imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-18 06:47:12 +00:00
Code Activity

gcloud: Wed Oct 9 09:55:07 UTC 2024

Browse source
This commit is contained in:
Automated 2024-10-09 09:55:07 +00:00
parent 489be55d99
commit 4ffb04ab9e
211 changed files with 7635 additions and 1232 deletions
Download patch file Download diff file Expand all files Collapse all files

12
gcloud/alpha/container/attached/clusters/register
View file

@ -13,7 +13,6 @@ SYNOPSIS
[--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE]
[--description=DESCRIPTION] [--enable-managed-prometheus]
[--logging=COMPONENT,[COMPONENT,...]] [--validate-only]
[--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
[--proxy-secret-name=PROXY_SECRET_NAME
--proxy-secret-namespace=PROXY_SECRET_NAMESPACE]
[GCLOUD_WIDE_FLAG ...]
@ -184,17 +183,6 @@ OPTIONAL FLAGS
--validate-only
Validate the cluster to create, but don't actually perform it.
--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING
Sets the mode of the Kubernetes security posture API's workload
vulnerability scanning. To enable Advanced vulnerability insights mode
explicitly set the flag to
--workload-vulnerability-scanning=enterprise.
To disable in an existing cluster, explicitly set the flag to
--workload-vulnerability-scanning=disabled.
WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, enterprise.
Proxy config
--proxy-secret-name=PROXY_SECRET_NAME

12
gcloud/alpha/container/attached/clusters/update
View file

@ -10,7 +10,6 @@ SYNOPSIS
[--clear-description] [--description=DESCRIPTION]
[--logging=COMPONENT,[COMPONENT,...]]
[--platform-version=PLATFORM_VERSION] [--validate-only]
[--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
[--admin-groups=[GROUP,...] | --clear-admin-groups]
[--admin-users=[USER,...] | --clear-admin-users]
[--disable-managed-prometheus | --enable-managed-prometheus]
@ -102,17 +101,6 @@ FLAGS
--validate-only
Validate the update of the cluster, but don't actually perform it.
--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING
Sets the mode of the Kubernetes security posture API's workload
vulnerability scanning. To enable Advanced vulnerability insights mode
explicitly set the flag to
--workload-vulnerability-scanning=enterprise.
To disable in an existing cluster, explicitly set the flag to
--workload-vulnerability-scanning=disabled.
WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, enterprise.
Admin groups
At most one of these can be specified:

31
gcloud/alpha/container/clusters/create
View file

@ -24,17 +24,19 @@ SYNOPSIS
[--database-encryption-key=DATABASE_ENCRYPTION_KEY]
[--default-max-pods-per-node=DEFAULT_MAX_PODS_PER_NODE]
[--disable-default-snat] [--disable-pod-cidr-overprovision]
[--disk-size=DISK_SIZE] [--disk-type=DISK_TYPE] [--enable-autorepair]
[--no-enable-autoupgrade] [--enable-cilium-clusterwide-network-policy]
[--enable-cloud-logging] [--enable-cloud-monitoring]
[--enable-cloud-run-alpha] [--enable-confidential-nodes]
[--enable-confidential-storage] [--enable-cost-allocation]
[--enable-dataplane-v2] [--enable-fleet] [--enable-fqdn-network-policy]
[--disk-size=DISK_SIZE] [--disk-type=DISK_TYPE]
[--enable-authorized-networks-on-private-endpoint]
[--enable-autorepair] [--no-enable-autoupgrade]
[--enable-cilium-clusterwide-network-policy] [--enable-cloud-logging]
[--enable-cloud-monitoring] [--enable-cloud-run-alpha]
[--enable-confidential-nodes] [--enable-confidential-storage]
[--enable-cost-allocation] [--enable-dataplane-v2]
[--enable-dns-access] [--enable-fleet] [--enable-fqdn-network-policy]
[--enable-gke-oidc] [--enable-google-cloud-access] [--enable-gvnic]
[--enable-identity-service] [--enable-image-streaming]
[--enable-insecure-kubelet-readonly-port]
[--enable-intra-node-visibility] [--enable-ip-alias]
[--enable-kubernetes-alpha]
[--enable-intra-node-visibility] [--enable-ip-access]
[--enable-ip-alias] [--enable-kubernetes-alpha]
[--enable-kubernetes-unstable-apis=API,[API,...]]
[--enable-l4-ilb-subsetting] [--enable-legacy-authorization]
[--enable-logging-monitoring-system-only] [--enable-managed-prometheus]
@ -439,6 +441,10 @@ FLAGS
DISK_TYPE must be one of: pd-standard, pd-ssd, pd-balanced,
hyperdisk-balanced, hyperdisk-extreme, hyperdisk-throughput.
--enable-authorized-networks-on-private-endpoint
Enable enforcement of --master-authorized-networks CIDR ranges for
traffic reaching cluster's control plane via private IP.
--enable-autorepair
Enable node autorepair feature for a cluster's default node pool(s).
@ -519,6 +525,11 @@ FLAGS
Enables the new eBPF dataplane for GKE clusters that is required for
network security, scalability and visibility features.
--enable-dns-access
Enable access to the cluster's control plane over DNS-based endpoint.
DNS-based control plane access is recommended.
--enable-fleet
Set cluster project as the fleet host project. This will register the
cluster to the same project. To register the cluster to a fleet in a
@ -581,6 +592,10 @@ FLAGS
Enabling it on an existing cluster causes the cluster master and the
cluster nodes to restart, which might cause a disruption.
--enable-ip-access
Enable access to the cluster's control plane over private IP and public
IP if --enable-private-endpoint is not enabled.
--enable-ip-alias
Enable use of alias IPs
(https://cloud.google.com/compute/docs/alias-ip/) for Pod IPs. This

18
gcloud/alpha/container/clusters/create-auto
View file

@ -14,9 +14,10 @@ SYNOPSIS
[--containerd-config-from-file=PATH_TO_FILE]
[--create-subnetwork=[KEY=VALUE,...]]
[--database-encryption-key=DATABASE_ENCRYPTION_KEY]
[--enable-authorized-networks-on-private-endpoint]
[--enable-backup-restore] [--enable-cilium-clusterwide-network-policy]
[--enable-fleet] [--enable-google-cloud-access]
[--enable-kubernetes-unstable-apis=API,[API,...]]
[--enable-dns-access] [--enable-fleet] [--enable-google-cloud-access]
[--enable-ip-access] [--enable-kubernetes-unstable-apis=API,[API,...]]
[--enable-master-global-access] [--enable-ray-cluster-logging]
[--enable-ray-cluster-monitoring] [--enable-ray-operator]
[--enable-secret-manager] [--fleet-project=PROJECT_ID_OR_NUMBER]
@ -220,6 +221,10 @@ FLAGS
For more information, see
https://cloud.google.com/kubernetes-engine/docs/how-to/encrypting-secrets.
--enable-authorized-networks-on-private-endpoint
Enable enforcement of --master-authorized-networks CIDR ranges for
traffic reaching cluster's control plane via private IP.
--enable-backup-restore
Enable the Backup for GKE add-on. This add-on is disabled by default.
To learn more, see the Backup for GKE overview:
@ -229,6 +234,11 @@ FLAGS
Enable Cilium Clusterwide Network Policies on the cluster. Disabled by
default.
--enable-dns-access
Enable access to the cluster's control plane over DNS-based endpoint.
DNS-based control plane access is recommended.
--enable-fleet
Set cluster project as the fleet host project. This will register the
cluster to the same project. To register the cluster to a fleet in a
@ -240,6 +250,10 @@ FLAGS
Google Cloud can reach the public control plane endpoint of your
cluster.
--enable-ip-access
Enable access to the cluster's control plane over private IP and public
IP if --enable-private-endpoint is not enabled.
--enable-kubernetes-unstable-apis=API,[API,...]
Enable Kubernetes beta API features on this cluster. Beta APIs are not
expected to be production ready and should be avoided in

6
gcloud/alpha/container/clusters/get-credentials
View file

@ -3,7 +3,8 @@ NAME
running cluster
SYNOPSIS
gcloud alpha container clusters get-credentials NAME [--internal-ip]
gcloud alpha container clusters get-credentials NAME [--dns-endpoint]
[--internal-ip]
[--location=LOCATION | --region=REGION | --zone=ZONE, -z ZONE]
[GCLOUD_WIDE_FLAG ...]
@ -46,6 +47,9 @@ POSITIONAL ARGUMENTS
container/cluster property value for this command invocation.
FLAGS
--dns-endpoint
Whether to use the DNS-based endpoint for the cluster address.
--internal-ip
Whether to use the internal IP address of the cluster endpoint.

58
gcloud/alpha/container/clusters/get-upgrade-info Normal file
View file

@ -0,0 +1,58 @@
NAME
gcloud alpha container clusters get-upgrade-info - get information about
upgrades for existing clusters including auto upgrade status, upgrade
history, upgrade targets, and end of support timelines
SYNOPSIS
gcloud alpha container clusters get-upgrade-info NAME
[--location=LOCATION | --region=REGION | --zone=ZONE, -z ZONE]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Get information about upgrades for existing clusters including auto
upgrade status, upgrade history, upgrade targets, and end of support
timelines.
EXAMPLES
To get upgrade information for an existing cluster, run:
$ gcloud alpha container clusters get-upgrade-info sample-cluster
POSITIONAL ARGUMENTS
NAME
The name of your existing cluster.
FLAGS
At most one of these can be specified:
--location=LOCATION
Compute zone or region (e.g. us-central1-a or us-central1) for the
cluster. Overrides the default compute/region or compute/zone value
for this command invocation. Prefer using this flag over the --region
or --zone flags.
--region=REGION
Compute region (e.g. us-central1) for a regional cluster. Overrides
the default compute/region property value for this command
invocation.
--zone=ZONE, -z ZONE
Compute zone (e.g. us-central1-a) for a zonal cluster. Overrides the
default compute/zone property value for this command invocation.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container clusters get-upgrade-info

5
gcloud/alpha/container/clusters/help
View file

@ -64,6 +64,11 @@ COMMANDS
get-credentials
(ALPHA) Fetch credentials for a running cluster.
get-upgrade-info
(ALPHA) Get information about upgrades for existing clusters including
auto upgrade status, upgrade history, upgrade targets, and end of
support timelines.
list
(ALPHA) List existing clusters for running containers.

