gcloud: Wed Nov 1 10:29:29 UTC 2023

gcloud/beta/container/hub/policycontroller/enable

@@ -0,0 +1,179 @@
+NAME
+    gcloud beta container hub policycontroller enable - enable Policy
+        Controller Feature
+
+SYNOPSIS
+    gcloud beta container hub policycontroller enable
+        [--all-memberships | [--memberships=[MEMBERSHIPS,...]
+          : --location=LOCATION] --audit-interval=AUDIT_INTERVAL
+          --constraint-violation-limit=CONSTRAINT_VIOLATION_LIMIT
+          --no-default-bundles --version=VERSION --clear-exemptable-namespaces
+          | --exemptable-namespaces=EXEMPTABLE_NAMESPACES --log-denies
+          | --no-log-denies --monitoring=MONITORING
+          | --no-monitoring --mutation | --no-mutation --referential-rules
+          | --no-referential-rules
+          | --fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
+          | --no-fleet-default-member-config] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Enables the Policy Controller Feature in a fleet.
+
+EXAMPLES
+    To enable the Policy Controller Feature, run:
+
+        $ gcloud beta container hub policycontroller enable
+
+FLAGS
+     At most one of these can be specified:
+
+       Membership flags.
+
+       At most one of these can be specified:
+
+         --all-memberships
+            If supplied, apply to all Policy Controllers memberships in the
+            fleet.
+
+         Membership resource - The group of arguments defining one or more
+         memberships. The arguments in this group can be used to specify the
+         attributes of this resource. (NOTE) Some attributes are not given
+         arguments in this group but can be set in other ways.
+
+         To set the project attribute:
+          ▫ provide the argument --memberships on the command line with a
+            fully specified name;
+          ▫ provide the argument --project on the command line;
+          ▫ set the property core/project.
+
+           --memberships=[MEMBERSHIPS,...]
+              IDs of the memberships or fully qualified identifiers for the
+              memberships.
+
+              To set the memberships attribute:
+              ◇ provide the argument --memberships on the command line.
+
+              This flag argument must be specified if any of the other
+              arguments in this group are specified.
+
+           --location=LOCATION
+              Location for the memberships.
+
+              To set the location attribute:
+              ◇ provide the argument --memberships on the command line with a
+                fully specified name;
+              ◇ provide the argument --location on the command line;
+              ◇ set the property gkehub/location.
+
+       --audit-interval=AUDIT_INTERVAL
+          How often Policy Controller will audit resources, in seconds.
+
+       --constraint-violation-limit=CONSTRAINT_VIOLATION_LIMIT
+          The number of violations stored on the constraint resource. Must be
+          greater than 0.
+
+       --no-default-bundles
+          If set, skip installing the default bundle of policy-essentials.
+
+       --version=VERSION
+          The version of Policy Controller to install; defaults to latest
+          version.
+
+       Exemptable Namespace flags.
+
+       At most one of these can be specified:
+
+         --clear-exemptable-namespaces
+            Removes any namespace exemptions, enabling Policy Controller on all
+            namespaces. Setting this flag will overwrite currently exempted
+            namespaces, not append.
+
+         --exemptable-namespaces=EXEMPTABLE_NAMESPACES
+            Namespaces that Policy Controller should ignore, separated by
+            commas if multiple are supplied.
+
+       Log Denies flags.
+
+       At most one of these can be specified:
+
+         --log-denies
+            If set, log all denies and dry run failures. (To disable, use
+            --no-log-denies)
+
+         --no-log-denies
+            If set, disable all log denies.
+
+       Monitoring flags.
+
+       At most one of these can be specified:
+
+         --monitoring=MONITORING
+            Monitoring backend options Policy Controller should export metrics
+            to, separated by commas if multiple are supplied. Setting this flag
+            will overwrite currently enabled backends, not append. Options:
+            prometheus, cloudmonitoring
+
+         --no-monitoring
+            Include this flag to disable the monitoring configuration of Policy
+            Controller.
+
+       Mutation flags.
+
+       At most one of these can be specified:
+
+         --mutation
+            If set, enable support for mutation. (To disable, use
+            --no-mutation)
+
+         --no-mutation
+            Disables mutation support.
+
+       Referential Rules flags.
+
+       At most one of these can be specified:
+
+         --referential-rules
+            If set, enable support for referential constraints. (To disable,
+            use --no-referential-rules)
+
+         --no-referential-rules
+            Disables referential rules support.
+
+       Flags for setting Fleet Default Configuration files.
+
+       At most one of these can be specified:
+
+         --fleet-default-member-config=FLEET_DEFAULT_MEMBER_CONFIG
+            The path to a policy-controller.yaml configuration file. If
+            specified, this configuration will become the default Policy
+            Controller configuration for all memberships in your fleet. It can
+            be overridden with a membership-specific configuration by using the
+            the Update command.
+
+                To enable the Policy Controller Feature with a fleet-level default
+                membership configuration, run:
+
+                $ gcloud beta container hub policycontroller enable \
+                --fleet-default-member-config=/path/to/policy-controller.yaml
+
+         --no-fleet-default-member-config
+            Removes the fleet default configuration for policy controller.
+            Memberships configured with the fleet default will maintain their
+            current configuration.
+
+                $ gcloud beta container hub policycontroller enable \
+                --no-fleet-default-member-config
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha container hub policycontroller enable
+