1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-17 22:36:52 +00:00

gcloud: Thu Jul 17 11:02:31 UTC 2025

This commit is contained in:
Automated 2025-07-17 11:02:31 +00:00
parent e53f7148d8
commit fe3a430c1d
365 changed files with 6027 additions and 1863 deletions

View file

@ -31,7 +31,7 @@ SYNOPSIS
[--disable-default-snat] [--disable-l4-lb-firewall-reconciliation]
[--disable-pod-cidr-overprovision] [--disk-size=DISK_SIZE]
[--disk-type=DISK_TYPE]
[--enable-authorized-networks-on-private-endpoint]
[--enable-authorized-networks-on-private-endpoint] [--enable-auto-ipam]
[--enable-autorepair] [--no-enable-autoupgrade]
[--enable-cilium-clusterwide-network-policy] [--enable-cloud-logging]
[--enable-cloud-monitoring] [--enable-cloud-run-alpha]
@ -45,13 +45,13 @@ SYNOPSIS
[--enable-ip-alias] [--enable-kubernetes-alpha]
[--enable-kubernetes-unstable-apis=API,[API,...]]
[--enable-l4-ilb-subsetting] [--enable-legacy-authorization]
[--enable-logging-monitoring-system-only] [--enable-managed-prometheus]
[--enable-master-global-access] [--enable-multi-networking]
[--enable-nested-virtualization] [--enable-network-policy]
[--enable-pod-security-policy] [--enable-ray-cluster-logging]
[--enable-ray-cluster-monitoring] [--enable-service-externalips]
[--enable-shielded-nodes] [--enable-stackdriver-kubernetes]
[--enable-vertical-pod-autoscaling]
[--enable-legacy-lustre-port] [--enable-logging-monitoring-system-only]
[--enable-managed-prometheus] [--enable-master-global-access]
[--enable-multi-networking] [--enable-nested-virtualization]
[--enable-network-policy] [--enable-pod-security-policy]
[--enable-ray-cluster-logging] [--enable-ray-cluster-monitoring]
[--enable-service-externalips] [--enable-shielded-nodes]
[--enable-stackdriver-kubernetes] [--enable-vertical-pod-autoscaling]
[--fleet-project=PROJECT_ID_OR_NUMBER] [--gateway-api=GATEWAY_API]
[--hpa-profile=HPA_PROFILE] [--identity-provider=IDENTITY_PROVIDER]
[--image-type=IMAGE_TYPE]
@ -79,7 +79,7 @@ SYNOPSIS
[--placement-policy=PLACEMENT_POLICY] [--placement-type=PLACEMENT_TYPE]
[--preemptible] [--private-endpoint-subnetwork=NAME]
[--private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE]
[--release-channel=[CHANNEL]] [--resource-manager-tags=[KEY=VALUE,...]]
[--release-channel=CHANNEL] [--resource-manager-tags=[KEY=VALUE,...]]
[--security-group=SECURITY_GROUP] [--security-posture=SECURITY_POSTURE]
[--services-ipv4-cidr=CIDR] [--services-secondary-range-name=NAME]
[--shielded-integrity-monitoring] [--shielded-secure-boot] [--spot]
@ -222,7 +222,8 @@ FLAGS
ADDON must be one of: HttpLoadBalancing, HorizontalPodAutoscaling,
KubernetesDashboard, NetworkPolicy, NodeLocalDNS, ConfigConnector,
GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, BackupRestore,
GcsFuseCsiDriver, ParallelstoreCsiDriver, RayOperator, Istio, CloudRun.
GcsFuseCsiDriver, ParallelstoreCsiDriver, LustreCsiDriver, RayOperator,
Istio, CloudRun.
--allow-route-overlap
Allows the provided cluster CIDRs to overlap with existing routes that
@ -499,6 +500,10 @@ FLAGS
Enable enforcement of --master-authorized-networks CIDR ranges for
traffic reaching cluster's control plane via private IP.
--enable-auto-ipam
Enable the Auto IP Address Management (Auto IPAM) feature for the
cluster.
--enable-autorepair
Enable node autorepair feature for a cluster's default node pool(s).
@ -662,6 +667,10 @@ FLAGS
instead. For instructions, see
https://cloud.google.com/kubernetes-engine/docs/how-to/routes-based-cluster
Note: For IPv6-only clusters, these flags are a no-op as IP Aliases do
not apply, and any specified IP address ranges for Pods and Services
will be ignored.
You can't specify both --enable-ip-alias and --no-enable-ip-alias. If
you omit both --enable-ip-alias and --no-enable-ip-alias, the default
is a VPC-native cluster.
@ -692,6 +701,12 @@ FLAGS
permissions instead, create or update your cluster with the option
--no-enable-legacy-authorization.
--enable-legacy-lustre-port
Allow the Lustre CSI driver to initialize LNet (the virtual network
layer for Lustre kernel module) using port 6988. This flag is required
to workaround a port conflict with the gke-metadata-server on GKE
nodes.
--enable-logging-monitoring-system-only
