gcloud: Thu Mar 26 12:11:21 UTC 2026

gcloud/container/fleet/help

@@ -94,6 +94,9 @@ GROUPS
      scopes
         Manage scopes of all your GKE fleets.
 
+     workload-identity
+        Manage Workload Identity Feature.
+
 COMMANDS
     COMMAND is one of the following:
 

gcloud/container/fleet/workload-identity/describe

@@ -0,0 +1,30 @@
+NAME
+    gcloud container fleet workload-identity describe - describe the status of
+        Workload Identity Feature resource
+
+SYNOPSIS
+    gcloud container fleet workload-identity describe [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Describe the status of the Workload Identity Feature resource in a fleet.
+
+EXAMPLES
+    To describe the Workload Identity Feature, run:
+
+        $ gcloud container fleet workload-identity describe
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container fleet workload-identity describe
+
+        $ gcloud beta container fleet workload-identity describe
+

gcloud/container/fleet/workload-identity/disable

@@ -0,0 +1,37 @@
+NAME
+    gcloud container fleet workload-identity disable - disable Workload
+        Identity Feature
+
+SYNOPSIS
+    gcloud container fleet workload-identity disable [--force]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Disable the Workload Identity Feature in a fleet.
+
+EXAMPLES
+    To disable the Workload Identity Feature, run:
+
+        $ gcloud container fleet workload-identity disable
+
+FLAGS
+     --force
+        Force disablement. Bypasses any prompts for confirmation. When
+        disabling the entire feature, proceeds even if the feature is in use.
+        Might result in unexpected behavior.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container fleet workload-identity disable
+
+        $ gcloud beta container fleet workload-identity disable
+

gcloud/container/fleet/workload-identity/enable

@@ -0,0 +1,30 @@
+NAME
+    gcloud container fleet workload-identity enable - enable Workload Identity
+        Feature
+
+SYNOPSIS
+    gcloud container fleet workload-identity enable [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Enable the Workload Identity Feature in a fleet.
+
+EXAMPLES
+    To enable Workload Identity Feature, run:
+
+        $ gcloud container fleet workload-identity enable
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container fleet workload-identity enable
+
+        $ gcloud beta container fleet workload-identity enable
+

gcloud/container/fleet/workload-identity/help

@@ -0,0 +1,40 @@
+NAME
+    gcloud container fleet workload-identity - manage Workload Identity Feature
+
+SYNOPSIS
+    gcloud container fleet workload-identity GROUP | COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage Workload Identity Feature.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+GROUPS
+    GROUP is one of the following:
+
+     scope-tenancy-pool
+        Manage Workload Identity Feature scope tenancy pool.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     describe
+        Describe the status of Workload Identity Feature resource.
+
+     disable
+        Disable Workload Identity Feature.
+
+     enable
+        Enable Workload Identity Feature.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container fleet workload-identity
+
+        $ gcloud beta container fleet workload-identity
+

gcloud/container/fleet/workload-identity/scope-tenancy-pool/help

@@ -0,0 +1,32 @@
+NAME
+    gcloud container fleet workload-identity scope-tenancy-pool - manage
+        Workload Identity Feature scope tenancy pool
+
+SYNOPSIS
+    gcloud container fleet workload-identity scope-tenancy-pool COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Manage Workload Identity Feature scope tenancy pool.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     set
+        Set Scope Tenancy Pool.
+
+     unset
+        Unset Scope Tenancy Pool.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container fleet workload-identity scope-tenancy-pool
+
+        $ gcloud beta container fleet workload-identity scope-tenancy-pool
+

gcloud/container/fleet/workload-identity/scope-tenancy-pool/set

@@ -0,0 +1,68 @@
+NAME
+    gcloud container fleet workload-identity scope-tenancy-pool set - set Scope
+        Tenancy Pool
+
+SYNOPSIS
+    gcloud container fleet workload-identity scope-tenancy-pool set
+        WORKLOAD_IDENTITY_POOL [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Set the scope tenancy pool for a fleet.
+
+EXAMPLES
+    To set the scope tenancy pool using a fully qualified identifier for the
+    Workload Identity Pool:
+
+        $ gcloud container fleet workload-identity scope-tenancy-pool set \
+            projects/my-project/locations/global/workloadIdentityPools/\
+        test-pool
+
+    To set the scope tenancy pool using a Workload Identity Pool ID and
+    project:
+
+        $ gcloud container fleet workload-identity scope-tenancy-pool set \
+            test-pool --project=my-project
+
+POSITIONAL ARGUMENTS
+     Workloadidentitypool resource - The group of arguments defining a Workload
+     Identity Pool. This represents a Cloud resource. (NOTE) Some attributes
+     are not given arguments in this group but can be set in other ways.
+
+     To set the project attribute:
+      ◆ provide the argument WORKLOAD_IDENTITY_POOL on the command line with
+        a fully specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     To set the location attribute:
+      ◆ provide the argument WORKLOAD_IDENTITY_POOL on the command line with
+        a fully specified name;
+      ◆ provide the argument --location on the command line;
+      ◆ set the property gkehub/location.
+
+     This must be specified.
+
+       WORKLOAD_IDENTITY_POOL
+          ID of the workloadidentitypool or fully qualified identifier for the
+          workloadidentitypool.
+
+          To set the workloadidentitypool attribute:
+          ▸ provide the argument WORKLOAD_IDENTITY_POOL on the command line.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container fleet workload-identity \
+            scope-tenancy-pool set
+
+        $ gcloud beta container fleet workload-identity scope-tenancy-pool \
+            set
+

gcloud/container/fleet/workload-identity/scope-tenancy-pool/unset

@@ -0,0 +1,33 @@
+NAME
+    gcloud container fleet workload-identity scope-tenancy-pool unset - unset
+        Scope Tenancy Pool
+
+SYNOPSIS
+    gcloud container fleet workload-identity scope-tenancy-pool unset
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Unset the scope tenancy pool for a fleet.
+
+EXAMPLES
+    To unset the scope tenancy pool, run:
+
+        $ gcloud container fleet workload-identity scope-tenancy-pool unset
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha container fleet workload-identity \
+            scope-tenancy-pool unset
+
+        $ gcloud beta container fleet workload-identity scope-tenancy-pool \
+            unset
+