiles integer (The value must be - between [2, 10].) - imageGcLowThresholdPercent integer (The value must be - between [10, 85], and lower than - imageGcHighThresholdPercent.) - imageGcHighThresholdPercent integer (The value must be - between [10, 85], and greater - than imageGcLowThresholdPercent.) - imageMinimumGcAge interval (e.g., '100s', '1m'. The - value must be less than '2m'.) - imageMaximumGcAge interval (e.g., '100s', '1m'. The - value must be greater than - imageMinimumGcAge.) - allowedUnsafeSysctls list of sysctls (Allowlisted - groups: 'kernel.shm*', - 'kernel.msg*', 'kernel.sem', - 'fs.mqueue.*', and 'net.*', and - sysctls under the groups.) - singleProcessOomKill true or false - maxParallelImagePulls integer (The value must be - between [2, 5].) + KEY VALUE + cpuManagerPolicy either 'static' or 'none' + cpuCFSQuota true or false (enabled by + default) + cpuCFSQuotaPeriod interval (e.g., '100ms') + memoryManager specify memory manager policy + topologyManager specify topology manager policy + and scope + podPidsLimit integer (The value must be + greater than or equal to 1024 + and less than 4194304.) + containerLogMaxSize positive number plus unit suffix + (e.g., '100Mi', '0.2Gi'. The + value must be between 10Mi and + 500Mi.) + containerLogMaxFiles integer (The value must be + between [2, 10].) + imageGcLowThresholdPercent integer (The value must be + between [10, 85], and lower than + imageGcHighThresholdPercent.) + imageGcHighThresholdPercent integer (The value must be + between [10, 85], and greater + than + imageGcLowThresholdPercent.) + imageMinimumGcAge interval (e.g., '100s', '1m'. + The value must be less than + '2m'.) + imageMaximumGcAge interval (e.g., '100s', '1m'. + The value must be greater than + imageMinimumGcAge.) + evictionSoft specify eviction soft thresholds + evictionSoftGracePeriod specify eviction soft grace + period + evictionMinimumReclaim specify eviction minimum reclaim + thresholds + evictionMaxPodGracePeriodSeconds integer (Max grace period for + pod termination during eviction, + in seconds. The value must be + between [0, 300].) + allowedUnsafeSysctls list of sysctls (Allowlisted + groups: 'kernel.shm*', + 'kernel.msg*', 'kernel.sem', + 'fs.mqueue.*', and 'net.*', and + sysctls under the groups.) + singleProcessOomKill true or false + maxParallelImagePulls integer (The value must be + between [2, 5].) + + List of supported keys in memoryManager in 'kubeletConfig'. KEY VALUE policy either 'Static' or 'None' + List of supported keys in topologyManager in 'kubeletConfig'. + KEY VALUE policy either 'none' or 'best-effort' or @@ -828,6 +843,89 @@ FLAGS scope either 'pod' or 'container' + List of supported keys in evictionSoft in 'kubeletConfig'. + + KEY VALUE + memoryAvailable quantity (e.g., '100Mi', '1Gi'. Represents + the amount of memory available before soft + eviction. The value must be at least 100Mi + and less than 50% of the node's memory.) + nodefsAvailable percentage (e.g., '20%'. Represents the + nodefs available before soft eviction. The + value must be between 10% and 50%, + inclusive.) + nodefsInodesFree percentage (e.g., '20%'. Represents the + nodefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + imagefsAvailable percentage (e.g., '20%'. Represents the + imagefs available before soft eviction. The + value must be between 15% and 50%, + inclusive.) + imagefsInodesFree percentage (e.g., '20%'. Represents the + imagefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + pidAvailable percentage (e.g., '20%'. Represents the pid + available before soft eviction. The value + must be between 10% and 50%, inclusive.) + + List of supported keys in evictionSoftGracePeriod in 'kubeletConfig'. + + KEY VALUE + memoryAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + pidAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + + List of supported keys in evictionMinimumReclaim in 'kubeletConfig'. + + KEY VALUE + memoryAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for memory + available. The value must be positive and + no more than 10%.) + nodefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + available. The value must be positive and + no more than 10%.) + nodefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs inodes + free. The value must be positive and no + more than 10%.) + imagefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + available. The value must be positive and + no more than 10%.) + imagefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + inodes free. The value must be positive and + no more than 10%.) + pidAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for pid + available. The value must be positive and + no more than 10%.) + List of supported sysctls in 'linuxConfig'. KEY VALUE diff --git a/gcloud/beta/container/node-pools/update b/gcloud/beta/container/node-pools/update index e27ce3bca..96ed67705 100644 --- a/gcloud/beta/container/node-pools/update +++ b/gcloud/beta/container/node-pools/update @@ -310,50 +310,65 @@ REQUIRED FLAGS List of supported kubelet configs in 'kubeletConfig'. - KEY VALUE - cpuManagerPolicy either 'static' or 'none' - cpuCFSQuota true or false (enabled by - default) - cpuCFSQuotaPeriod interval (e.g., '100ms') - memoryManager specify memory manager policy - topologyManager specify topology manager policy - and scope - podPidsLimit integer (The value must be - greater than or equal to 1024 - and less than 4194304.) - containerLogMaxSize positive number plus unit - suffix (e.g., '100Mi', '0.2Gi'. - The value must be between 10Mi - and 500Mi.) - containerLogMaxFiles integer (The value must be - between [2, 10].) - imageGcLowThresholdPercent integer (The value must be - between [10, 85], and lower - than - imageGcHighThresholdPercent.) - imageGcHighThresholdPercent integer (The value must be - between [10, 85], and greater - than - imageGcLowThresholdPercent.) - imageMinimumGcAge interval (e.g., '100s', '1m'. - The value must be less than - '2m'.) - imageMaximumGcAge interval (e.g., '100s', '1m'. - The value must be greater than - imageMinimumGcAge.) - allowedUnsafeSysctls list of sysctls (Allowlisted - groups: 'kernel.shm*', - 'kernel.msg*', 'kernel.sem', - 'fs.mqueue.*', and 'net.*', and - sysctls under the groups.) - singleProcessOomKill true or false - maxParallelImagePulls integer (The value must be - between [2, 5].) + KEY VALUE + cpuManagerPolicy either 'static' or 'none' + cpuCFSQuota true or false (enabled by + default) + cpuCFSQuotaPeriod interval (e.g., '100ms') + memoryManager specify memory manager policy + topologyManager specify topology manager + policy and scope + podPidsLimit integer (The value must be + greater than or equal to 1024 + and less than 4194304.) + containerLogMaxSize positive number plus unit + suffix (e.g., '100Mi', + '0.2Gi'. The value must be + between 10Mi and 500Mi.) + containerLogMaxFiles integer (The value must be + between [2, 10].) + imageGcLowThresholdPercent integer (The value must be + between [10, 85], and lower + than + imageGcHighThresholdPercent.) + imageGcHighThresholdPercent integer (The value must be + between [10, 85], and greater + than + imageGcLowThresholdPercent.) + imageMinimumGcAge interval (e.g., '100s', '1m'. + The value must be less than + '2m'.) + imageMaximumGcAge interval (e.g., '100s', '1m'. + The value must be greater than + imageMinimumGcAge.) + evictionSoft specify eviction soft + thresholds + evictionSoftGracePeriod specify eviction soft grace + period + evictionMinimumReclaim specify eviction minimum + reclaim thresholds + evictionMaxPodGracePeriodSeconds integer (Max grace period for + pod termination during + eviction, in seconds. The + value must be between [0, + 300].) + allowedUnsafeSysctls list of sysctls (Allowlisted + groups: 'kernel.shm*', + 'kernel.msg*', 'kernel.sem', + 'fs.mqueue.*', and 'net.*', + and sysctls under the groups.) + singleProcessOomKill true or false + maxParallelImagePulls integer (The value must be + between [2, 5].) + + List of supported keys in memoryManager in 'kubeletConfig'. KEY VALUE policy either 'Static' or 'None' + List of supported keys in topologyManager in 'kubeletConfig'. + KEY VALUE policy either 'none' or 'best-effort' or @@ -362,6 +377,91 @@ REQUIRED FLAGS scope either 'pod' or 'container' + List of supported keys in evictionSoft in 'kubeletConfig'. + + KEY VALUE + memoryAvailable quantity (e.g., '100Mi', '1Gi'. + Represents the amount of memory available + before soft eviction. The value must be + at least 100Mi and less than 50% of the + node's memory.) + nodefsAvailable percentage (e.g., '20%'. Represents the + nodefs available before soft eviction. + The value must be between 10% and 50%, + inclusive.) + nodefsInodesFree percentage (e.g., '20%'. Represents the + nodefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + imagefsAvailable percentage (e.g., '20%'. Represents the + imagefs available before soft eviction. + The value must be between 15% and 50%, + inclusive.) + imagefsInodesFree percentage (e.g., '20%'. Represents the + imagefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + pidAvailable percentage (e.g., '20%'. Represents the + pid available before soft eviction. The + value must be between 10% and 50%, + inclusive.) + + List of supported keys in evictionSoftGracePeriod in 'kubeletConfig'. + + KEY VALUE + memoryAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + nodefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + nodefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + imagefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + imagefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + pidAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + + List of supported keys in evictionMinimumReclaim in 'kubeletConfig'. + + KEY VALUE + memoryAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for memory + available. The value must be positive and + no more than 10%.) + nodefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + available. The value must be positive and + no more than 10%.) + nodefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + inodes free. The value must be positive + and no more than 10%.) + imagefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + available. The value must be positive and + no more than 