gcloud: Wed Nov 15 11:42:54 UTC 2023

gcloud/alpha/container/fleet/create

@@ -3,7 +3,10 @@ NAME
 
 SYNOPSIS
     gcloud alpha container fleet create [--async] [--display-name=DISPLAY_NAME]
-        [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...]
+        [--labels=[KEY=VALUE,...]]
+        [--security-posture=SECURITY_POSTURE
+          --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
+        [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (ALPHA) This command can fail for the following reasons:
@@ -36,6 +39,26 @@ FLAGS
         contain only hyphens (-), underscores (_), lowercase characters, and
         numbers.
 
+     Default cluster configurations to apply across the fleet.
+
+       Security posture config.
+
+         --security-posture=SECURITY_POSTURE
+            To apply standard security posture to clusters in the fleet,
+
+                $ gcloud alpha container fleet create --security-posture=standard
+
+            SECURITY_POSTURE must be one of: disabled, standard.
+
+         --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING
+            To apply standard vulnerability scanning to clusters in the fleet,
+
+                $ gcloud alpha container fleet create \
+                    --workload-vulnerability-scanning=standard
+
+            WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard,
+            enterprise.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,

gcloud/alpha/container/fleet/identity-service/apply

@@ -1,19 +1,16 @@
 NAME
-    gcloud alpha container fleet identity-service apply - update an Identity
-        Service Feature Spec
+    gcloud alpha container fleet identity-service apply - update the Identity
+        Service Feature
 
 SYNOPSIS
     gcloud alpha container fleet identity-service apply
-        ([--config=CONFIG : [--membership=MEMBERSHIP : --location=LOCATION]])
+        (--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
+          [(--config=CONFIG | --origin=ORIGIN)
+          : [--membership=MEMBERSHIP : --location=LOCATION]])
         [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (ALPHA) Applies the authentication configuration to the Identity Service
-    feature spec for this membership. This configuration is now the "source of
-    truth" for the cluster and can only be updated by using this command or the
-    Cloud Console. Any local authentication configuration on the cluster is
-    overwritten by this configuration, including any local updates made after
-    you run this command.
+    (ALPHA) This command updates the Identity Service Feature in a fleet.
 
 EXAMPLES
     To apply an Identity Service configuration to a membership, run:
@@ -22,14 +19,31 @@ EXAMPLES
             --membership=MEMBERSHIP_NAME \
             --config=/path/to/identity-service.yaml
 
+    To create or modify a fleet-level default membership configuration, run:
+
+        $ gcloud alpha container fleet identity-service apply \
+            --fleet-default-member-config=/path/to/identity-service.yaml
+
+    To apply an existing fleet-level default membership configuration to a
+    membership, run:
+
+        $ gcloud alpha container fleet identity-service apply \
+            --origin=fleet --membership=MEMBERSHIP_NAME
+
 REQUIRED FLAGS
      At least one of these must be specified:
 
-       --config=CONFIG
-          The path to an identity-service.yaml config file.
+       --fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
+          The path to an identity-service.yaml configuration file.
 
-          This flag argument must be specified if any of the other arguments in
-          this group are specified.
+       Exactly one of these must be specified:
+
+         --config=CONFIG
+            The path to an identity-service.yaml configuration file.
+
+         --origin=ORIGIN
+            Applies the fleet-level default membership configuration to a
+            membership. ORIGIN must be (only one value is supported): fleet.
 
        Membership resource - The group of arguments defining a membership. The
        arguments in this group can be used to specify the attributes of this

gcloud/alpha/container/fleet/identity-service/delete

@@ -1,6 +1,6 @@
 NAME
-    gcloud alpha container fleet identity-service delete - remove the Identity
-        Service Feature Spec for the given membership
+    gcloud alpha container fleet identity-service delete - delete a resource
+        from the Identity Service Feature
 
 SYNOPSIS
     gcloud alpha container fleet identity-service delete
@@ -8,14 +8,19 @@ SYNOPSIS
         [--membership=MEMBERSHIP : --location=LOCATION] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    (ALPHA) Removes the Identity Service Feature Spec for the given membership.
+    (ALPHA) Deletes a resource from the Identity Service Feature.
 
 EXAMPLES
-    To delete an Identity Service configuration for a membership, run:
+    To delete the Identity Service configuration from a membership, run:
 
         $ gcloud alpha container fleet identity-service delete \
             --membership=MEMBERSHIP_NAME
 
+    To delete the fleet-level default membership configuration, run:
+
+        $ gcloud alpha container fleet identity-service delete \
+            --fleet-default-member-config
+
 FLAGS
      --fleet-default-member-config
         If specified, deletes the default membership configuration present in

gcloud/alpha/container/fleet/identity-service/enable

@@ -1,5 +1,5 @@
 NAME
-    gcloud alpha container fleet identity-service enable - enable Identity
+    gcloud alpha container fleet identity-service enable - enable the Identity
         Service Feature
 
 SYNOPSIS
@@ -15,6 +15,12 @@ EXAMPLES
 
         $ gcloud alpha container fleet identity-service enable
 
+    To enable the Identity Service Feature with a fleet-level default
+    membership configuration, run:
+
+        $ gcloud alpha container fleet identity-service enable \
+            --fleet-default-member-config=/path/to/identity-service.yaml
+
 FLAGS
      --fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
         The path to an identity-service.yaml identity configuration file. If

gcloud/alpha/container/fleet/identity-service/help

@@ -18,11 +18,10 @@ COMMANDS
     COMMAND is one of the following:
 
      apply
-        (ALPHA) Update an Identity Service Feature Spec.
+        (ALPHA) Update the Identity Service Feature.
 
      delete
-        (ALPHA) Remove the Identity Service Feature Spec for the given
-        membership.
+        (ALPHA) Delete a resource from the Identity Service Feature.
 
      describe
         (ALPHA) Prints the status of all clusters with Identity Service
@@ -32,7 +31,7 @@ COMMANDS
         (ALPHA) Disable Identity Service Feature.
 
      enable
-        (ALPHA) Enable Identity Service Feature.
+        (ALPHA) Enable the Identity Service Feature.
 
