1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-18 06:47:12 +00:00

gcloud: Wed Sep 11 09:52:17 UTC 2024

This commit is contained in:
Automated 2024-09-11 09:52:17 +00:00
parent 78a4d78e9e
commit a3842bba95
197 changed files with 6656 additions and 691 deletions

View file

@ -11,7 +11,8 @@ SYNOPSIS
[--annotations=ANNOTATION,[ANNOTATION,...]]
[--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE]
[--description=DESCRIPTION] [--enable-managed-prometheus]
[--logging=COMPONENT,[COMPONENT,...]] [--validate-only]
[--logging=COMPONENT,[COMPONENT,...]]
[--security-posture=SECURITY_POSTURE] [--validate-only]
[--proxy-secret-name=PROXY_SECRET_NAME
--proxy-secret-namespace=PROXY_SECRET_NAMESPACE]
[GCLOUD_WIDE_FLAG ...]
@ -176,6 +177,18 @@ OPTIONAL FLAGS
COMPONENT must be one of: NONE, SYSTEM, WORKLOAD.
--security-posture=SECURITY_POSTURE
Sets the mode of the Kubernetes security posture API's off-cluster
features.
To enable advanced mode explicitly set the flag to
--security-posture=enterprise.
To disable in an existing cluster, explicitly set the flag to
--security-posture=disabled.
SECURITY_POSTURE must be one of: disabled, enterprise.
--validate-only
Validate the cluster to create, but don't actually perform it.

View file

@ -7,7 +7,8 @@ SYNOPSIS
[--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE]
[--clear-description] [--description=DESCRIPTION]
[--logging=COMPONENT,[COMPONENT,...]]
[--platform-version=PLATFORM_VERSION] [--validate-only]
[--platform-version=PLATFORM_VERSION]
[--security-posture=SECURITY_POSTURE] [--validate-only]
[--admin-groups=[GROUP,...] | --clear-admin-groups]
[--admin-users=[USER,...] | --clear-admin-users]
[--disable-managed-prometheus | --enable-managed-prometheus]
@ -95,6 +96,18 @@ FLAGS
Replace LOCATION with the target Google Cloud location for the cluster.
--security-posture=SECURITY_POSTURE
Sets the mode of the Kubernetes security posture API's off-cluster
features.
To enable advanced mode explicitly set the flag to
--security-posture=enterprise.
To disable in an existing cluster, explicitly set the flag to
--security-posture=disabled.
SECURITY_POSTURE must be one of: disabled, enterprise.
--validate-only
Validate the update of the cluster, but don't actually perform it.

View file

@ -47,6 +47,9 @@ SYNOPSIS
| --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING
| --additional-pod-ipv4-ranges=NAME,[NAME,...]
--remove-additional-pod-ipv4-ranges=NAME,[NAME,...]
| --logging=[COMPONENT,...]
--monitoring=[COMPONENT,...] --disable-managed-prometheus
| --enable-managed-prometheus
| --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE
| --enable-binauthz | --clear-maintenance-window
| --remove-maintenance-exclusion=NAME
@ -86,9 +89,7 @@ SYNOPSIS
: --min-accelerator=[type=TYPE,count=COUNT,...]]]
| --enable-insecure-binding-system-authenticated
--enable-insecure-binding-system-unauthenticated
| --logging=[COMPONENT,...]
--monitoring=[COMPONENT,...] --disable-managed-prometheus
| --enable-managed-prometheus | --logging-service=LOGGING_SERVICE
| --logging-service=LOGGING_SERVICE
--monitoring-service=MONITORING_SERVICE
| --password=PASSWORD --enable-basic-auth
| --username=USERNAME, -u USERNAME) [--async]
@ -769,6 +770,51 @@ REQUIRED FLAGS
$ gcloud container clusters update example-cluster \
--remove-additional-pod-ipv4-ranges=range1,range2
--logging=[COMPONENT,...]
Set the components that have logging enabled. Valid component values
are: SYSTEM, WORKLOAD, API_SERVER, CONTROLLER_MANAGER, SCHEDULER,
NONE
For more information, see
https://cloud.google.com/kubernetes-engine/docs/concepts/about-logs#available-logs
Examples:
$ gcloud container clusters update --logging=SYSTEM
$ gcloud container clusters update \
--logging=SYSTEM,API_SERVER,WORKLOAD
$ gcloud container clusters update --logging=NONE
--monitoring=[COMPONENT,...]
Set the components that have monitoring enabled. Valid component
values are: SYSTEM, WORKLOAD (Deprecated), NONE, API_SERVER,
CONTROLLER_MANAGER, SCHEDULER, DAEMONSET, DEPLOYMENT, HPA, POD,
STATEFULSET, STORAGE, CADVISOR, KUBELET, DCGM
For more information, see
https://cloud.google.com/kubernetes-engine/docs/how-to/configure-metrics#available-metrics
Examples:
$ gcloud container clusters update --monitoring=SYSTEM,API_SERVER,POD
$ gcloud container clusters update --monitoring=NONE
At most one of these can be specified:
--disable-managed-prometheus
Disable managed collection for Managed Service for Prometheus.
--enable-managed-prometheus
Enables managed collection for Managed Service for Prometheus in
the cluster.
See
https://cloud.google.com/stackdriver/docs/managed-prometheus/setup-managed#enable-mgdcoll-gke
for more info.
Enabled by default for cluster versions 1.27 or greater, use
--no-enable-managed-prometheus to disable.
Flags for Binary Authorization:
At most one of these can be specified:
@ -1248,51 +1294,6 @@ REQUIRED FLAGS
To disallow binding system:authenticated in a cluster, explicitly set
the --no-enable-insecure-binding-system-unauthenticated flag instead.
--logging=[COMPONENT,...]
Set the components that have logging enabled. Valid component values
are: SYSTEM, WORKLOAD, API_SERVER, CONTROLLER_MANAGER, SCHEDULER,
NONE
For more information, see
https://cloud.google.com/kubernetes-engine/docs/concepts/about-logs#available-logs
Examples:
$ gcloud container clusters update --logging=SYSTEM
$ gcloud container clusters update \
--logging=SYSTEM,API_SERVER,WORKLOAD
$ gcloud container clusters update --logging=NONE
--monitoring=[COMPONENT,...]
Set the components that have monitoring enabled. Valid component
values are: SYSTEM, WORKLOAD (Deprecated), NONE, API_SERVER,
CONTROLLER_MANAGER, SCHEDULER, DAEMONSET, DEPLOYMENT, HPA, POD,
STATEFULSET, STORAGE, CADVISOR, KUBELET, DCGM
For more information, see
https://cloud.google.com/kubernetes-engine/docs/how-to/configure-metrics#available-metrics
Examples:
$ gcloud container clusters update --monitoring=SYSTEM,API_SERVER,POD
$ gcloud container clusters update --monitoring=NONE
At most one of these can be specified:
--disable-managed-prometheus
Disable managed collection for Managed Service for Prometheus.
--enable-managed-prometheus
Enables managed collection for Managed Service for Prometheus in
the cluster.
See
https://cloud.google.com/stackdriver/docs/managed-prometheus/setup-managed#enable-mgdcoll-gke
for more info.
Enabled by default for cluster versions 1.27 or greater, use
--no-enable-managed-prometheus to disable.
--logging-service=LOGGING_SERVICE
(DEPRECATED) Logging service to use for the cluster. Options are:
"logging.googleapis.com/kubernetes" (the Google Cloud Logging service