10%.) + imagefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + inodes free. The value must be positive + and no more than 10%.) + pidAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for pid + available. The value must be positive and + no more than 10%.) + List of supported sysctls in 'linuxConfig'. KEY VALUE @@ -655,7 +755,7 @@ REQUIRED FLAGS --boot-disk-provisioned-throughput=BOOT_DISK_PROVISIONED_THROUGHPUT Configure the Provisioned Throughput for the node pool boot disks. - Only valid for hyperdisk-throughput boot disks. + Only valid for hyperdisk-balanced boot disks. --disk-size=DISK_SIZE Size for node VM boot disks in GB. Defaults to 100GB. diff --git a/gcloud/beta/firestore/databases/connection-string b/gcloud/beta/firestore/databases/connection-string index afd6a67c8..538bfbee9 100644 --- a/gcloud/beta/firestore/databases/connection-string +++ b/gcloud/beta/firestore/databases/connection-string @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud beta firestore databases connection-string --database=DATABASE - [--auth=AUTH; default="none"] [GCLOUD_WIDE_FLAG ...] + [--auth=AUTH; default="none" | --validate=VALIDATE] + [GCLOUD_WIDE_FLAG ...] EXAMPLES To get the connection string for a Firestore database with a databaseId @@ -28,15 +29,23 @@ REQUIRED FLAGS $ gcloud beta firestore databases connection-string --database='foo' OPTIONAL FLAGS - --auth=AUTH; default="none" - The auth configuration for the connection string. + At most one of these can be specified: - If connecting from a Google Compute Engine VM, use gce-vm. For short - term access using the gcloud CLI's access token, use access-token. For - password auth use scram-sha-256. Otherwise, use none and configure auth - manually. + --auth=AUTH; default="none" + The auth configuration for the connection string. - AUTH must be one of: none, gce-vm, access-token, scram-sha-256. + If connecting from a Google Compute Engine VM, use gce-vm. For short + term access using the gcloud CLI's access token, use access-token. + For password auth use scram-sha-256. Otherwise, use none and + configure auth manually. + + AUTH must be one of: none, gce-vm, access-token, scram-sha-256. + + --validate=VALIDATE + Validate the specified connection string for the current database. + This command checks that the connection string is well formed, + contains the required parameters, and specifies correct configuration + values for the current database. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/managed-kafka/clusters/create b/gcloud/beta/managed-kafka/clusters/create index 47b6fc18b..11b5cf722 100644 --- a/gcloud/beta/managed-kafka/clusters/create +++ b/gcloud/beta/managed-kafka/clusters/create @@ -6,7 +6,9 @@ SYNOPSIS gcloud beta managed-kafka clusters create (CLUSTER : --location=LOCATION) --cpu=CPU --memory=MEMORY --subnets=[SUBNETS,...] [--async] [--no-auto-rebalance] [--encryption-key=ENCRYPTION_KEY] - [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] + [--labels=[KEY=VALUE,...]] [--mtls-ca-pools=[MTLS_CA_POOLS,...]] + [--ssl-principal-mapping-rules=SSL_PRINCIPAL_MAPPING_RULES] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Create a Managed Service for Apache Kafka cluster. @@ -96,6 +98,29 @@ OPTIONAL FLAGS characters, and numbers. Values must contain only hyphens (-), underscores (_), lowercase characters, and numbers. + --mtls-ca-pools=[MTLS_CA_POOLS,...] + A comma-separated list of CA pools from the Google Cloud Certificate + Authority Service. The root certificates of these CA pools will be + installed in the truststore of each broker in the cluster for use with + mTLS. A maximum of 10 CA pools can be specified. CA pools can be in a + different project and region than the cluster. This command overwrites + the entire set of pools currently configured on the cluster. If you + want to add a new pool to an existing configuration, you must provide + the full list of both the old and new CA pools in the command. Each CA + pool must be in the format + projects/PROJECT_ID/locations/LOCATION/caPools/CA_POOL. Clear the CA + pools using the --clear-mtls-ca-pools flag. + + --ssl-principal-mapping-rules=SSL_PRINCIPAL_MAPPING_RULES + The rules for mapping mTLS certificate Distinguished Names (DNs) to + shortened principal names for Kafka ACLs. This flag corresponds exactly + to the ssl.principal.mapping.rules broker config and matches the format + and syntax defined in the Apache Kafka documentation. Setting or + modifying this field will trigger a rolling restart of the Kafka + brokers to apply the change. An empty string means that the default + Kafka behavior is used. Example: + "RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT" + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/managed-kafka/clusters/update b/gcloud/beta/managed-kafka/clusters/update index fe61c14da..80b4a876f 100644 --- a/gcloud/beta/managed-kafka/clusters/update +++ b/gcloud/beta/managed-kafka/clusters/update @@ -4,9 +4,11 @@ NAME SYNOPSIS gcloud beta managed-kafka clusters update (CLUSTER : --location=LOCATION) - (--auto-rebalance --cpu=CPU - --labels=[KEY=VALUE,...] --memory=MEMORY --subnets=[SUBNETS,...]) - [--async] [GCLOUD_WIDE_FLAG ...] + (--auto-rebalance --cpu=CPU --labels=[KEY=VALUE,...] --memory=MEMORY + --ssl-principal-mapping-rules=SSL_PRINCIPAL_MAPPING_RULES + --subnets=[SUBNETS,...] --clear-mtls-ca-pools + | --mtls-ca-pools=[MTLS_CA_POOLS,...]) [--async] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Update a Managed Service for Apache Kafka cluster. @@ -74,6 +76,16 @@ REQUIRED FLAGS The memory to provision for the cluster in bytes. The value must be between 1 GiB and 8 GiB per vCPU. Ex. 1024Mi, 4Gi. + --ssl-principal-mapping-rules=SSL_PRINCIPAL_MAPPING_RULES + The rules for mapping mTLS certificate Distinguished Names (DNs) to + shortened principal names for Kafka ACLs. This flag corresponds + exactly to the ssl.principal.mapping.rules broker config and matches + the format and syntax defined in the Apache Kafka documentation. + Setting or modifying this field will trigger a rolling restart of the + Kafka brokers to apply the change. An empty string means that the + default Kafka behavior is used. Example: + "RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT" + --subnets=[SUBNETS,...] A comma-separated list of VPC subnets from which the cluster is accessible. Both broker and bootstrap server IP addresses and DNS @@ -84,6 +96,26 @@ REQUIRED FLAGS separate multiple subnets. The name of the subnet must be in the format projects/PROJECT_ID/regions/REGION/subnetworks/SUBNET. + At most one of these can be specified: + + --clear-mtls-ca-pools + Remove all the CA pools from the cluster. This will remove all root + certificates from the truststore of each broker in the cluster. + + --mtls-ca-pools=[MTLS_CA_POOLS,...] + A comma-separated list of CA pools from the Google Cloud + Certificate Authority Service. The root certificates of these CA + pools will be installed in the truststore of each broker in the + cluster for use with mTLS. A maximum of 10 CA pools can be + specified. CA pools can be in a different project and region than + the cluster. This command overwrites the entire set of pools + currently configured on the cluster. If you want to add a new pool + to an existing configuration, you must provide the full list of + both the old and new CA pools in the command. Each CA pool must be + in the format + projects/PROJECT_ID/locations/LOCATION/caPools/CA_POOL. Clear the + CA pools using the --clear-mtls-ca-pools flag. + OPTIONAL FLAGS --async Return immediately, without waiting for the operation in progress to diff --git a/gcloud/beta/service-extensions/wasm-plugin-versions/create b/gcloud/beta/service-extensions/wasm-plugin-versions/create index e16533781..fe622b6b5 100644 --- a/gcloud/beta/service-extensions/wasm-plugin-versions/create +++ b/gcloud/beta/service-extensions/wasm-plugin-versions/create @@ -63,8 +63,8 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --image=IMAGE - URI of the container image containing the plugin's Wasm module, stored - in the Artifact Registry. + URI of the image containing the plugin's Wasm module, stored in the + Artifact Registry. OPTIONAL FLAGS --async @@ -92,8 +92,8 @@ OPTIONAL FLAGS plugin_config_file. --plugin-config-uri=PLUGIN_CONFIG_URI - URI of the container image containing the plugin's configuration, - stored in the Artifact Registry. + URI of the image containing the plugin's configuration, stored in the + Artifact Registry. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/compute/help b/gcloud/compute/help index 978ae1ad8..712cd1baa 100644 --- a/gcloud/compute/help +++ b/gcloud/compute/help @@ -93,6 +93,10 @@ GROUPS machine-types Read Compute Engine virtual machine types. + migration + Provides Migrate to Virtual Machines (VM migration) service + functionality. + network-attachments Manage Compute Engine network attachment resources. diff --git a/gcloud/compute/instances/network-interfaces/update b/gcloud/compute/instances/network-interfaces/update index f2e9c9049..f9e98f4a7 100644 --- a/gcloud/compute/instances/network-interfaces/update +++ b/gcloud/compute/instances/network-interfaces/update @@ -50,8 +50,8 @@ FLAGS --external-ipv6-address=EXTERNAL_IPV6_ADDRESS Assigns the given external IPv6 address to an instance. The address - must be the first IP in the range. This option is applicable only to - dual-stack instances with stack-type=IPV4_ONLY. + must be the first IP in the range. This option is not applicable to + instances with stack-type=IPV4_ONLY. --external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH The prefix length of the external IPv6 address range. This flag should diff --git a/gcloud/compute/instances/report-host-as-faulty b/gcloud/compute/instances/report-host-as-faulty index 81663fbab..ff136149c 100644 --- a/gcloud/compute/instances/report-host-as-faulty +++ b/gcloud/compute/instances/report-host-as-faulty @@ -28,8 +28,8 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --disruption-schedule=DISRUPTION_SCHEDULE Specifies the timing for initiating the fault reporting process. The - default value is ['IMMEDIATE'] which initiates the process right away. - DISRUPTION_SCHEDULE must be (only one value is supported): IMMEDIATE. + default value is IMMEDIATE which initiates the process right away. + DISRUPTION_SCHEDULE must be one of: IMMEDIATE, FUTURE. --fault-reasons=[behavior=BEHAVIOR],[description=DESCRIPTION] Specified and can include one or more of the following types: diff --git a/gcloud/compute/migration/help b/gcloud/compute/migration/help new file mode 100644 index 000000000..deae65015 --- /dev/null +++ b/gcloud/compute/migration/help @@ -0,0 +1,37 @@ +NAME + gcloud compute migration - provides Migrate to Virtual Machines + (VM migration) service functionality + +SYNOPSIS + gcloud compute migration GROUP [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + The gcloud alpha migration vms command group provides the CLI for the + Migrate to Virtual Machines API. Google Cloud Migrate to Virtual Machines + migrates VMs from on-premises data center and other cloud providers to + Google Compute Engine virtual machine (VM) instances. VM Migration API must + be enabled in your project. