mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-18 06:47:12 +00:00
gcloud: Wed Sep 11 09:52:17 UTC 2024
This commit is contained in:
parent
78a4d78e9e
commit
a3842bba95
197 changed files with 6656 additions and 691 deletions
|
|
@ -11,7 +11,8 @@ SYNOPSIS
|
|||
[--annotations=ANNOTATION,[ANNOTATION,...]]
|
||||
[--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE]
|
||||
[--description=DESCRIPTION] [--enable-managed-prometheus]
|
||||
[--logging=COMPONENT,[COMPONENT,...]] [--validate-only]
|
||||
[--logging=COMPONENT,[COMPONENT,...]]
|
||||
[--security-posture=SECURITY_POSTURE] [--validate-only]
|
||||
[--proxy-secret-name=PROXY_SECRET_NAME
|
||||
--proxy-secret-namespace=PROXY_SECRET_NAMESPACE]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
|
@ -176,6 +177,18 @@ OPTIONAL FLAGS
|
|||
|
||||
COMPONENT must be one of: NONE, SYSTEM, WORKLOAD.
|
||||
|
||||
--security-posture=SECURITY_POSTURE
|
||||
Sets the mode of the Kubernetes security posture API's off-cluster
|
||||
features.
|
||||
|
||||
To enable advanced mode explicitly set the flag to
|
||||
--security-posture=enterprise.
|
||||
|
||||
To disable in an existing cluster, explicitly set the flag to
|
||||
--security-posture=disabled.
|
||||
|
||||
SECURITY_POSTURE must be one of: disabled, enterprise.
|
||||
|
||||
--validate-only
|
||||
Validate the cluster to create, but don't actually perform it.
|
||||
|
||||
|
|
|
|||
|
|
@ -7,7 +7,8 @@ SYNOPSIS
|
|||
[--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE]
|
||||
[--clear-description] [--description=DESCRIPTION]
|
||||
[--logging=COMPONENT,[COMPONENT,...]]
|
||||
[--platform-version=PLATFORM_VERSION] [--validate-only]
|
||||
[--platform-version=PLATFORM_VERSION]
|
||||
[--security-posture=SECURITY_POSTURE] [--validate-only]
|
||||
[--admin-groups=[GROUP,...] | --clear-admin-groups]
|
||||
[--admin-users=[USER,...] | --clear-admin-users]
|
||||
[--disable-managed-prometheus | --enable-managed-prometheus]
|
||||
|
|
@ -95,6 +96,18 @@ FLAGS
|
|||
|
||||
Replace LOCATION with the target Google Cloud location for the cluster.
|
||||
|
||||
--security-posture=SECURITY_POSTURE
|
||||
Sets the mode of the Kubernetes security posture API's off-cluster
|
||||
features.
|
||||
|
||||
To enable advanced mode explicitly set the flag to
|
||||
--security-posture=enterprise.
|
||||
|
||||
To disable in an existing cluster, explicitly set the flag to
|
||||
--security-posture=disabled.
|
||||
|
||||
SECURITY_POSTURE must be one of: disabled, enterprise.
|
||||
|
||||
--validate-only
|
||||
Validate the update of the cluster, but don't actually perform it.
|
||||
|
||||
|
|
|
|||
|
|
@ -47,6 +47,9 @@ SYNOPSIS
|
|||
| --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING
|
||||
| --additional-pod-ipv4-ranges=NAME,[NAME,...]
|
||||
--remove-additional-pod-ipv4-ranges=NAME,[NAME,...]
|
||||
| --logging=[COMPONENT,...]
|
||||
--monitoring=[COMPONENT,...] --disable-managed-prometheus
|
||||
| --enable-managed-prometheus
|
||||
| --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
|
||||
| --enable-binauthz | --clear-maintenance-window
|
||||
| --remove-maintenance-exclusion=NAME
|
||||
|
|
@ -86,9 +89,7 @@ SYNOPSIS
|
|||
: --min-accelerator=[type=TYPE,count=COUNT,...]]]
|
||||
| --enable-insecure-binding-system-authenticated
|
||||
--enable-insecure-binding-system-unauthenticated
|
||||
| --logging=[COMPONENT,...]