120
gcloud/alpha/container/clusters/update
View file

@ -16,16 +16,14 @@ SYNOPSIS
| --[no-]enable-cilium-clusterwide-network-policy
| --enable-cost-allocation | --enable-fleet
| --enable-fqdn-network-policy | --enable-gke-oidc
| --enable-google-cloud-access | --enable-identity-service
| --enable-image-streaming | --enable-insecure-kubelet-readonly-port
| --enable-identity-service | --enable-image-streaming
| --enable-insecure-kubelet-readonly-port
| --enable-intra-node-visibility
| --enable-kubernetes-unstable-apis=API,[API,...]
| --enable-l4-ilb-subsetting | --enable-legacy-authorization
| --enable-logging-monitoring-system-only
| --enable-master-authorized-networks | --enable-master-global-access
| --enable-multi-networking | --enable-network-policy
| --enable-pod-security-policy | --enable-private-endpoint
| --[no-]enable-ray-cluster-logging
| --enable-logging-monitoring-system-only | --enable-multi-networking
| --enable-network-policy | --enable-pod-security-policy
| --enable-private-nodes | --[no-]enable-ray-cluster-logging
| --[no-]enable-ray-cluster-monitoring | --enable-secret-manager
| --enable-service-externalips | --enable-shielded-nodes
| --enable-stackdriver-kubernetes | --enable-vertical-pod-autoscaling
@ -78,6 +76,11 @@ SYNOPSIS
| --disable-dataplane-v2-flow-observability
| --enable-dataplane-v2-flow-observability
--disable-dataplane-v2-metrics | --enable-dataplane-v2-metrics
| --enable-authorized-networks-on-private-endpoint
--enable-dns-access --enable-google-cloud-access --enable-ip-access
--enable-master-global-access --enable-private-endpoint
--enable-master-authorized-networks
--master-authorized-networks=NETWORK,[NETWORK,...]
| [--enable-autoprovisioning
: --autoprovisioning-config-file=PATH_TO_FILE
| --autoprovisioning-image-type=AUTOPROVISIONING_IMAGE_TYPE
@ -103,9 +106,7 @@ SYNOPSIS
| --password=PASSWORD --enable-basic-auth
| --username=USERNAME, -u USERNAME) [--async]
[--cloud-run-config=[load-balancer-type=EXTERNAL,...]]
[--istio-config=[auth=MTLS_PERMISSIVE,...]]
[--master-authorized-networks=NETWORK,[NETWORK,...]]
[--node-pool=NODE_POOL]
[--istio-config=[auth=MTLS_PERMISSIVE,...]] [--node-pool=NODE_POOL]
[--location=LOCATION | --region=REGION | --zone=ZONE, -z ZONE]
[--location-policy=LOCATION_POLICY --max-nodes=MAX_NODES
--min-nodes=MIN_NODES
@ -321,11 +322,6 @@ REQUIRED FLAGS
Thus, flag --enable-gke-oidc is also deprecated. Please use
--enable-identity-service to enable the Identity Service component
--enable-google-cloud-access
When you enable Google Cloud Access, any public IP addresses owned by
Google Cloud can reach the public control plane endpoint of your
cluster.
--enable-identity-service
Enable Identity Service component on the cluster.
@ -382,26 +378,6 @@ REQUIRED FLAGS
and
https://cloud.google.com/kubernetes-engine/docs/how-to/configure-metrics.
--enable-master-authorized-networks
Allow only specified set of CIDR blocks (specified by the
--master-authorized-networks flag) to connect to Kubernetes master
through HTTPS. Besides these blocks, the following have access as
well:
1) The private network the cluster connects to if
`--enable-private-nodes` is specified.
2) Google Compute Engine Public IPs if `--enable-private-nodes` is not
specified.
Use --no-enable-master-authorized-networks to disable. When disabled,
public internet (0.0.0.0/0) is allowed to connect to Kubernetes
master through HTTPS.
--enable-master-global-access
Use with private clusters to allow access to the master's private
endpoint from any Google Cloud region or on-premises environment
regardless of the private cluster's region.
--enable-multi-networking
Enables multi-networking on the cluster. Multi-networking is disabled
by default.
@ -419,9 +395,20 @@ REQUIRED FLAGS
PodSecurityPolicy API objects. For more information, see
https://cloud.google.com/kubernetes-engine/docs/how-to/pod-security-policies.
--enable-private-endpoint
Enables cluster's control plane to be accessible using private IP
address only.
--enable-private-nodes
Standard cluster: Enable private nodes as a default behavior for all
newly created node pools, if --enable-private-nodes is not provided
at node pool creation time.
Modifications to this flag do not affect `--enable-private-nodes` state of the
existing node pools.
Autopilot cluster: Force new and existing workloads, without explicit
cloud.google.com/private-node=true node selector, to run on nodes
with no public IP address.
Modifications to this flag trigger a re-schedule operation on all existng
workloads to run on different node VMs.
--[no-]enable-ray-cluster-logging
Enable automatic log processing sidecar for Ray clusters. Use
@ -1157,6 +1144,57 @@ REQUIRED FLAGS
--enable-dataplane-v2-metrics
Exposes advanced datapath flow metrics on node port.
--enable-authorized-networks-on-private-endpoint
Enable enforcement of --master-authorized-networks CIDR ranges for
traffic reaching cluster's control plane via private IP.
--enable-dns-access
Enable access to the cluster's control plane over DNS-based endpoint.
DNS-based control plane access is recommended.
--enable-google-cloud-access
When you enable Google Cloud Access, any public IP addresses owned by
Google Cloud can reach the public control plane endpoint of your
cluster.
--enable-ip-access
Enable access to the cluster's control plane over private IP and
public IP if --enable-private-endpoint is not enabled.
--enable-master-global-access
Use with private clusters to allow access to the master's private
endpoint from any Google Cloud region or on-premises environment
regardless of the private cluster's region.
--enable-private-endpoint
Enables cluster's control plane to be accessible using private IP
address only.
Master Authorized Networks
--enable-master-authorized-networks
Allow only specified set of CIDR blocks (specified by the
--master-authorized-networks flag) to connect to Kubernetes master
through HTTPS. Besides these blocks, the following have access as
well:
1) The private network the cluster connects to if
`--enable-private-nodes` is specified.
2) Google Compute Engine Public IPs if `--enable-private-nodes` is not
specified.
Use --no-enable-master-authorized-networks to disable. When
disabled, public internet (0.0.0.0/0) is allowed to connect to
Kubernetes master through HTTPS.
--master-authorized-networks=NETWORK,[NETWORK,...]
The list of CIDR blocks (up to 100 for private cluster, 50 for
public cluster) that are allowed to connect to Kubernetes master
through HTTPS. Specified in CIDR notation (e.g. 1.2.3.4/30). Cannot
be specified unless --enable-master-authorized-networks is also
specified.
Node autoprovisioning
--enable-autoprovisioning
@ -1520,12 +1558,6 @@ OPTIONAL FLAGS
information and migration, see
https://cloud.google.com/istio/docs/istio-on-gke/migrate-to-anthos-service-mesh.
--master-authorized-networks=NETWORK,[NETWORK,...]
The list of CIDR blocks (up to 100 for private cluster, 50 for public
cluster) that are allowed to connect to Kubernetes master through
HTTPS. Specified in CIDR notation (e.g. 1.2.3.4/30). Cannot be
specified unless --enable-master-authorized-networks is also specified.
--node-pool=NODE_POOL
Node pool to be updated.

4
gcloud/alpha/container/fleet/scopes/add-app-operator-binding
View file

@ -123,5 +123,7 @@ NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.
access allowlist. This variant is also available:
$ gcloud beta container fleet scopes add-app-operator-binding

4
gcloud/alpha/container/fleet/scopes/list-app-operator-bindings
View file

@ -102,5 +102,7 @@ NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.
access allowlist. This variant is also available:
$ gcloud beta container fleet scopes list-app-operator-bindings

4
gcloud/alpha/container/fleet/scopes/remove-app-operator-binding
View file

@ -118,5 +118,7 @@ NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.
access allowlist. This variant is also available:
$ gcloud beta container fleet scopes remove-app-operator-binding

4
gcloud/alpha/container/hub/scopes/add-app-operator-binding
View file

@ -123,5 +123,7 @@ NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.
access allowlist. This variant is also available:
$ gcloud beta container hub scopes add-app-operator-binding

4
gcloud/alpha/container/hub/scopes/list-app-operator-bindings
View file

@ -102,5 +102,7 @@ NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.
access allowlist. This variant is also available:
$ gcloud beta container hub scopes list-app-operator-bindings

4
gcloud/alpha/container/hub/scopes/remove-app-operator-binding
View file

@ -118,5 +118,7 @@ NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist.
access allowlist. This variant is also available:
$ gcloud beta container hub scopes remove-app-operator-binding

63
gcloud/alpha/container/node-pools/get-upgrade-info Normal file
View file

@ -0,0 +1,63 @@
NAME
gcloud alpha container node-pools get-upgrade-info - get information about
upgrades for existing clusters including auto upgrade status, upgrade
history, upgrade targets, and end of support timelines
SYNOPSIS
gcloud alpha container node-pools get-upgrade-info NAME [--cluster=CLUSTER]
[--location=LOCATION | --region=REGION | --zone=ZONE, -z ZONE]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(ALPHA) Get information about upgrades for existing clusters including auto
upgrade status, upgrade history, upgrade targets, and end of support
timelines.
EXAMPLES
To get upgrade information for a node pool of an existing cluster, run:
$ gcloud alpha container node-pools get-upgrade-info node-pool-1 \
--cluster=sample-cluster
POSITIONAL ARGUMENTS
NAME
The name of the node pool.
FLAGS
--cluster=CLUSTER
The name of the cluster. Overrides the default container/cluster
property value for this command invocation.
At most one of these can be specified:
--location=LOCATION
Compute zone or region (e.g. us-central1-a or us-central1) for the
cluster. Overrides the default compute/region or compute/zone value
for this command invocation. Prefer using this flag over the --region
or --zone flags.
--region=REGION
Compute region (e.g. us-central1) for a regional cluster. Overrides
the default compute/region property value for this command
invocation.
--zone=ZONE, -z ZONE
Compute zone (e.g. us-central1-a) for a zonal cluster. Overrides the
default compute/zone property value for this command invocation.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct
project, you might be trying to access an API with an invitation-only early
access allowlist. This variant is also available:
$ gcloud beta container node-pools get-upgrade-info

5
gcloud/alpha/container/node-pools/help
View file

@ -55,6 +55,11 @@ COMMANDS
describe
(ALPHA) Describe an existing node pool for a cluster.
get-upgrade-info
(ALPHA) Get information about upgrades for existing clusters including
auto upgrade status, upgrade history, upgrade targets, and end of
support timelines.
list
(ALPHA) List existing node pools for a cluster.