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + image-imports + Imports images to Google Compute Engine from Google Cloud Storage. + + machine-image-imports + Imports machine images to Google Compute Engine from Google Cloud + Storage. + + target-projects + Manage Target Projects. + +NOTES + This variant is also available: + + $ gcloud alpha compute migration + diff --git a/gcloud/compute/migration/image-imports/create b/gcloud/compute/migration/image-imports/create new file mode 100644 index 000000000..9cfd5158e --- /dev/null +++ b/gcloud/compute/migration/image-imports/create @@ -0,0 +1,159 @@ +NAME + gcloud compute migration image-imports create - import Virtual Disk images + to Google Compute Engine + +SYNOPSIS + gcloud compute migration image-imports create + (IMAGE_IMPORT_NAME : --location=LOCATION) --source-file=SOURCE_FILE + [--additional-licenses=[ADDITIONAL_LICENSES,...]] + [--description=DESCRIPTION] [--family-name=FAMILY_NAME] + [--image-name=IMAGE_NAME] [--kms-key=KMS_KEY] + [--labels=[KEY=VALUE,...]] [--single-region-storage] + [--target-project=TARGET_PROJECT] + [--skip-os-adaptation | --adaptation-modifiers=ADAPTATION_MODIFIERS + --boot-conversion=BOOT_CONVERSION + --generalize --license-type=LICENSE_TYPE --rootfs-uuid=ROOTFS_UUID] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute migration image-imports create imports images such as VMWare + VMDK files and VHD files, from a Google Cloud Storage file (gs://...) to + Google Compute Engine, using the Migrate to Virtual Machines service API. + This command creates an Image Import resource with a nested Image Import + Job resource. The Image Import Job resource tracks the image import + progress. To use this command, you must enable VM Migration API in your + project. + +EXAMPLES + To import my-ubuntu22.04.vmdk from my-images-bucket to my-target-project in + us-central1, create my-image-import resource in my-project in us-central1. + Run: $ gcloud compute migration image-imports create my-image-import \ + --source-file=gs://my-images-bucket/my-ubuntu22.04.vmdk \ + --image-name=my-ubuntu-image --location=us-central1 \ + --target-project=projects/my-project/locations/global/\ + targetProjects/my-target-project --project=my-project + +POSITIONAL ARGUMENTS + Image import resource - The Image Import resource you want to create. This + would be the image name if --image-name is not given. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +REQUIRED FLAGS + --source-file=SOURCE_FILE + The path to the Google Cloud Storage file from which the image should + be imported. + +OPTIONAL FLAGS + --additional-licenses=[ADDITIONAL_LICENSES,...] + Comma-separated list of the additional licenses to assign to the image. + + --description=DESCRIPTION + A description of the image. + + --family-name=FAMILY_NAME + The name of the image family to which the new image belongs. + + --image-name=IMAGE_NAME + The name of the image that will be imported to Google Compute Engine. + Default is the Image Import name. + + --kms-key=KMS_KEY + Fully qualified identifier for the Cloud KMS (Key Management Service) + cryptokey that will be used to protect the image. + + --labels=[KEY=VALUE,...] + A map of labels to associate with the image. + + --single-region-storage + If true, the location of the imported image will be the region of the + import job. Otherwise the closest multi-region is selected. Default is + false. + + --target-project=TARGET_PROJECT + The target project resource path to which the image will be imported. + Default is the customer project. To get a list of the target projects + run the gcloud alpha migration vms target-projects list command. + + OS adaptation parameters + + At most one of these can be specified: + + --skip-os-adaptation + If true, skip OS adaptation. Default false. + + --adaptation-modifiers=ADAPTATION_MODIFIERS + A map of flags to pass to the OS adaptation process. The actual value + depends on the modifier and can also be empty. e.g. + --adaptation-modifiers=flag1=value1,flag2 + + --boot-conversion=BOOT_CONVERSION + This property will trigger an internal process which will convert the + image from using the existing boot option to another. The size of the + boot disk might be increased to allow the conversion. Currently only + support BIOS_TO_EFI. + + BOOT_CONVERSION must be one of: bios-to-efi, + boot-conversion-unspecified, none. + + --generalize + If true, generalize the imported image. Default false. The + generalization process enables co-existence of multiple VMs created + from the same image. For Windows, generalizing the image removes + computer-specific information such as installed drivers and the + computer security identifier (SID). + + --license-type=LICENSE_TYPE + The license to use post migration. LICENSE_TYPE must be one of: + compute-engine-license-type-byol, + compute-engine-license-type-default, + compute-engine-license-type-payg. + + --rootfs-uuid=ROOTFS_UUID + Identifies the file system to adapt. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This variant is also available: + + $ gcloud alpha compute migration image-imports create + diff --git a/gcloud/compute/migration/image-imports/delete b/gcloud/compute/migration/image-imports/delete new file mode 100644 index 000000000..158602d97 --- /dev/null +++ b/gcloud/compute/migration/image-imports/delete @@ -0,0 +1,70 @@ +NAME + gcloud compute migration image-imports delete - delete an Image Import + resource + +SYNOPSIS + gcloud compute migration image-imports delete + (IMAGE_IMPORT_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute migration image-imports delete deletes an Image Import + resource. To use this command, you must enable VM Migration API in your + project. + + This command does not delete any images imported to Google Compute Engine. + +EXAMPLES + To delete my-image-import resource in us-central1 in the default project, + run: $ gcloud compute migration image-imports delete my-image-import \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Image import resource - The Image Import resource you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This variant is also available: + + $ gcloud alpha compute migration image-imports delete + diff --git a/gcloud/compute/migration/image-imports/describe b/gcloud/compute/migration/image-imports/describe new file mode 100644 index 000000000..76c13eb0d --- /dev/null +++ b/gcloud/compute/migration/image-imports/describe @@ -0,0 +1,68 @@ +NAME + gcloud compute migration image-imports describe - describe an Image Import + +SYNOPSIS + gcloud compute migration image-imports describe + (IMAGE_IMPORT_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute migration image-imports describe describes an Image Import + resource with a nested Image Import Job. The Image Import Job resource + tracks the image import progress. To use this command, you must enable VM + Migration API in your project. + +EXAMPLES + To describe my-image-import resource in us-central1 in the default project, + run: $ gcloud compute migration image-imports describe my-image-import \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Image import resource - The Image Import you want to describe. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This variant is also available: + + $ gcloud alpha compute migration image-imports describe + diff --git a/gcloud/compute/migration/image-imports/help b/gcloud/compute/migration/image-imports/help new file mode 100644 index 000000000..2a96f181a --- /dev/null +++ b/gcloud/compute/migration/image-imports/help @@ -0,0 +1,60 @@ +NAME + gcloud compute migration image-imports - imports images to Google Compute + Engine from Google Cloud Storage + +SYNOPSIS + gcloud compute migration image-imports COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud alpha migration vms image-imports provides a more robust and better + supported method for importing images to Google Compute Engine. Other + image-related operations (for example, list) can be done using gcloud + compute images, as usual. + + The commands use VM Migartion API which supports importing of an image from + a Google Cloud Storage file (gs://...) to a target project. VM Migration + API must be enabled in your project. + + gcloud alpha migration vms image-imports create creates an Image Import + resource with a nested Image Import Job resource. The Image Import Job + resource tracks the image import progress. After the Image Import Job + completes, successfully or otherwise, there's no further use for the Image + Import resource. + + The image is imported to a Google Cloud Project, desginated by the Target + Project resource. To get a list of Target Projects, run the gcloud alpha + migration vms target-projects list command. Use the Google Cloud console to + add target project resources. For information on adding target projects, + see + https://cloud.google.com/migrate/virtual-machines/docs/5.0/how-to/target-project. + + A project can support a maximum of 1000 Image Import resources per project. + Hence it's recommended to delete an Image Import resource after the Image + Import Job is complete to avoid reaching the Image Import resources limit. + Deletion of Image Import resource does not affect the imported image. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + import Virtual Disk images to Google Compute Engine. + + delete + delete an Image Import resource. + + describe + describe an Image Import. + + list + list Image Imports. + +NOTES + This variant is also available: + + $ gcloud alpha compute migration image-imports + diff --git a/gcloud/compute/migration/image-imports/list b/gcloud/compute/migration/image-imports/list new file mode 100644 index 000000000..07f265034 --- /dev/null +++ b/gcloud/compute/migration/image-imports/list @@ -0,0 +1,88 @@ +NAME + gcloud compute migration image-imports list - list Image Imports + +SYNOPSIS + gcloud compute migration image-imports list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute migration image-imports list prints a detailed list of Image + Import resources. To use this command, you must enable VM Migration API in + your project. + +EXAMPLES + To list the Image Import resources in us-central1 in the default project, + run: $ gcloud compute migration image-imports list --location=us-central1 + +FLAGS + Location resource - The compute/region of the Image Import. To get a list + of the available regions, run gcloud compute regions list command. If not + specified, the value of the [compute/zone] property in the current gcloud + configuration is used. This represents a Cloud resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property compute/region with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This variant is also available: + + $ gcloud alpha compute migration image-imports list + diff --git a/gcloud/compute/migration/machine-image-imports/create b/gcloud/compute/migration/machine-image-imports/create new file mode 100644 index 000000000..14e02171f --- /dev/null +++ b/gcloud/compute/migration/machine-image-imports/create @@ -0,0 +1,206 @@ +NAME + gcloud compute migration machine-image-imports create - import machine + images to Google Compute Engine + +SYNOPSIS + gcloud compute migration machine-image-imports create + (IMAGE_IMPORT_NAME : --location=LOCATION) --source-file=SOURCE_FILE + [--additional-licenses=[ADDITIONAL_LICENSES,...]] + [--description=DESCRIPTION] [--kms-key=KMS_KEY] + [--labels=[KEY=VALUE,...]] [--machine-image-name=MACHINE_IMAGE_NAME] + [--machine-type=MACHINE_TYPE] + [--network-interface=[network=NETWORK], + [networkTier=NETWORKTIER],[subnetwork=SUBNETWORK]] + [--single-region-storage] [--tags=[TAGS,...]] + [--target-project=TARGET_PROJECT] + [--enable-integrity-monitoring --enable-vtpm --secure-boot=SECURE_BOOT] + [--scopes=[SCOPES,...] --service-account=SERVICE_ACCOUNT] + [--skip-os-adaptation | --adaptation-modifiers=ADAPTATION_MODIFIERS + --boot-conversion=BOOT_CONVERSION + --generalize --license-type=LICENSE_TYPE --rootfs-uuid=ROOTFS_UUID] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute migration machine-image-imports create Imports machine + images such as OVA and OVF files, from a Google Cloud Storage file + (gs://...) to Google Compute Engine, using the Migrate to Virtual Machines + service API. This command creates an Image Import resource with a nested + Image Import Job resource. The Image Import Job resource tracks the image + import progress. To use this command, you must enable VM Migration API in + your project. + +EXAMPLES + To import ub-14.04.5.ova from my-images-bucket to my-target-project in + us-central1, create my-image-import resource in my-project in us-central1. + Run: $ gcloud compute migration machine-image-imports create \ + my-machine-image-import \ + --source-file=gs://my-images-bucket/ub-14.04.5.ova \ + --image-name=my-ubuntu-machine-image --location=us-central1 \ + --target-project=projects/my-project/locations/global/\ + targetProjects/my-target-project --project=my-project + +POSITIONAL ARGUMENTS + Image import resource - The Image Import resource you want to create. This + would be the machine image name if --machine-image-name is not given. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +REQUIRED FLAGS + --source-file=SOURCE_FILE + The path to the Google Cloud Storage file from which the image should + be imported. + +OPTIONAL FLAGS + --additional-licenses=[ADDITIONAL_LICENSES,...] + Comma-separated list of the additional licenses to assign to the + machine image. + + --description=DESCRIPTION + A description of the machine image. + + --kms-key=KMS_KEY + Fully qualified identifier for the Cloud KMS (Key Management Service) + cryptokey that will be used to protect the image. + + --labels=[KEY=VALUE,...] + A map of labels to associate with the machine image. + + --machine-image-name=MACHINE_IMAGE_NAME + The name of the machine image that will be imported to Google Compute + Engine. Default is the Image Import name. + + --machine-type=MACHINE_TYPE + The machine type to create the machine image with. If not provided, the + service will choose a relevant machine type series based on the + information from the source image. + + --network-interface=[network=NETWORK],[networkTier=NETWORKTIER],[subnetwork=SUBNETWORK] + The network interface to use for the instance created by the machine + image. This is a dicionary with the following keys: + ◆ network: The network to use for this network interface. + ◆ subnetwork: The subnetwork to use for this network interface. + ◆ network-tier: The network tier to use for this network interface. + This argument can be specified multiple times in case of multiple + nics. + + --single-region-storage + If true, the location of the imported machine image will be the region + of the import job. Otherwise the closest multi-region is selected. + Default is false. + + --tags=[TAGS,...] + The tags to apply to the instance created by the machine image. + + --target-project=TARGET_PROJECT + The target project resource path to which the machine image will be + imported. Default is the host project. To get a list of the target + projects run the gcloud alpha migration vms target-projects list + command. + + Shielded instance configuration. + + --enable-integrity-monitoring + Defines whether the instance created by the machine image has + integrity monitoring enabled. This can be set to true only if the + image boot option is EFI, and vTPM is enabled. + + --enable-vtpm + Defines whether the instance created by the machine image has vTPM + enabled. This can be set to true only if the image boot option is + EFI. + + --secure-boot=SECURE_BOOT + Defines whether the instance created by the machine image has Secure + Boot enabled. This can be set to true only if the image boot option + is EFI. If not specified we will use the configuration of the source. + SECURE_BOOT must be one of: false, secure-boot-unspecified, true. + + The service account to assign to the instance created by the machine + image. + + --scopes=[SCOPES,...] + The list of scopes to be made available for the service account. + + --service-account=SERVICE_ACCOUNT + The email address of the service account. + + OS adaptation parameters. + + At most one of these can be specified: + + --skip-os-adaptation + If true, skip OS adaptation. Default false. + + --adaptation-modifiers=ADAPTATION_MODIFIERS + A map of flags to pass to the OS adaptation process. The actual value + depends on the modifier and can also be empty. e.g. + --adaptation-modifiers=flag1=value1,flag2 + + --boot-conversion=BOOT_CONVERSION + This property will trigger an internal process which will convert the + image from using the existing boot option to another. The size of the + boot disk might be increased to allow the conversion. Currently only + support BIOS_TO_EFI. BOOT_CONVERSION must be one of: bios-to-efi, + boot-conversion-unspecified, none. + + --generalize + If true, generalize the imported machine image. Default false. The + generalization process enables co-existence of multiple VMs created + from the same machine image. For Windows, generalizing the machine + image removes computer-specific information such as installed drivers + and the computer security identifier (SID). + + --license-type=LICENSE_TYPE + The license to use post migration. LICENSE_TYPE must be one of: + compute-engine-license-type-byol, + compute-engine-license-type-default, + compute-engine-license-type-payg. + + --rootfs-uuid=ROOTFS_UUID + Identifies the file system to adapt. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This variant is also available: + + $ gcloud alpha compute migration machine-image-imports create + diff --git a/gcloud/compute/migration/machine-image-imports/delete b/gcloud/compute/migration/machine-image-imports/delete new file mode 100644 index 000000000..5947dcf6e --- /dev/null +++ b/gcloud/compute/migration/machine-image-imports/delete @@ -0,0 +1,71 @@ +NAME + gcloud compute migration machine-image-imports delete - delete an Image + Import resource + +SYNOPSIS + gcloud compute migration machine-image-imports delete + (IMAGE_IMPORT_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute migration machine-image-imports delete deletes an Image + Import resource. To use this command, you must enable VM Migration API in + your project. + + This command does not delete any machine images imported to Google Compute + Engine. + +EXAMPLES + To delete my-image-import resource in us-central1 in the default project, + run: $ gcloud compute migration machine-image-imports delete \ + my-image-import --location=us-central1 + +POSITIONAL ARGUMENTS + Image import resource - The Image Import resource you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This variant is also available: + + $ gcloud alpha compute migration machine-image-imports delete + diff --git a/gcloud/compute/migration/machine-image-imports/describe b/gcloud/compute/migration/machine-image-imports/describe new file mode 100644 index 000000000..a8e695e2c --- /dev/null +++ b/gcloud/compute/migration/machine-image-imports/describe @@ -0,0 +1,69 @@ +NAME + gcloud compute migration machine-image-imports describe - describe an Image + Import + +SYNOPSIS + gcloud compute migration machine-image-imports describe + (IMAGE_IMPORT_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute migration machine-image-imports describe describes an Image + Import resource with a nested Image Import Job. The Image Import Job + resource tracks the image import progress. To use this command, you must + enable VM Migration API in your project. + +EXAMPLES + To describe my-image-import resource in us-central1 in the default project, + run: $ gcloud compute migration machine-image-imports describe \ + my-image-import --location=us-central1 + +POSITIONAL ARGUMENTS + Image import resource - The Image Import you want to describe. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument image_import_name on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + IMAGE_IMPORT_NAME + ID of the image_import or fully qualified identifier for the + image_import. + + To set the image_import_name attribute: + ▸ provide the argument image_import_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Resource location. + + To set the location attribute: + ▸ provide the argument image_import_name on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This variant is also available: + + $ gcloud alpha compute migration machine-image-imports describe + diff --git a/gcloud/compute/migration/machine-image-imports/help b/gcloud/compute/migration/machine-image-imports/help new file mode 100644 index 000000000..4ed660201 --- /dev/null +++ b/gcloud/compute/migration/machine-image-imports/help @@ -0,0 +1,64 @@ +NAME + gcloud compute migration machine-image-imports - imports machine images to + Google Compute Engine from Google Cloud Storage + +SYNOPSIS + gcloud compute migration machine-image-imports COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud migration vms machine-image-imports provides a more robust and + better supported method for importing machine images to Google Compute + Engine. Other image-related operations (for example, list) can be done + using gcloud compute images, as usual. + + The commands use VM Migration API which supports importing of a machine + image from a Google Cloud Storage file (gs://...) to a target project. VM + Migration API must be enabled in your project. + + gcloud migration vms machine-image-imports create creates a machine Image + Import resource with a nested Image Import Job resource. The Image Import + Job resource tracks the machine image import progress. After the Image + Import Job completes, successfully or otherwise, there's no further use for + the Image Import resource. + + The machine image is imported to a Google Cloud Project, desginated by the + Target Project resource. To get a list of Target Projects, run the gcloud + alpha migration vms target-projects list command. Use the Google Cloud + console to add target project resources. For information on adding target + projects, see + https://cloud.google.com/migrate/virtual-machines/docs/5.0/how-to/target-project. + + A project can support up to a certain number of Image Import resources per + project. Hence it's recommended to delete an Image Import resource after + the Image Import Job is complete to avoid reaching the Image Import + resources limit. Deletion of Image Import resource does not affect the + imported machine image. For more information about the image import + resource, see + https://cloud.google.com/migrate/virtual-machines/docs/5.0/migrate/image_import. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + import machine images to Google Compute Engine. + + delete + delete an Image Import resource. + + describe + describe an Image Import. + + list + list Image Imports. + +NOTES + This variant is also available: + + $ gcloud alpha compute migration machine-image-imports + diff --git a/gcloud/compute/migration/machine-image-imports/list b/gcloud/compute/migration/machine-image-imports/list new file mode 100644 index 000000000..9502e3a8f --- /dev/null +++ b/gcloud/compute/migration/machine-image-imports/list @@ -0,0 +1,89 @@ +NAME + gcloud compute migration machine-image-imports list - list Image Imports + +SYNOPSIS + gcloud compute migration machine-image-imports list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute migration machine-image-imports list prints a detailed list + of Image Import resources. To use this command, you must enable VM + Migration API in your project. + +EXAMPLES + To list the Image Import resources in us-central1 in the default project, + run: $ gcloud compute migration machine-image-imports list \ + --location=us-central1 + +FLAGS + Location resource - The compute/region of the Image Import. To get a list + of the available regions, run gcloud compute regions list command. If not + specified, the value of the [compute/zone] property in the current gcloud + configuration is used. This represents a Cloud resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property compute/region with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property compute/region. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This variant is also available: + + $ gcloud alpha compute migration machine-image-imports list + diff --git a/gcloud/compute/migration/target-projects/help b/gcloud/compute/migration/target-projects/help new file mode 100644 index 000000000..959cea87f --- /dev/null +++ b/gcloud/compute/migration/target-projects/help @@ -0,0 +1,29 @@ +NAME + gcloud compute migration target-projects - manage Target Projects + +SYNOPSIS + gcloud compute migration target-projects COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + target-projects sub-group is used to manage Target Project resources of the + Migrate to Virtual Machines service. Target projects are defined for each + customer project in the global location. A Target Project could be used as + the target project of various migration commands. VM Migration API must be + enabled in your project. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + list + list Target Projects. + +NOTES + This variant is also available: + + $ gcloud alpha compute migration target-projects + diff --git a/gcloud/compute/migration/target-projects/list b/gcloud/compute/migration/target-projects/list new file mode 100644 index 000000000..80b3f1711 --- /dev/null +++ b/gcloud/compute/migration/target-projects/list @@ -0,0 +1,68 @@ +NAME + gcloud compute migration target-projects list - list Target Projects + +SYNOPSIS + gcloud compute migration target-projects list [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute migration target-projects list lists Target Project + resources, which are required for setting the target project for migration. + Target projects are defined for each customer project in the global + location. To use this command, you must enable VM Migration API in your + project. + +EXAMPLES + To list the Target Project resources in the global location in the default + project, run: $ gcloud compute migration target-projects list + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the vmmigration/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/migrate/virtual-machines + +NOTES + This variant is also available: + + $ gcloud alpha compute migration target-projects list + diff --git a/gcloud/container/clusters/create b/gcloud/container/clusters/create index 3c9ea752b..6e67aeb32 100644 --- a/gcloud/container/clusters/create +++ b/gcloud/container/clusters/create @@ -235,8 +235,8 @@ FLAGS ADDON must be one of: HttpLoadBalancing, HorizontalPodAutoscaling, KubernetesDashboard, NetworkPolicy, NodeLocalDNS, ConfigConnector, GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, BackupRestore, - GcsFuseCsiDriver, ParallelstoreCsiDriver, LustreCsiDriver, RayOperator, - CloudRun. + GcsFuseCsiDriver, ParallelstoreCsiDriver, HighScaleCheckpointing, + LustreCsiDriver, RayOperator, CloudRun. --alpha-cluster-feature-gates=[FEATURE=true|false,...] Selectively enable or disable Kubernetes alpha and beta @@ -1344,46 +1344,61 @@ FLAGS List of supported kubelet configs in 'kubeletConfig'. - KEY VALUE - cpuManagerPolicy either 'static' or 'none' - cpuCFSQuota true or false (enabled by - default) - cpuCFSQuotaPeriod interval (e.g., '100ms') - memoryManager specify memory manager policy - topologyManager specify topology manager policy - and scope - podPidsLimit integer (The value must be - greater than or equal to 1024 and - less than 4194304.) - containerLogMaxSize positive number plus unit suffix - (e.g., '100Mi', '0.2Gi'. The - value must be between 10Mi and - 500Mi.) - containerLogMaxFiles integer (The value must be - between [2, 10].) - imageGcLowThresholdPercent integer (The value must be - between [10, 85], and lower than - imageGcHighThresholdPercent.) - imageGcHighThresholdPercent integer (The value must be - between [10, 85], and greater - than imageGcLowThresholdPercent.) - imageMinimumGcAge interval (e.g., '100s', '1m'. The - value must be less than '2m'.) - imageMaximumGcAge interval (e.g., '100s', '1m'. The - value must be greater than - imageMinimumGcAge.) - allowedUnsafeSysctls list of sysctls (Allowlisted - groups: 'kernel.shm*', - 'kernel.msg*', 'kernel.sem', - 'fs.mqueue.*', and 'net.*', and - sysctls under the groups.) - singleProcessOomKill true or false - maxParallelImagePulls integer (The value must be - between [2, 5].) + KEY VALUE + cpuManagerPolicy either 'static' or 'none' + cpuCFSQuota true or false (enabled by + default) + cpuCFSQuotaPeriod interval (e.g., '100ms') + memoryManager specify memory manager policy + topologyManager specify topology manager policy + and scope + podPidsLimit integer (The value must be + greater than or equal to 1024 + and less than 4194304.) + containerLogMaxSize positive number plus unit suffix + (e.g., '100Mi', '0.2Gi'. The + value must be between 10Mi and + 500Mi.) + containerLogMaxFiles integer (The value must be + between [2, 10].) + imageGcLowThresholdPercent integer (The value must be + between [10, 85], and lower than + imageGcHighThresholdPercent.) + imageGcHighThresholdPercent integer (The value must be + between [10, 85], and greater + than + imageGcLowThresholdPercent.) + imageMinimumGcAge interval (e.g., '100s', '1m'. + The value must be less than + '2m'.) + imageMaximumGcAge interval (e.g., '100s', '1m'. + The value must be greater than + imageMinimumGcAge.) + evictionSoft specify eviction soft thresholds + evictionSoftGracePeriod specify eviction soft grace + period + evictionMinimumReclaim specify eviction minimum reclaim + thresholds + evictionMaxPodGracePeriodSeconds integer (Max grace period for + pod termination during eviction, + in seconds. The value must be + between [0, 300].) + allowedUnsafeSysctls list of sysctls (Allowlisted + groups: 'kernel.shm*', + 'kernel.msg*', 'kernel.sem', + 'fs.mqueue.