|
||||
--monitoring=[COMPONENT,...] --disable-managed-prometheus
|
||||
| --enable-managed-prometheus | --logging-service=LOGGING_SERVICE
|
||||
| --logging-service=LOGGING_SERVICE
|
||||
--monitoring-service=MONITORING_SERVICE
|
||||
| --password=PASSWORD --enable-basic-auth
|
||||
| --username=USERNAME, -u USERNAME) [--async]
|
||||
|
|
@ -769,6 +770,51 @@ REQUIRED FLAGS
|
|||
$ gcloud container clusters update example-cluster \
|
||||
--remove-additional-pod-ipv4-ranges=range1,range2
|
||||
|
||||
--logging=[COMPONENT,...]
|
||||
Set the components that have logging enabled. Valid component values
|
||||
are: SYSTEM, WORKLOAD, API_SERVER, CONTROLLER_MANAGER, SCHEDULER,
|
||||
NONE
|
||||
|
||||
For more information, see
|
||||
https://cloud.google.com/kubernetes-engine/docs/concepts/about-logs#available-logs
|
||||
|
||||
Examples:
|
||||
|
||||
$ gcloud container clusters update --logging=SYSTEM
|
||||
$ gcloud container clusters update \
|
||||
--logging=SYSTEM,API_SERVER,WORKLOAD
|
||||
$ gcloud container clusters update --logging=NONE
|
||||
|
||||
--monitoring=[COMPONENT,...]
|
||||
Set the components that have monitoring enabled. Valid component
|
||||
values are: SYSTEM, WORKLOAD (Deprecated), NONE, API_SERVER,
|
||||
CONTROLLER_MANAGER, SCHEDULER, DAEMONSET, DEPLOYMENT, HPA, POD,
|
||||
STATEFULSET, STORAGE, CADVISOR, KUBELET, DCGM
|
||||
|
||||
For more information, see
|
||||
https://cloud.google.com/kubernetes-engine/docs/how-to/configure-metrics#available-metrics
|
||||
|
||||
Examples:
|
||||
|
||||
$ gcloud container clusters update --monitoring=SYSTEM,API_SERVER,POD
|
||||
$ gcloud container clusters update --monitoring=NONE
|
||||
|
||||
At most one of these can be specified:
|
||||
|
||||
--disable-managed-prometheus
|
||||
Disable managed collection for Managed Service for Prometheus.
|
||||
|
||||
--enable-managed-prometheus
|
||||
Enables managed collection for Managed Service for Prometheus in
|
||||
the cluster.
|
||||
|
||||
See
|
||||
https://cloud.google.com/stackdriver/docs/managed-prometheus/setup-managed#enable-mgdcoll-gke
|
||||
for more info.
|
||||
|
||||
Enabled by default for cluster versions 1.27 or greater, use
|
||||
--no-enable-managed-prometheus to disable.
|
||||
|
||||
Flags for Binary Authorization:
|
||||
|
||||
At most one of these can be specified:
|
||||
|
|
@ -1248,51 +1294,6 @@ REQUIRED FLAGS
|
|||
To disallow binding system:authenticated in a cluster, explicitly set
|
||||
the --no-enable-insecure-binding-system-unauthenticated flag instead.
|
||||
|
||||
--logging=[COMPONENT,...]
|
||||
Set the components that have logging enabled. Valid component values
|
||||
are: SYSTEM, WORKLOAD, API_SERVER, CONTROLLER_MANAGER, SCHEDULER,
|
||||
NONE
|
||||
|
||||
For more information, see
|
||||
https://cloud.google.com/kubernetes-engine/docs/concepts/about-logs#available-logs
|
||||
|
||||
Examples:
|
||||
|
||||
$ gcloud container clusters update --logging=SYSTEM
|
||||
$ gcloud container clusters update \
|
||||
--logging=SYSTEM,API_SERVER,WORKLOAD
|
||||
$ gcloud container clusters update --logging=NONE
|
||||
|
||||
--monitoring=[COMPONENT,...]
|
||||
Set the components that have monitoring enabled. Valid component
|
||||
values are: SYSTEM, WORKLOAD (Deprecated), NONE, API_SERVER,
|
||||
CONTROLLER_MANAGER, SCHEDULER, DAEMONSET, DEPLOYMENT, HPA, POD,
|
||||
STATEFULSET, STORAGE, CADVISOR, KUBELET, DCGM
|
||||
|
||||
For more information, see
|
||||
https://cloud.google.com/kubernetes-engine/docs/how-to/configure-metrics#available-metrics
|
||||
|
||||
Examples:
|
||||
|
||||
$ gcloud container clusters update --monitoring=SYSTEM,API_SERVER,POD
|
||||
$ gcloud container clusters update --monitoring=NONE
|
||||
|
||||
At most one of these can be specified:
|
||||
|
||||
--disable-managed-prometheus
|
||||
Disable managed collection for Managed Service for Prometheus.