View file

@ -4,7 +4,12 @@ NAME
SYNOPSIS
gcloud container node-pools update NAME
(--containerd-config-from-file=PATH_TO_FILE
(--accelerator=[type=TYPE,[count=COUNT,
gpu-driver-version=GPU_DRIVER_VERSION,
gpu-partition-size=GPU_PARTITION_SIZE,
gpu-sharing-strategy=GPU_SHARING_STRATEGY,
max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]
| --containerd-config-from-file=PATH_TO_FILE
| --enable-confidential-nodes | --enable-gvnic
| --enable-image-streaming | --enable-insecure-kubelet-readonly-port
| --enable-private-nodes | --enable-queued-provisioning
@ -52,6 +57,49 @@ POSITIONAL ARGUMENTS
REQUIRED FLAGS
Exactly one of these must be specified:
--accelerator=[type=TYPE,[count=COUNT,gpu-driver-version=GPU_DRIVER_VERSION,gpu-partition-size=GPU_PARTITION_SIZE,gpu-sharing-strategy=GPU_SHARING_STRATEGY,max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]
Attaches accelerators (e.g. GPUs) to all nodes.
type
(Required) The specific type (e.g. nvidia-tesla-t4 for NVIDIA T4)
of accelerator to attach to the instances. Use gcloud compute
accelerator-types list to learn about all available accelerator
types.
count
(Optional) The number of accelerators to attach to the instances.
The default value is 1.
gpu-driver-version
(Optional) The NVIDIA driver version to install.
GPU_DRIVER_VERSION must be one of:
`default`: Install the default driver version for this GKE version.
`latest`: Install the latest driver version available for this GKE version.
Can only be used for nodes that use Container-Optimized OS.
`disabled`: Skip automatic driver installation. You must manually install a
driver after you create the cluster. If you omit the flag `gpu-driver-version`,
this is the default option. To learn how to manually install the GPU driver,
refer to: https://cloud.google.com/kubernetes-engine/docs/how-to/gpus#installing_drivers
gpu-partition-size
(Optional) The GPU partition size used when running
multi-instance GPUs. For information about multi-instance GPUs,
refer to:
https://cloud.google.com/kubernetes-engine/docs/how-to/gpus-multi
gpu-sharing-strategy
(Optional) The GPU sharing strategy (e.g. time-sharing) to use.
For information about GPU sharing, refer to:
https://cloud.google.com/kubernetes-engine/docs/concepts/timesharing-gpus
max-shared-clients-per-gpu
(Optional) The max number of containers allowed to share each GPU
on the node. This field is used together with
gpu-sharing-strategy.
--containerd-config-from-file=PATH_TO_FILE
Path of the YAML file that contains containerd configuration entries
like configuring access to private image registries.