*', and 'net.*', and + sysctls under the groups.) + singleProcessOomKill true or false + maxParallelImagePulls integer (The value must be + between [2, 5].) + + List of supported keys in memoryManager in 'kubeletConfig'. KEY VALUE policy either 'Static' or 'None' + List of supported keys in topologyManager in 'kubeletConfig'. + KEY VALUE policy either 'none' or 'best-effort' or @@ -1392,6 +1407,89 @@ FLAGS scope either 'pod' or 'container' + List of supported keys in evictionSoft in 'kubeletConfig'. + + KEY VALUE + memoryAvailable quantity (e.g., '100Mi', '1Gi'. Represents + the amount of memory available before soft + eviction. The value must be at least 100Mi + and less than 50% of the node's memory.) + nodefsAvailable percentage (e.g., '20%'. Represents the + nodefs available before soft eviction. The + value must be between 10% and 50%, + inclusive.) + nodefsInodesFree percentage (e.g., '20%'. Represents the + nodefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + imagefsAvailable percentage (e.g., '20%'. Represents the + imagefs available before soft eviction. The + value must be between 15% and 50%, + inclusive.) + imagefsInodesFree percentage (e.g., '20%'. Represents the + imagefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + pidAvailable percentage (e.g., '20%'. Represents the pid + available before soft eviction. The value + must be between 10% and 50%, inclusive.) + + List of supported keys in evictionSoftGracePeriod in 'kubeletConfig'. + + KEY VALUE + memoryAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + pidAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + + List of supported keys in evictionMinimumReclaim in 'kubeletConfig'. + + KEY VALUE + memoryAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for memory + available. The value must be positive and + no more than 10%.) + nodefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + available. The value must be positive and + no more than 10%.) + nodefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs inodes + free. The value must be positive and no + more than 10%.) + imagefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + available. The value must be positive and + no more than 10%.) + imagefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + inodes free. The value must be positive and + no more than 10%.) + pidAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for pid + available. The value must be positive and + no more than 10%.) + List of supported sysctls in 'linuxConfig'. KEY VALUE @@ -1670,7 +1768,7 @@ FLAGS --boot-disk-provisioned-throughput=BOOT_DISK_PROVISIONED_THROUGHPUT Configure the Provisioned Throughput for the node pool boot disks. - Only valid for hyperdisk-throughput boot disks. + Only valid for hyperdisk-balanced boot disks. ClusterDNS diff --git a/gcloud/container/fleet/cloudrun/disable b/gcloud/container/fleet/cloudrun/disable index ec4d81c0b..506f038d2 100644 --- a/gcloud/container/fleet/cloudrun/disable +++ b/gcloud/container/fleet/cloudrun/disable @@ -14,9 +14,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/fleet/dataplane-v2-encryption/disable b/gcloud/container/fleet/dataplane-v2-encryption/disable index 73f38aaae..6d59512ca 100644 --- a/gcloud/container/fleet/dataplane-v2-encryption/disable +++ b/gcloud/container/fleet/dataplane-v2-encryption/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/fleet/fleetobservability/disable b/gcloud/container/fleet/fleetobservability/disable index 3d3c85a1a..8c697bb2f 100644 --- a/gcloud/container/fleet/fleetobservability/disable +++ b/gcloud/container/fleet/fleetobservability/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/fleet/identity-service/disable b/gcloud/container/fleet/identity-service/disable index 11d635bd2..f2d10625e 100644 --- a/gcloud/container/fleet/identity-service/disable +++ b/gcloud/container/fleet/identity-service/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/fleet/ingress/disable b/gcloud/container/fleet/ingress/disable index 8cf9c674f..3e9d9495c 100644 --- a/gcloud/container/fleet/ingress/disable +++ b/gcloud/container/fleet/ingress/disable @@ -15,9 +15,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/fleet/multi-cluster-services/disable b/gcloud/container/fleet/multi-cluster-services/disable index 8af22598b..612fd085f 100644 --- a/gcloud/container/fleet/multi-cluster-services/disable +++ b/gcloud/container/fleet/multi-cluster-services/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/hub/cloudrun/disable b/gcloud/container/hub/cloudrun/disable index ecb80887d..9d69c54a8 100644 --- a/gcloud/container/hub/cloudrun/disable +++ b/gcloud/container/hub/cloudrun/disable @@ -14,9 +14,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/hub/dataplane-v2-encryption/disable b/gcloud/container/hub/dataplane-v2-encryption/disable index 72b48343a..b2cb8762d 100644 --- a/gcloud/container/hub/dataplane-v2-encryption/disable +++ b/gcloud/container/hub/dataplane-v2-encryption/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/hub/fleetobservability/disable b/gcloud/container/hub/fleetobservability/disable index f85e319b8..4677e9cb3 100644 --- a/gcloud/container/hub/fleetobservability/disable +++ b/gcloud/container/hub/fleetobservability/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/hub/identity-service/disable b/gcloud/container/hub/identity-service/disable index e5b90141e..66e760b44 100644 --- a/gcloud/container/hub/identity-service/disable +++ b/gcloud/container/hub/identity-service/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/hub/ingress/disable b/gcloud/container/hub/ingress/disable index 31f9c0227..104300aec 100644 --- a/gcloud/container/hub/ingress/disable +++ b/gcloud/container/hub/ingress/disable @@ -15,9 +15,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/hub/multi-cluster-services/disable b/gcloud/container/hub/multi-cluster-services/disable index ed958b655..e6801cf57 100644 --- a/gcloud/container/hub/multi-cluster-services/disable +++ b/gcloud/container/hub/multi-cluster-services/disable @@ -16,9 +16,9 @@ EXAMPLES FLAGS --force - Bypasses any prompts for confirmation. When disabling the entire - feature, forces disable even if the feature is in use. Force - disablement of the entire feature may result in unexpected behavior. + Force disablement. Bypasses any prompts for confirmation. When + disabling the entire feature, proceeds even if the feature is in use. + Might result in unexpected behavior. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/container/node-pools/create b/gcloud/container/node-pools/create index f293904e2..4df2c84e8 100644 --- a/gcloud/container/node-pools/create +++ b/gcloud/container/node-pools/create @@ -195,7 +195,7 @@ FLAGS --boot-disk-provisioned-throughput=BOOT_DISK_PROVISIONED_THROUGHPUT Configure the Provisioned Throughput for the node pool boot disks. Only - valid for hyperdisk-throughput boot disks. + valid for hyperdisk-balanced boot disks. --cluster=CLUSTER The cluster to add the node pool to. Overrides the default @@ -768,46 +768,61 @@ FLAGS List of supported kubelet configs in 'kubeletConfig'. - KEY VALUE - cpuManagerPolicy either 'static' or 'none' - cpuCFSQuota true or false (enabled by - default) - cpuCFSQuotaPeriod interval (e.g., '100ms') - memoryManager specify memory manager policy - topologyManager specify topology manager policy - and scope - podPidsLimit integer (The value must be - greater than or equal to 1024 and - less than 4194304.) - containerLogMaxSize positive number plus unit suffix - (e.g., '100Mi', '0.2Gi'. The - value must be between 10Mi and - 500Mi.) - containerLogMaxFiles integer (The value must be - between [2, 10].) - imageGcLowThresholdPercent integer (The value must be - between [10, 85], and lower than - imageGcHighThresholdPercent.) - imageGcHighThresholdPercent integer (The value must be - between [10, 85], and greater - than imageGcLowThresholdPercent.) - imageMinimumGcAge interval (e.g., '100s', '1m'. The - value must be less than '2m'.) - imageMaximumGcAge interval (e.g., '100s', '1m'. The - value must be greater than - imageMinimumGcAge.) - allowedUnsafeSysctls list of sysctls (Allowlisted - groups: 'kernel.shm*', - 'kernel.msg*', 'kernel.sem', - 'fs.mqueue.*', and 'net.*', and - sysctls under the groups.) - singleProcessOomKill true or false - maxParallelImagePulls integer (The value must be - between [2, 5].) + KEY VALUE + cpuManagerPolicy either 'static' or 'none' + cpuCFSQuota true or false (enabled by + default) + cpuCFSQuotaPeriod interval (e.g., '100ms') + memoryManager specify memory manager policy + topologyManager specify topology manager policy + and scope + podPidsLimit integer (The value must be + greater than or equal to 1024 + and less than 4194304.) + containerLogMaxSize positive number plus unit suffix + (e.g., '100Mi', '0.2Gi'. The + value must be between 10Mi and + 500Mi.) + containerLogMaxFiles integer (The value must be + between [2, 10].) + imageGcLowThresholdPercent integer (The value must be + between [10, 85], and lower than + imageGcHighThresholdPercent.) + imageGcHighThresholdPercent integer (The value must be + between [10, 85], and greater + than + imageGcLowThresholdPercent.) + imageMinimumGcAge interval (e.g., '100s', '1m'. + The value must be less than + '2m'.) + imageMaximumGcAge interval (e.g., '100s', '1m'. + The value must be greater than + imageMinimumGcAge.) + evictionSoft specify eviction soft thresholds + evictionSoftGracePeriod specify eviction soft grace + period + evictionMinimumReclaim specify eviction minimum reclaim + thresholds + evictionMaxPodGracePeriodSeconds integer (Max grace period for + pod termination during eviction, + in seconds. The value must be + between [0, 300].) + allowedUnsafeSysctls list of sysctls (Allowlisted + groups: 'kernel.shm*', + 'kernel.msg*', 'kernel.sem', + 'fs.mqueue.*', and 'net.