 NOTES
     This command is currently in alpha and might change without notice. If this

gcloud/alpha/container/fleet/mesh/disable

@@ -2,7 +2,8 @@ NAME
     gcloud alpha container fleet mesh disable - disable Service Mesh Feature
 
 SYNOPSIS
-    gcloud alpha container fleet mesh disable [--force] [GCLOUD_WIDE_FLAG ...]
+    gcloud alpha container fleet mesh disable [--fleet-default-member-config]
+        [--force] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (ALPHA) Disable the Service Mesh Feature in a fleet.
@@ -18,6 +19,16 @@ EXAMPLES
             --fleet-default-member-config
 
 FLAGS
+     --fleet-default-member-config
+        If specified, deletes the default membership configuration present in
+        your fleet.
+
+            To delete the fleet-level default Membership configuration present in
+            your fleet, run:
+
+            $ gcloud alpha container fleet mesh disable \
+            --fleet-default-member-config
+
      --force
         Disable this feature, even if it is currently in use. Force disablement
         may result in unexpected behavior.

gcloud/alpha/container/fleet/mesh/enable

@@ -2,7 +2,9 @@ NAME
     gcloud alpha container fleet mesh enable - enable Service Mesh Feature
 
 SYNOPSIS
-    gcloud alpha container fleet mesh enable [GCLOUD_WIDE_FLAG ...]
+    gcloud alpha container fleet mesh enable
+        [--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG]
+        [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (ALPHA) Enable the Service Mesh Feature in a fleet.
@@ -18,6 +20,16 @@ EXAMPLES
         $ gcloud alpha container fleet mesh enable \
             --fleet-default-member-config=/path/to/service-mesh.yaml
 
+FLAGS
+     --fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
+        The path to a service-mesh.yaml configuration file.
+
+            To enable the Service Mesh Feature with a fleet-level default
+            membership configuration, run:
+
+            $ gcloud alpha container fleet mesh enable \
+            --fleet-default-member-config=/path/to/service-mesh.yaml
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,

gcloud/alpha/container/fleet/mesh/update

@@ -4,8 +4,9 @@ NAME
 
 SYNOPSIS
     gcloud alpha container fleet mesh update
-        ([(--control-plane=CONTROL_PLANE --management=MANAGEMENT)
-          : --membership=MEMBERSHIP
+        (--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
+          | [(--control-plane=CONTROL_PLANE
+          --management=MANAGEMENT --origin=ORIGIN) : --membership=MEMBERSHIP
           | [--memberships=[MEMBERSHIPS,...] : --location=LOCATION]])
         [GCLOUD_WIDE_FLAG ...]
 
@@ -23,6 +24,15 @@ EXAMPLES
 REQUIRED FLAGS
      Exactly one of these must be specified:
 
+       --fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
+          The path to a service-mesh.yaml configuration file.
+
+              To enable the Service Mesh Feature with a fleet-level default
+              membership configuration, run:
+
+              $ gcloud alpha container fleet mesh update \
+              --fleet-default-member-config=/path/to/service-mesh.yaml
+
        At least one of these must be specified:
 
          --control-plane=CONTROL_PLANE
@@ -37,6 +47,10 @@ REQUIRED FLAGS
             The management mode to update to. MANAGEMENT must be one of:
             automatic, manual.
 
+         --origin=ORIGIN
+            Changing the origin of the membership. ORIGIN must be (only one
+            value is supported): fleet.
+
        At most one of these can be specified:
 
          --membership=MEMBERSHIP

gcloud/alpha/container/fleet/update

@@ -4,6 +4,8 @@ NAME
 SYNOPSIS
     gcloud alpha container fleet update [--async] [--display-name=DISPLAY_NAME]
         [--update-labels=[KEY=VALUE,...]]
+        [--security-posture=SECURITY_POSTURE
+          --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING]
         [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
@@ -38,6 +40,26 @@ FLAGS
         contain only hyphens (-), underscores (_), lowercase characters, and
         numbers.
 
+     Default cluster configurations to apply across the fleet.
+
+       Security posture config.
+
+         --security-posture=SECURITY_POSTURE
+            To apply standard security posture to clusters in the fleet,
+
+                $ gcloud alpha container fleet update --security-posture=standard
+
+            SECURITY_POSTURE must be one of: disabled, standard.
+
+         --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING
+            To apply standard vulnerability scanning to clusters in the fleet,
+
+                $ gcloud alpha container fleet update \
+                    --workload-vulnerability-scanning=standard
+
+            WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard,
+            enterprise.
+
      At most one of these can be specified:
 
        --clear-labels