gcloud: Wed Nov 15 11:42:54 UTC 2023

gcloud/container/fleet/identity-service/apply

@@ -1,19 +1,16 @@
 NAME
-    gcloud container fleet identity-service apply - update an Identity Service
-        Feature Spec
+    gcloud container fleet identity-service apply - update the Identity Service
+        Feature
 
 SYNOPSIS
     gcloud container fleet identity-service apply
-        ([--config=CONFIG : [--membership=MEMBERSHIP : --location=LOCATION]])
+        (--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
+          [(--config=CONFIG | --origin=ORIGIN)
+          : [--membership=MEMBERSHIP : --location=LOCATION]])
         [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    Applies the authentication configuration to the Identity Service feature
-    spec for this membership. This configuration is now the "source of truth"
-    for the cluster and can only be updated by using this command or the Cloud
-    Console. Any local authentication configuration on the cluster is
-    overwritten by this configuration, including any local updates made after
-    you run this command.
+    This command updates the Identity Service Feature in a fleet.
 
 EXAMPLES
     To apply an Identity Service configuration to a membership, run:
@@ -22,14 +19,31 @@ EXAMPLES
             --membership=MEMBERSHIP_NAME \
             --config=/path/to/identity-service.yaml
 
+    To create or modify a fleet-level default membership configuration, run:
+
+        $ gcloud container fleet identity-service apply \
+            --fleet-default-member-config=/path/to/identity-service.yaml
+
+    To apply an existing fleet-level default membership configuration to a
+    membership, run:
+
+        $ gcloud container fleet identity-service apply --origin=fleet \
+            --membership=MEMBERSHIP_NAME
+
 REQUIRED FLAGS
      At least one of these must be specified:
 
-       --config=CONFIG
-          The path to an identity-service.yaml config file.
+       --fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
+          The path to an identity-service.yaml configuration file.
 
-          This flag argument must be specified if any of the other arguments in
-          this group are specified.
+       Exactly one of these must be specified:
+
+         --config=CONFIG
+            The path to an identity-service.yaml configuration file.
+
+         --origin=ORIGIN
+            Applies the fleet-level default membership configuration to a
+            membership. ORIGIN must be (only one value is supported): fleet.
 
        Membership resource - The group of arguments defining a membership. The
        arguments in this group can be used to specify the attributes of this

gcloud/container/fleet/identity-service/delete

@@ -1,21 +1,37 @@
 NAME
-    gcloud container fleet identity-service delete - remove the Identity
-        Service Feature Spec for the given membership
+    gcloud container fleet identity-service delete - delete a resource from the
+        Identity Service Feature
 
 SYNOPSIS
     gcloud container fleet identity-service delete
+        [--fleet-default-member-config]
         [--membership=MEMBERSHIP : --location=LOCATION] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
-    Removes the Identity Service Feature Spec for the given membership.
+    Deletes a resource from the Identity Service Feature.
 
 EXAMPLES
-    To delete an Identity Service configuration for a membership, run:
+    To delete the Identity Service configuration from a membership, run:
 
         $ gcloud container fleet identity-service delete \
             --membership=MEMBERSHIP_NAME
 
+    To delete the fleet-level default membership configuration, run:
+
+        $ gcloud container fleet identity-service delete \
+            --fleet-default-member-config
+
 FLAGS
+     --fleet-default-member-config
+        If specified, deletes the default membership configuration present in
+        your fleet.
+
+            To delete the default membership configuration present in your
+            fleet, run:
+
+            $ gcloud container fleet identity-service delete \
+            --fleet-default-member-config
+
      Membership resource - The group of arguments defining a membership. The
      arguments in this group can be used to specify the attributes of this
      resource. (NOTE) Some attributes are not given arguments in this group but

gcloud/container/fleet/identity-service/enable

@@ -1,9 +1,11 @@
 NAME
-    gcloud container fleet identity-service enable - enable Identity Service
-        Feature
+    gcloud container fleet identity-service enable - enable the Identity
+        Service Feature
 
 SYNOPSIS
-    gcloud container fleet identity-service enable [GCLOUD_WIDE_FLAG ...]
+    gcloud container fleet identity-service enable
+        [--fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG]
+        [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     This command enables the Identity Service Feature in a fleet.
@@ -13,6 +15,26 @@ EXAMPLES
 
         $ gcloud container fleet identity-service enable
 
+    To enable the Identity Service Feature with a fleet-level default
+    membership configuration, run:
+
+        $ gcloud container fleet identity-service enable \
+            --fleet-default-member-config=/path/to/identity-service.yaml
+
+FLAGS
+     --fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
+        The path to an identity-service.yaml identity configuration file. If
+        specified, this configuration would be the default Identity Service
+        configuration for all memberships in your fleet. It could be overridden
+        with a membership-specific configuration by using the the Apply command
+        with the --config argument.
+
+            To enable the Identity Service Feature with a fleet-level default
+            membership configuration, run:
+
+            $ gcloud container fleet identity-service enable \
+            --fleet-default-member-config=/path/to/identity-service.yaml
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,

gcloud/container/fleet/identity-service/help

@@ -16,10 +16,10 @@ COMMANDS
     COMMAND is one of the following:
 
      apply
-        Update an Identity Service Feature Spec.
+        Update the Identity Service Feature.
 
      delete
-        Remove the Identity Service Feature Spec for the given membership.
+        Delete a resource from the Identity Service Feature.
 
      describe
         Prints the status of all clusters with Identity Service installed.
@@ -28,7 +28,7 @@ COMMANDS
         Disable Identity Service Feature.
 
      enable
-        Enable Identity Service Feature.
+        Enable the Identity Service Feature.
 
 NOTES
     These variants are also available: