gcloud: Wed Nov 1 10:29:29 UTC 2023

gcloud/beta/container/fleet/policycontroller/content/bundles/help

@@ -0,0 +1,31 @@
+NAME
+    gcloud beta container fleet policycontroller content bundles - manage
+        Policy Controller content bundles
+
+SYNOPSIS
+    gcloud beta container fleet policycontroller content bundles COMMAND
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Manage Policy Controller content bundles.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     remove
+        (BETA) Removes a bundle installation for Policy Controller content.
+
+     set
+        (BETA) Sets bundle installation for Policy Controller content.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha container fleet policycontroller content bundles
+

gcloud/beta/container/fleet/policycontroller/content/bundles/remove

@@ -0,0 +1,79 @@
+NAME
+    gcloud beta container fleet policycontroller content bundles remove -
+        removes a bundle installation for Policy Controller content
+
+SYNOPSIS
+    gcloud beta container fleet policycontroller content bundles remove
+        BUNDLE_NAME
+        [--all-memberships
+          | [--memberships=[MEMBERSHIPS,...] : --location=LOCATION]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Google-defined policy bundles of constraints can be installed onto
+    Policy Controller installations. This command removes those bundles.
+
+EXAMPLES
+    To remove a policy bundle:
+
+        $ gcloud beta container fleet policycontroller content bundles \
+            remove cis-k8s-v1.5.1
+
+POSITIONAL ARGUMENTS
+     BUNDLE_NAME
+        The constraint bundle to remove from Policy Controller.
+
+FLAGS
+     Membership flags.
+
+     At most one of these can be specified:
+
+       --all-memberships
+          If supplied, apply to all Policy Controllers memberships in the
+          fleet.
+
+       Membership resource - The group of arguments defining one or more
+       memberships. The arguments in this group can be used to specify the
+       attributes of this resource. (NOTE) Some attributes are not given
+       arguments in this group but can be set in other ways.
+
+       To set the project attribute:
+        ▸ provide the argument --memberships on the command line with a fully
+          specified name;
+        ▸ provide the argument --project on the command line;
+        ▸ set the property core/project.
+
+         --memberships=[MEMBERSHIPS,...]
+            IDs of the memberships or fully qualified identifiers for the
+            memberships.
+
+            To set the memberships attribute:
+            ▫ provide the argument --memberships on the command line.
+
+            This flag argument must be specified if any of the other arguments
+            in this group are specified.
+
+         --location=LOCATION
+            Location for the memberships.
+
+            To set the location attribute:
+            ▫ provide the argument --memberships on the command line with a
+              fully specified name;
+            ▫ provide the argument --location on the command line;
+            ▫ set the property gkehub/location.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha container fleet policycontroller content bundles \
+            remove
+

gcloud/beta/container/fleet/policycontroller/content/bundles/set

@@ -0,0 +1,110 @@
+NAME
+    gcloud beta container fleet policycontroller content bundles set - sets
+        bundle installation for Policy Controller content
+
+SYNOPSIS
+    gcloud beta container fleet policycontroller content bundles set
+        BUNDLE_NAME
+        [--all-memberships
+          | [--memberships=[MEMBERSHIPS,...] : --location=LOCATION]]
+        [--exempted-namespaces=EXEMPTED_NAMESPACES | --no-exempted-namespaces]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Google-defined policy bundles of constraints can be installed onto
+    Policy Controller installations.
+
+    The namespace exclusion flag (--exempted-namespaces) will specify a set of
+    namespaces that the installed bundle will ignore. Subsequent calls with the
+    same bundle name and this flag will overwrite what namespaces are being
+    ignored. Using --no-exempted-namespaces or specifying no namespaces with
+    --exempted-namespaces will remove all namespaces from the ignore list.
+
+    To uninstall a bundle, use the remove command.
+
+EXAMPLES
+    To install a policy bundle:
+
+        $ gcloud beta container fleet policycontroller content bundles set \
+            cis-k8s-v1.5.1
+
+    To install a policy bundle, while ignoring (exempting) certain namespaces
+    from being affected by the bundle:
+
+        $ gcloud beta container fleet policycontroller content bundles set \
+            cis-k8s-v1.5.1 \
+            --exempted-namespaces=kube-system,gatekeeper-system
+
+    To remove all exempted namespaces from a particular bundles ignore list:
+
+        $ gcloud beta container fleet policycontroller content bundles set \
+            cis-k8s-v1.5.1 --no-exempted-namespaces
+
+POSITIONAL ARGUMENTS
+     BUNDLE_NAME
+        The constraint bundle to install in Policy Controller.
+
+FLAGS
+     Membership flags.
+
+     At most one of these can be specified:
+
+       --all-memberships
+          If supplied, apply to all Policy Controllers memberships in the
+          fleet.
+
+       Membership resource - The group of arguments defining one or more
+       memberships. The arguments in this group can be used to specify the
+       attributes of this resource. (NOTE) Some attributes are not given
+       arguments in this group but can be set in other ways.
+
+       To set the project attribute:
+        ▸ provide the argument --memberships on the command line with a fully
+          specified name;
+        ▸ provide the argument --project on the command line;
+        ▸ set the property core/project.
+
+         --memberships=[MEMBERSHIPS,...]
+            IDs of the memberships or fully qualified identifiers for the
+            memberships.
+
+            To set the memberships attribute:
+            ▫ provide the argument --memberships on the command line.
+
+            This flag argument must be specified if any of the other arguments
+            in this group are specified.
+
+         --location=LOCATION
+            Location for the memberships.
+
+            To set the location attribute:
+            ▫ provide the argument --memberships on the command line with a
+              fully specified name;
+            ▫ provide the argument --location on the command line;
+            ▫ set the property gkehub/location.
+
+     Exempted Namespaces flags.
+
+     At most one of these can be specified:
+
+       --exempted-namespaces=EXEMPTED_NAMESPACES
+          Exempted namespaces are ignored by Policy Controller when applying
+          constraints added by this bundle.
+
+       --no-exempted-namespaces
+          Removes all exempted namespaces from the specified bundle.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha container fleet policycontroller content bundles set
+