*', and + sysctls under the groups.) + singleProcessOomKill true or false + maxParallelImagePulls integer (The value must be + between [2, 5].) + + List of supported keys in memoryManager in 'kubeletConfig'. KEY VALUE policy either 'Static' or 'None' + List of supported keys in topologyManager in 'kubeletConfig'. + KEY VALUE policy either 'none' or 'best-effort' or @@ -816,6 +831,89 @@ FLAGS scope either 'pod' or 'container' + List of supported keys in evictionSoft in 'kubeletConfig'. + + KEY VALUE + memoryAvailable quantity (e.g., '100Mi', '1Gi'. Represents + the amount of memory available before soft + eviction. The value must be at least 100Mi + and less than 50% of the node's memory.) + nodefsAvailable percentage (e.g., '20%'. Represents the + nodefs available before soft eviction. The + value must be between 10% and 50%, + inclusive.) + nodefsInodesFree percentage (e.g., '20%'. Represents the + nodefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + imagefsAvailable percentage (e.g., '20%'. Represents the + imagefs available before soft eviction. The + value must be between 15% and 50%, + inclusive.) + imagefsInodesFree percentage (e.g., '20%'. Represents the + imagefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + pidAvailable percentage (e.g., '20%'. Represents the pid + available before soft eviction. The value + must be between 10% and 50%, inclusive.) + + List of supported keys in evictionSoftGracePeriod in 'kubeletConfig'. + + KEY VALUE + memoryAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + nodefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + imagefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + pidAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this resource. + The value must be positive and no more than + '5m'.) + + List of supported keys in evictionMinimumReclaim in 'kubeletConfig'. + + KEY VALUE + memoryAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for memory + available. The value must be positive and + no more than 10%.) + nodefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + available. The value must be positive and + no more than 10%.) + nodefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs inodes + free. The value must be positive and no + more than 10%.) + imagefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + available. The value must be positive and + no more than 10%.) + imagefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + inodes free. The value must be positive and + no more than 10%.) + pidAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for pid + available. The value must be positive and + no more than 10%.) + List of supported sysctls in 'linuxConfig'. KEY VALUE diff --git a/gcloud/container/node-pools/update b/gcloud/container/node-pools/update index 5db874ee9..37f26da29 100644 --- a/gcloud/container/node-pools/update +++ b/gcloud/container/node-pools/update @@ -311,50 +311,65 @@ REQUIRED FLAGS List of supported kubelet configs in 'kubeletConfig'. - KEY VALUE - cpuManagerPolicy either 'static' or 'none' - cpuCFSQuota true or false (enabled by - default) - cpuCFSQuotaPeriod interval (e.g., '100ms') - memoryManager specify memory manager policy - topologyManager specify topology manager policy - and scope - podPidsLimit integer (The value must be - greater than or equal to 1024 - and less than 4194304.) - containerLogMaxSize positive number plus unit - suffix (e.g., '100Mi', '0.2Gi'. - The value must be between 10Mi - and 500Mi.) - containerLogMaxFiles integer (The value must be - between [2, 10].) - imageGcLowThresholdPercent integer (The value must be - between [10, 85], and lower - than - imageGcHighThresholdPercent.) - imageGcHighThresholdPercent integer (The value must be - between [10, 85], and greater - than - imageGcLowThresholdPercent.) - imageMinimumGcAge interval (e.g., '100s', '1m'. - The value must be less than - '2m'.) - imageMaximumGcAge interval (e.g., '100s', '1m'. - The value must be greater than - imageMinimumGcAge.) - allowedUnsafeSysctls list of sysctls (Allowlisted - groups: 'kernel.shm*', - 'kernel.msg*', 'kernel.sem', - 'fs.mqueue.*', and 'net.*', and - sysctls under the groups.) - singleProcessOomKill true or false - maxParallelImagePulls integer (The value must be - between [2, 5].) + KEY VALUE + cpuManagerPolicy either 'static' or 'none' + cpuCFSQuota true or false (enabled by + default) + cpuCFSQuotaPeriod interval (e.g., '100ms') + memoryManager specify memory manager policy + topologyManager specify topology manager + policy and scope + podPidsLimit integer (The value must be + greater than or equal to 1024 + and less than 4194304.) + containerLogMaxSize positive number plus unit + suffix (e.g., '100Mi', + '0.2Gi'. The value must be + between 10Mi and 500Mi.) + containerLogMaxFiles integer (The value must be + between [2, 10].) + imageGcLowThresholdPercent integer (The value must be + between [10, 85], and lower + than + imageGcHighThresholdPercent.) + imageGcHighThresholdPercent integer (The value must be + between [10, 85], and greater + than + imageGcLowThresholdPercent.) + imageMinimumGcAge interval (e.g., '100s', '1m'. + The value must be less than + '2m'.) + imageMaximumGcAge interval (e.g., '100s', '1m'. + The value must be greater than + imageMinimumGcAge.) + evictionSoft specify eviction soft + thresholds + evictionSoftGracePeriod specify eviction soft grace + period + evictionMinimumReclaim specify eviction minimum + reclaim thresholds + evictionMaxPodGracePeriodSeconds integer (Max grace period for + pod termination during + eviction, in seconds. The + value must be between [0, + 300].) + allowedUnsafeSysctls list of sysctls (Allowlisted + groups: 'kernel.shm*', + 'kernel.msg*', 'kernel.sem', + 'fs.mqueue.*', and 'net.*', + and sysctls under the groups.) + singleProcessOomKill true or false + maxParallelImagePulls integer (The value must be + between [2, 5].) + + List of supported keys in memoryManager in 'kubeletConfig'. KEY VALUE policy either 'Static' or 'None' + List of supported keys in topologyManager in 'kubeletConfig'. + KEY VALUE policy either 'none' or 'best-effort' or @@ -363,6 +378,91 @@ REQUIRED FLAGS scope either 'pod' or 'container' + List of supported keys in evictionSoft in 'kubeletConfig'. + + KEY VALUE + memoryAvailable quantity (e.g., '100Mi', '1Gi'. + Represents the amount of memory available + before soft eviction. The value must be + at least 100Mi and less than 50% of the + node's memory.) + nodefsAvailable percentage (e.g., '20%'. Represents the + nodefs available before soft eviction. + The value must be between 10% and 50%, + inclusive.) + nodefsInodesFree percentage (e.g., '20%'. Represents the + nodefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + imagefsAvailable percentage (e.g., '20%'. Represents the + imagefs available before soft eviction. + The value must be between 15% and 50%, + inclusive.) + imagefsInodesFree percentage (e.g., '20%'. Represents the + imagefs inodes free before soft eviction. + The value must be between 5% and 50%, + inclusive.) + pidAvailable percentage (e.g., '20%'. Represents the + pid available before soft eviction. The + value must be between 10% and 50%, + inclusive.) + + List of supported keys in evictionSoftGracePeriod in 'kubeletConfig'. + + KEY VALUE + memoryAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + nodefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + nodefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + imagefsAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + imagefsInodesFree duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + pidAvailable duration (e.g., '30s', '1m'. The grace + period for soft eviction for this + resource. The value must be positive and + no more than '5m'.) + + List of supported keys in evictionMinimumReclaim in 'kubeletConfig'. + + KEY VALUE + memoryAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for memory + available. The value must be positive and + no more than 10%.) + nodefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + available. The value must be positive and + no more than 10%.) + nodefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for nodefs + inodes free. The value must be positive + and no more than 10%.) + imagefsAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + available. The value must be positive and + no more than 10%.) + imagefsInodesFree percentage (e.g., '5%'. Represents the + minimum reclaim threshold for imagefs + inodes free. The value must be positive + and no more than 10%.) + pidAvailable percentage (e.g., '5%'. Represents the + minimum reclaim threshold for pid + available. The value must be positive and + no more than 10%.) + List of supported sysctls in 'linuxConfig'. KEY VALUE @@ -574,7 +674,7 @@ REQUIRED FLAGS --boot-disk-provisioned-throughput=BOOT_DISK_PROVISIONED_THROUGHPUT Configure the Provisioned Throughput for the node pool boot disks. - Only valid for hyperdisk-throughput boot disks. + Only valid for hyperdisk-balanced boot disks. --disk-size=DISK_SIZE Size for node VM boot disks in GB. Defaults to 100GB. diff --git a/gcloud/infra-manager/previews/create b/gcloud/infra-manager/previews/create index e929d19ac..09c78b9d6 100644 --- a/gcloud/infra-manager/previews/create +++ b/gcloud/infra-manager/previews/create @@ -7,7 +7,9 @@ SYNOPSIS [--artifacts-gcs-bucket=ARTIFACTS_GCS_BUCKET] [--async] [--deployment=DEPLOYMENT] [--labels=[KEY=VALUE,...]] [--location=LOCATION] [--preview-mode=PREVIEW_MODE] - [--service-account=SERVICE_ACCOUNT] [--worker-pool=WORKER_POOL] + [--service-account=SERVICE_ACCOUNT] + [--tf-version-constraint=TF_VERSION_CONSTRAINT] + [--worker-pool=WORKER_POOL] [--gcs-source=GCS_SOURCE | --git-source-directory=GIT_SOURCE_DIRECTORY --git-source-ref=GIT_SOURCE_REF --git-source-repo=GIT_SOURCE_REPO | --ignore-file=IGNORE_FILE @@ -104,6 +106,9 @@ FLAGS resources. Format: projects/{projectID}/serviceAccounts/{serviceAccount} + --tf-version-constraint=TF_VERSION_CONSTRAINT + User-specified Terraform version constraint, for example "=1.3.10". + --worker-pool=WORKER_POOL User-specified Worker Pool resource in which the Cloud Build job will execute. Format: diff --git a/gcloud/managed-kafka/clusters/create b/gcloud/managed-kafka/clusters/create index 18f52dba3..e7066bec1 100644 --- a/gcloud/managed-kafka/clusters/create +++ b/gcloud/managed-kafka/clusters/create @@ -6,7 +6,9 @@ SYNOPSIS gcloud managed-kafka clusters create (CLUSTER : --location=LOCATION) --cpu=CPU --memory=MEMORY --subnets=[SUBNETS,...] [--async] [--no-auto-rebalance] [--encryption-key=ENCRYPTION_KEY] - [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] + [--labels=[KEY=VALUE,...]] [--mtls-ca-pools=[MTLS_CA_POOLS,...]] + [--ssl-principal-mapping-rules=SSL_PRINCIPAL_MAPPING_RULES] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a Managed Service for Apache Kafka cluster. @@ -96,6 +98,29 @@ OPTIONAL FLAGS characters, and numbers. Values must contain only hyphens (-), underscores (_), lowercase characters, and numbers. + --mtls-ca-pools=[MTLS_CA_POOLS,...] + A comma-separated list of CA pools from the Google Cloud Certificate + Authority Service. The root certificates of these CA pools will be + installed in the truststore of each broker in the cluster for use with + mTLS. A maximum of 10 CA pools can be specified. CA pools can be in a + different project and region than the cluster. This command overwrites + the entire set of pools currently configured on the cluster. If you + want to add a new pool to an existing configuration, you must provide + the full list of both the old and new CA pools in the command. Each CA + pool must be in the format + projects/PROJECT_ID/locations/LOCATION/caPools/CA_POOL. Clear the CA + pools using the --clear-mtls-ca-pools flag. + + --ssl-principal-mapping-rules=SSL_PRINCIPAL_MAPPING_RULES + The rules for mapping mTLS certificate Distinguished Names (DNs) to + shortened principal names for Kafka ACLs. This flag corresponds exactly + to the ssl.principal.mapping.rules broker config and matches the format + and syntax defined in the Apache Kafka documentation. Setting or + modifying this field will trigger a rolling restart of the Kafka + brokers to apply the change. An empty string means that the default + Kafka behavior is used. Example: + "RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT" + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/managed-kafka/clusters/update b/gcloud/managed-kafka/clusters/update index 1acd9cea4..280f3f5e0 100644 --- a/gcloud/managed-kafka/clusters/update +++ b/gcloud/managed-kafka/clusters/update @@ -4,9 +4,11 @@ NAME SYNOPSIS gcloud managed-kafka clusters update (CLUSTER : --location=LOCATION) - (--auto-rebalance --cpu=CPU - --labels=[KEY=VALUE,...] --memory=MEMORY --subnets=[SUBNETS,...]) - [--async] [GCLOUD_WIDE_FLAG ...] + (--auto-rebalance --cpu=CPU --labels=[KEY=VALUE,...] --memory=MEMORY + --ssl-principal-mapping-rules=SSL_PRINCIPAL_MAPPING_RULES + --subnets=[SUBNETS,...] --clear-mtls-ca-pools + | --mtls-ca-pools=[MTLS_CA_POOLS,...]) [--async] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Update a Managed Service for Apache Kafka cluster. @@ -74,6 +76,16 @@ REQUIRED FLAGS The memory to provision for the cluster in bytes. The value must be between 1 GiB and 8 GiB per vCPU. Ex. 1024Mi, 4Gi. + --ssl-principal-mapping-rules=SSL_PRINCIPAL_MAPPING_RULES + The rules for mapping mTLS certificate Distinguished Names (DNs) to + shortened principal names for Kafka ACLs. This flag corresponds + exactly to the ssl.principal.mapping.rules broker config and matches + the format and syntax defined in the Apache Kafka documentation. + Setting or modifying this field will trigger a rolling restart of the + Kafka brokers to apply the change. An empty string means that the + default Kafka behavior is used. Example: + "RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT" + --subnets=[SUBNETS,...] A comma-separated list of VPC subnets from which the cluster is accessible. Both broker and bootstrap server IP addresses and DNS @@ -84,6 +96,26 @@ REQUIRED FLAGS separate multiple subnets. The name of the subnet must be in the format projects/PROJECT_ID/regions/REGION/subnetworks/SUBNET. + At most one of these can be specified: + + --clear-mtls-ca-pools + Remove all the CA pools from the cluster. This will remove all root + certificates from the truststore of each broker in the cluster. + + --mtls-ca-pools=[MTLS_CA_POOLS,...] + A comma-separated list of CA pools from the Google Cloud + Certificate Authority Service. The root certificates of these CA + pools will be installed in the truststore of each broker in the + cluster for use with mTLS. A maximum of 10 CA pools can be + specified. CA pools can be in a different project and region than + the cluster. This command overwrites the entire set of pools + currently configured on the cluster. If you want to add a new pool + to an existing configuration, you must provide the full list of + both the old and new CA pools in the command. Each CA pool must be + in the format + projects/PROJECT_ID/locations/LOCATION/caPools/CA_POOL. Clear the + CA pools using the --clear-mtls-ca-pools flag. + OPTIONAL FLAGS --async Return immediately, without waiting for the operation in progress to diff --git a/gcloud/network-security/org-address-groups/create b/gcloud/network-security/org-address-groups/create index 0ec604c75..b82bce5ea 100644 --- a/gcloud/network-security/org-address-groups/create +++ b/gcloud/network-security/org-address-groups/create @@ -5,7 +5,8 @@ SYNOPSIS gcloud network-security org-address-groups create (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) --capacity=CAPACITY --type=TYPE [--async] [--description=DESCRIPTION] - [--items=[ITEMS,...]] [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] + [--items=[ITEMS,...]] [--labels=[KEY=VALUE,...]] + [--purpose=[PURPOSE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a new address group with the given name. @@ -72,6 +73,10 @@ OPTIONAL FLAGS --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. + --purpose=[PURPOSE,...] + List of Address Group purposes. PURPOSE must be one of: cloud-armor, + default. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/network-security/org-address-groups/update b/gcloud/network-security/org-address-groups/update index 38586c3b4..ccd750d60 100644 --- a/gcloud/network-security/org-address-groups/update +++ b/gcloud/network-security/org-address-groups/update @@ -5,7 +5,7 @@ SYNOPSIS gcloud network-security org-address-groups update (ADDRESS_GROUP : --location=LOCATION --organization=ORGANIZATION) [--async] [--description=DESCRIPTION] [--items=[ITEMS,...]] - [--update-labels=[KEY=VALUE,...]] + [--purpose=[PURPOSE,...]] [--update-labels=[KEY=VALUE,...]] [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -62,6 +62,10 @@ FLAGS --items=[ITEMS,...] Items of the address group. + --purpose=[PURPOSE,...] + List of Address Group purposes. PURPOSE must be one of: cloud-armor, + default. + --update-labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to update. If a label exists, its value is modified. Otherwise, a new label is created. diff --git a/gcloud/run/deploy b/gcloud/run/deploy index 9f2fa2b0a..64bf3e9eb 100644 --- a/gcloud/run/deploy +++ b/gcloud/run/deploy @@ -13,10 +13,10 @@ SYNOPSIS [--[no-]invoker-iam-check] [--max-instances=MAX_INSTANCES] [--min=MIN] [--min-instances=MIN_INSTANCES] [--region=REGION] [--remove-containers=[CONTAINER,...]] - [--revision-suffix=REVISION_SUFFIX] [--service-account=SERVICE_ACCOUNT] - [--[no-]session-affinity] [--tag=TAG] [--timeout=TIMEOUT] - [--no-traffic] [--vpc-connector=VPC_CONNECTOR] - [--vpc-egress=VPC_EGRESS] + [--revision-suffix=REVISION_SUFFIX] [--scaling=SCALING] + [--service-account=SERVICE_ACCOUNT] [--[no-]session-affinity] + [--tag=TAG] [--timeout=TIMEOUT] [--no-traffic] + [--vpc-connector=VPC_CONNECTOR] [--vpc-egress=VPC_EGRESS] [--add-cloudsql-instances=[CLOUDSQL-INSTANCES,...] | --clear-cloudsql-instances | --remove-cloudsql-instances=[CLOUDSQL-INSTANCES,...] @@ -238,6 +238,11 @@ FLAGS a revision named 'helloworld-v1'. Set empty string to clear the suffix and resume server-assigned naming. + --scaling=SCALING + The scaling mode to use for this resource. Flag value could be either + "auto" for automatic scaling, or a positive integer to configure manual + scaling with the given integer as a fixed instance count. + --service-account=SERVICE_ACCOUNT the email address of an IAM service account associated with the revision of the service. The service account represents the identity of diff --git a/gcloud/run/services/update b/gcloud/run/services/update index 33da2e2a8..52be41580 100644 --- a/gcloud/run/services/update +++ b/gcloud/run/services/update @@ -12,10 +12,10 @@ SYNOPSIS [--[no-]invoker-iam-check] [--max-instances=MAX_INSTANCES] [--min=MIN] [--min-instances=MIN_INSTANCES] [--region=REGION] [--remove-containers=[CONTAINER,...]] - [--revision-suffix=REVISION_SUFFIX] [--service-account=SERVICE_ACCOUNT] - [--[no-]session-affinity] [--tag=TAG] [--timeout=TIMEOUT] - [--no-traffic] [--vpc-connector=VPC_CONNECTOR] - [--vpc-egress=VPC_EGRESS] + [--revision-suffix=REVISION_SUFFIX] [--scaling=SCALING] + [--service-account=SERVICE_ACCOUNT] [--[no-]session-affinity] + [--tag=TAG] [--timeout=TIMEOUT] [--no-traffic] + [--vpc-connector=VPC_CONNECTOR] [--vpc-egress=VPC_EGRESS] [--add-cloudsql-instances=[CLOUDSQL-INSTANCES,...] | --clear-cloudsql-instances | --remove-cloudsql-instances=[CLOUDSQL-INSTANCES,...] @@ -204,6 +204,11 @@ FLAGS a revision named 'helloworld-v1'. Set empty string to clear the suffix and resume server-assigned naming. + --scaling=SCALING + The scaling mode to use for this resource. Flag value could be either + "auto" for automatic scaling, or a positive integer to configure manual + scaling with the given integer as a fixed instance count. + --service-account=SERVICE_ACCOUNT the email address of an IAM service account associated with the revision of the service. The service account represents the identity of diff --git a/gcloud/service-extensions/wasm-plugin-versions/create b/gcloud/service-extensions/wasm-plugin-versions/create index f6be08965..6a79fc0d2 100644 --- a/gcloud/service-extensions/wasm-plugin-versions/create +++ b/gcloud/service-extensions/wasm-plugin-versions/create @@ -63,8 +63,8 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --image=IMAGE - URI of the container image containing the plugin's Wasm module, stored - in the Artifact Registry. + URI of the image containing the plugin's Wasm module, stored in the + Artifact Registry. OPTIONAL FLAGS --async @@ -92,8 +92,8 @@ OPTIONAL FLAGS plugin_config_file. --plugin-config-uri=PLUGIN_CONFIG_URI - URI of the container image containing the plugin's configuration, - stored in the Artifact Registry. + URI of the image containing the plugin's configuration, stored in the + Artifact Registry. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account,