gcloud: Thu Jul 20 11:47:24 UTC 2023

gcloud/alpha/container/clusters/update

@@ -8,12 +8,14 @@ SYNOPSIS
           | --autoscaling-profile=AUTOSCALING_PROFILE | --clear-fleet-project
           | --complete-credential-rotation | --complete-ip-rotation
           | --database-encryption-key=DATABASE_ENCRYPTION_KEY
+          | --dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE
           | --disable-database-encryption | --disable-default-snat
           | --disable-workload-identity | --enable-autoscaling
           | --enable-cost-allocation | --enable-fleet
           | --enable-fqdn-network-policy | --enable-gke-oidc
           | --enable-google-cloud-access | --enable-identity-service
-          | --enable-image-streaming | --enable-intra-node-visibility
+          | --enable-image-streaming | --enable-insecure-kubelet-readonly-port
+          | --enable-intra-node-visibility
           | --enable-kubernetes-unstable-apis=API,[API,...]
           | --enable-l4-ilb-subsetting | --enable-legacy-authorization
           | --enable-logging-monitoring-system-only
@@ -42,7 +44,7 @@ SYNOPSIS
           | --additional-pod-ipv4-ranges=NAME,[NAME,...]
           --remove-additional-pod-ipv4-ranges=NAME,[NAME,...]
           | --additional-zones=[ZONE,...] | --node-locations=ZONE,[ZONE,...]
-          | --binauthz-policy=BINAUTHZ_POLICY
+          | --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...]
           --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
           | --enable-binauthz | --clear-maintenance-window
           | --remove-maintenance-exclusion=NAME
@@ -58,7 +60,9 @@ SYNOPSIS
           --enable-resource-consumption-metering
           --resource-usage-bigquery-dataset=RESOURCE_USAGE_BIGQUERY_DATASET
           | --cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN
-          --cluster-dns-scope=CLUSTER_DNS_SCOPE | [--enable-autoprovisioning
+          --cluster-dns-scope=CLUSTER_DNS_SCOPE
+          | --disable-dataplane-v2-metrics | --enable-dataplane-v2-metrics
+          | [--enable-autoprovisioning
           : --autoprovisioning-config-file=AUTOPROVISIONING_CONFIG_FILE
           | --autoprovisioning-image-type=AUTOPROVISIONING_IMAGE_TYPE
           --autoprovisioning-locations=ZONE,[ZONE,...]
@@ -164,6 +168,35 @@ REQUIRED FLAGS
           For more information, see
           https://cloud.google.com/kubernetes-engine/docs/how-to/encrypting-secrets.
 
+       --dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE
+          Select Advanced Datapath Observability mode for the cluster. Defaults
+          to DISABLED.
+
+          Advanced Datapath Observability allows for a real-time view into
+          pod-to-pod traffic within your cluster.
+
+          Examples:
+
+              $ gcloud alpha container clusters update \
+                  --dataplane-v2-observability-mode=DISABLED
+
+              $ gcloud alpha container clusters update \
+                  --dataplane-v2-observability-mode=INTERNAL_VPC_LB
+
+              $ gcloud alpha container clusters update \
+                  --dataplane-v2-observability-mode=EXTERNAL_LB
+
+          DATAPLANE_V2_OBSERVABILITY_MODE must be one of:
+
+           DISABLED
+              Disables Advanced Datapath Observability.
+           EXTERNAL_LB
+              Makes Advanced Datapath Observability available to the external
+              network.
+           INTERNAL_VPC_LB
+              Makes Advanced Datapath Observability available from the VPC
+              network.
+
        --disable-database-encryption
           Disable database encryption.
 
@@ -257,6 +290,12 @@ REQUIRED FLAGS
        --enable-image-streaming
           Specifies whether to enable image streaming on cluster.
 
+       --enable-insecure-kubelet-readonly-port
+          Enables the Kubelet's insecure Read Only Port.
+
+          To disable in an existing cluster, explicitly set flag to
+          --no-enable-insecure-kubelet-readonly-port.
+
        --enable-intra-node-visibility
           Enable Intra-node visibility for this cluster.
 
@@ -701,7 +740,7 @@ REQUIRED FLAGS
 
        Flags for Binary Authorization:
 
-         --binauthz-policy=BINAUTHZ_POLICY
+         --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...]
             The relative resource name of the Binary Authorization policy to
             audit and/or enforce. GKE policies have the following format:
             projects/{project_number}/platforms/gke/policies/{policy_id}.
@@ -886,6 +925,14 @@ REQUIRED FLAGS
              vpc
                 Configures the Cloud DNS zone to be private to the VPC Network.
 
+       At most one of these can be specified:
+
+         --disable-dataplane-v2-metrics
+            Stops exposing advanced datapath flow metrics on node port.
+
+         --enable-dataplane-v2-metrics
+            Exposes advanced datapath flow metrics on node port.
+
        Node autoprovisioning
 
          --enable-autoprovisioning