|
||||
|
||||
--enable-managed-prometheus
|
||||
Enables managed collection for Managed Service for Prometheus in
|
||||
the cluster.
|
||||
|
||||
See
|
||||
https://cloud.google.com/stackdriver/docs/managed-prometheus/setup-managed#enable-mgdcoll-gke
|
||||
for more info.
|
||||
|
||||
Enabled by default for cluster versions 1.27 or greater, use
|
||||
--no-enable-managed-prometheus to disable.
|
||||
|
||||
--logging-service=LOGGING_SERVICE
|
||||
(DEPRECATED) Logging service to use for the cluster. Options are:
|
||||
"logging.googleapis.com/kubernetes" (the Google Cloud Logging service
|
||||
|
|
|
|||
|
|
@ -4,7 +4,12 @@ NAME
|
|||
|
||||
SYNOPSIS
|
||||
gcloud container node-pools update NAME
|
||||
(--containerd-config-from-file=PATH_TO_FILE
|
||||
(--accelerator=[type=TYPE,[count=COUNT,
|
||||
gpu-driver-version=GPU_DRIVER_VERSION,
|
||||
gpu-partition-size=GPU_PARTITION_SIZE,
|
||||
gpu-sharing-strategy=GPU_SHARING_STRATEGY,
|
||||
max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]
|
||||
| --containerd-config-from-file=PATH_TO_FILE
|
||||
| --enable-confidential-nodes | --enable-gvnic
|
||||
| --enable-image-streaming | --enable-insecure-kubelet-readonly-port
|
||||
| --enable-private-nodes | --enable-queued-provisioning
|
||||
|
|
@ -52,6 +57,49 @@ POSITIONAL ARGUMENTS
|
|||
REQUIRED FLAGS
|
||||
Exactly one of these must be specified:
|
||||
|
||||
--accelerator=[type=TYPE,[count=COUNT,gpu-driver-version=GPU_DRIVER_VERSION,gpu-partition-size=GPU_PARTITION_SIZE,gpu-sharing-strategy=GPU_SHARING_STRATEGY,max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]
|
||||
Attaches accelerators (e.g. GPUs) to all nodes.
|
||||
|
||||
type
|
||||
(Required) The specific type (e.g. nvidia-tesla-t4 for NVIDIA T4)
|
||||
of accelerator to attach to the instances. Use gcloud compute
|
||||
accelerator-types list to learn about all available accelerator
|
||||
types.
|
||||
|
||||
count
|
||||
(Optional) The number of accelerators to attach to the instances.
|
||||
The default value is 1.
|
||||
|
||||
gpu-driver-version
|
||||
(Optional) The NVIDIA driver version to install.
|
||||
GPU_DRIVER_VERSION must be one of:
|
||||
|
||||
`default`: Install the default driver version for this GKE version.
|
||||
|
||||
`latest`: Install the latest driver version available for this GKE version.
|
||||
Can only be used for nodes that use Container-Optimized OS.
|
||||
|
||||
`disabled`: Skip automatic driver installation. You must manually install a
|
||||
driver after you create the cluster. If you omit the flag `gpu-driver-version`,
|
||||
this is the default option. To learn how to manually install the GPU driver,
|
||||
refer to: https://cloud.google.com/kubernetes-engine/docs/how-to/gpus#installing_drivers
|
||||
|
||||
gpu-partition-size
|
||||
(Optional) The GPU partition size used when running
|
||||
multi-instance GPUs. For information about multi-instance GPUs,
|
||||
refer to:
|
||||
https://cloud.google.com/kubernetes-engine/docs/how-to/gpus-multi
|
||||
|
||||
gpu-sharing-strategy
|
||||
(Optional) The GPU sharing strategy (e.g. time-sharing) to use.
|
||||
For information about GPU sharing, refer to:
|
||||
https://cloud.google.com/kubernetes-engine/docs/concepts/timesharing-gpus
|
||||
|
||||
max-shared-clients-per-gpu
|
||||
(Optional) The max number of containers allowed to share each GPU
|
||||
on the node. This field is used together with
|
||||
gpu-sharing-strategy.
|
||||
|
||||
--containerd-config-from-file=PATH_TO_FILE
|
||||
Path of the YAML file that contains containerd configuration entries
|
||||
like configuring access to private image registries.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue