gcloud: Sat Jun 14 05:31:37 UTC 2025

gcloud/beta/container/clusters/check-autopilot-compatibility

@@ -11,6 +11,13 @@ SYNOPSIS
 DESCRIPTION
     (BETA) Check autopilot compatibility of a running cluster.
 
+    For clusters with GKE version 1.31.6-gke.1027000 or later, you must enable
+    the control plane component that performs the check by running the gcloud
+    container clusters update command with the
+    `--enable-autopilot-compatiblity-auditing`
+    (https://cloud.google.com/sdk/gcloud/reference/container/clusters/update#--%5Bno-%5Denable-autopilot-compatibility-auditing)
+    flag.
+
 EXAMPLES
     To check autopilot compatibility of an existing cluster, run:
 

gcloud/beta/container/clusters/create

@@ -10,6 +10,8 @@ SYNOPSIS
           gpu-sharing-strategy=GPU_SHARING_STRATEGY,
           max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]]
         [--addons=[ADDON[=ENABLED|DISABLED],...]] [--allow-route-overlap]
+        [--alpha-cluster-feature-gates=[FEATURE=true|false,...]]
+        [--anonymous-authentication-config=ANONYMOUS_AUTHENTICATION_CONFIG]
         [--async] [--auto-monitoring-scope=AUTO_MONITORING_SCOPE]
         [--autoprovisioning-enable-insecure-kubelet-readonly-port]
         [--autoprovisioning-network-tags=TAGS,[TAGS,...]]
@@ -72,6 +74,7 @@ SYNOPSIS
         [--node-version=NODE_VERSION]
         [--notification-config=[pubsub=ENABLED|DISABLED,
           pubsub-topic=TOPIC,...]] [--num-nodes=NUM_NODES; default=3]
+        [--performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT]
         [--placement-policy=PLACEMENT_POLICY] [--placement-type=PLACEMENT_TYPE]
         [--preemptible] [--private-endpoint-subnetwork=NAME]
         [--private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE]
@@ -232,6 +235,28 @@ FLAGS
         Must be used in conjunction with '--enable-ip-alias' or
         '--no-enable-ip-alias'.
 
+     --alpha-cluster-feature-gates=[FEATURE=true|false,...]
+        Selectively enable or disable Kubernetes alpha and beta
+        kubernetesfeature gates on alpha GKE cluster. Alpha clusters are not
+        covered by the Kubernetes Engine SLA and should not be used for
+        production workloads.
+
+     --anonymous-authentication-config=ANONYMOUS_AUTHENTICATION_CONFIG
+        Enable or restrict anonymous access to the cluster. When enabled,
+        anonymous users will be authenticated as system:anonymous with the
+        group system:unauthenticated. Limiting access restricts anonymous
+        access to only the health check endpoints /readyz, /livez, and
+        /healthz.
+
+        ANONYMOUS_AUTHENTICATION_CONFIG must be one of:
+
+         ENABLED
+            'ENABLED' enables anonymous calls.
+         LIMITED
+            'LIMITED' restricts anonymous access to the cluster. Only calls to
+            the health check endpoints are allowed anonymously, all other calls
+            will be rejected.
+
      --async
         Return immediately, without waiting for the operation in progress to
         complete.
@@ -1077,6 +1102,19 @@ FLAGS
      --num-nodes=NUM_NODES; default=3
         The number of nodes to be created in each of the cluster's zones.
 
+     --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT
+        Sets the Performance Monitoring Unit level. Valid values are
+        architectural, standard and enhanced. PERFORMANCE_MONITORING_UNIT must
+        be one of:
+
+         architectural
+            Enables architectural PMU events tied to non last level cache (LLC)
+            events.
+         enhanced
+            Enables most documented core/L2 and LLC PMU events.
+         standard
+            Enables most documented core/L2 PMU events.
+
      --placement-policy=PLACEMENT_POLICY
         Indicates the desired resource policy to use.
 

gcloud/beta/container/clusters/create-auto

@@ -3,8 +3,9 @@ NAME
         for running containers
 
 SYNOPSIS
-    gcloud beta container clusters create-auto NAME [--async]
-        [--auto-monitoring-scope=AUTO_MONITORING_SCOPE]
+    gcloud beta container clusters create-auto NAME
+        [--anonymous-authentication-config=ANONYMOUS_AUTHENTICATION_CONFIG]
+        [--async] [--auto-monitoring-scope=AUTO_MONITORING_SCOPE]
         [--autoprovisioning-enable-insecure-kubelet-readonly-port]
         [--autoprovisioning-network-tags=TAGS,[TAGS,...]]
         [--autoprovisioning-resource-manager-tags=[KEY=VALUE,...]]
@@ -73,6 +74,22 @@ POSITIONAL ARGUMENTS
         40 characters.
 
 FLAGS
+     --anonymous-authentication-config=ANONYMOUS_AUTHENTICATION_CONFIG
+        Enable or restrict anonymous access to the cluster. When enabled,
+        anonymous users will be authenticated as system:anonymous with the
+        group system:unauthenticated. Limiting access restricts anonymous
+        access to only the health check endpoints /readyz, /livez, and
+        /healthz.
+
+        ANONYMOUS_AUTHENTICATION_CONFIG must be one of:
+
+         ENABLED
+            'ENABLED' enables anonymous calls.
+         LIMITED
+            'LIMITED' restricts anonymous access to the cluster. Only calls to
+            the health check endpoints are allowed anonymously, all other calls
+            will be rejected.
+
      --async
         Return immediately, without waiting for the operation in progress to
         complete.

gcloud/beta/container/clusters/update

@@ -4,7 +4,8 @@ NAME
 
 SYNOPSIS
     gcloud beta container clusters update NAME
-        (--autoprovisioning-cgroup-mode=AUTOPROVISIONING_CGROUP_MODE
+        (--anonymous-authentication-config=ANONYMOUS_AUTHENTICATION_CONFIG
+          | --autoprovisioning-cgroup-mode=AUTOPROVISIONING_CGROUP_MODE
           | --autoprovisioning-enable-insecure-kubelet-readonly-port
           | --autoprovisioning-network-tags=[TAGS,...]
           | --autoprovisioning-resource-manager-tags=[KEY=VALUE,...]
@@ -136,6 +137,22 @@ POSITIONAL ARGUMENTS
 REQUIRED FLAGS
      Exactly one of these must be specified:
 
+       --anonymous-authentication-config=ANONYMOUS_AUTHENTICATION_CONFIG
+          Enable or restrict anonymous access to the cluster. When enabled,
+          anonymous users will be authenticated as system:anonymous with the
+          group system:unauthenticated. Limiting access restricts anonymous
+          access to only the health check endpoints /readyz, /livez, and
+          /healthz.
+
+          ANONYMOUS_AUTHENTICATION_CONFIG must be one of:
+
+           ENABLED
+              'ENABLED' enables anonymous calls.
+           LIMITED
+              'LIMITED' restricts anonymous access to the cluster. Only calls
+              to the health check endpoints are allowed anonymously, all other
+              calls will be rejected.
+
        --autoprovisioning-cgroup-mode=AUTOPROVISIONING_CGROUP_MODE
           Sets the cgroup mode for auto-provisioned nodes.
 
@@ -310,10 +327,16 @@ REQUIRED FLAGS
               https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
 
        --[no-]enable-autopilot-compatibility-auditing
-          Enables the Autopilot Compatibility Auditing Feature. See
-          https://cloud.google.com/sdk/gcloud/reference/container/clusters/check-autopilot-compatibility.
-          Only applicable to clusters with version >= 1.32. Use
-          --enable-autopilot-compatibility-auditing to enable and
+          Lets you run the gcloud container clusters
+          check-autopilot-compatibility
+          (https://cloud.google.com/sdk/gcloud/reference/container/clusters/check-autopilot-compatibility)
+          command to check whether your workloads are compatible with Autopilot
+          mode. This flag is only applicable to clusters that run version
+          1.31.6-gke.1027000 or later.
+
+          Note: This flag causes a control plane restart.
+
+          Use --enable-autopilot-compatibility-auditing to enable and
           --no-enable-autopilot-compatibility-auditing to disable.
 
        --enable-autoscaling