(DEPRECATED) Enable Cloud Operations system-only monitoring and
logging.
@ -1190,7 +1205,7 @@ FLAGS
PRIVATE_IPV6_GOOGLE_ACCESS_TYPE must be one of: bidirectional,
disabled, outbound-only.
--release-channel=[CHANNEL]
--release-channel=CHANNEL
Release channel a cluster is subscribed to.
If left unspecified and a version is specified, the cluster is enrolled
@ -1206,8 +1221,15 @@ FLAGS
CHANNEL must be one of:
rapid
None
Use 'None' to opt-out of any release channel.
extended
Clusters subscribed to 'extended' can remain on a minor version for
24 months from when the minor version is made available in the
Regular channel.
rapid
'rapid' channel is offered on an early access basis for customers
who want to test new releases.
@ -1215,28 +1237,15 @@ FLAGS
to unresolved issues with no known workaround and are not subject
to any SLAs.
regular
regular
Clusters subscribed to 'regular' receive versions that are
considered GA quality. 'regular' is intended for production users
who want to take advantage of new features.
extended
Clusters subscribed to 'extended' can remain on a minor version for 24 months
from when the minor version is made available in the Regular channel.
stable
stable
Clusters subscribed to 'stable' receive versions that are known to
be stable and reliable in production.
None
Use 'None' to opt-out of any release channel.
CHANNEL must be one of: rapid, regular, extended, stable, None.
--resource-manager-tags=[KEY=VALUE,...]
Applies the specified comma-separated resource manager tags that has
the GCE_FIREWALL purpose to all nodes in the new default node pool(s)
@ -1327,7 +1336,7 @@ FLAGS
VM instances.
--stack-type=STACK_TYPE
IP stack type of the node VMs. STACK_TYPE must be one of: ipv4,
IP stack type of the cluster nodes. STACK_TYPE must be one of: ipv4,
ipv4-ipv6.
--storage-pools=STORAGE_POOL,[...]
@ -1403,6 +1412,8 @@ FLAGS
'fs.mqueue.*', and 'net.*', and
sysctls under the groups.)
singleProcessOomKill true or false
maxParallelImagePulls integer (The value must be
between [2, 5].)
KEY VALUE
policy either 'Static' or 'None'
@ -1439,6 +1450,8 @@ FLAGS
net.ipv4.tcp_wmem Any positive
integer tuple
net.ipv4.tcp_tw_reuse Must be {0, 1, 2}
net.ipv4.tcp_max_orphans Must be between
[16384, 262144]
net.netfilter.nf_conntrack_max Must be between
[65536, 4194304]
net.netfilter.nf_conntrack_buckets Must be between
@ -1464,9 +1477,40 @@ FLAGS
[0,
184467440736927743
99]
fs.aio-max-nr Must be between
[65536, 4194304]
fs.file-max Must be between
[104857, 67108864]
fs.inotify.max_user_instances Must be between
[8192, 1048576]
fs.inotify.max_user_watches Must be between
[8192, 1048576]
fs.nr_open Must be between
[1048576,
2147483584]
vm.dirty_background_ratio Must be between
[1, 100]
vm.dirty_expire_centisecs Must be between
[0, 6000]
vm.dirty_ratio Must be between
[1, 100]
vm.dirty_writeback_centisecs Must be between
[0, 1000]
vm.max_map_count Must be between
[65536,
2147483647]
vm.overcommit_memory Must be one of {0,
1, 2}
vm.overcommit_ratio Must be between
[0, 100]
vm.vfs_cache_pressure Must be between
[0, 100]
vm.swappiness Must be between
[0, 200]
vm.watermark_scale_factor Must be between
[10, 3000]
vm.min_free_kbytes Must be between
[67584, 1048576]
List of supported hugepage size in 'hugepageConfig'.
@ -1487,6 +1531,47 @@ FLAGS
◆ CGROUP_MODE_V2: Use cgroupv2 on the node pool.
◆ CGROUP_MODE_UNSPECIFIED: Use the default GKE cgroup configuration.
Supported values for 'transparentHugepageEnabled' under 'linuxConfig'
which controls transparent hugepage support for anonymous memory.
◆ TRANSPARENT_HUGEPAGE_ENABLED_ALWAYS: Transparent hugepage is
enabled system wide.
◆ TRANSPARENT_HUGEPAGE_ENABLED_MADVISE: Transparent hugepage is
enabled inside MADV_HUGEPAGE regions. This is the default kernel
configuration.
◆ TRANSPARENT_HUGEPAGE_ENABLED_NEVER: Transparent hugepage is
disabled.
◆ TRANSPARENT_HUGEPAGE_ENABLED_UNSPECIFIED: Default value. GKE will
not modify the kernel configuration.
Supported values for 'transparentHugepageDefrag' under 'linuxConfig'
which defines the transparent hugepage defrag configuration on the
node.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_ALWAYS: It means that an application
requesting THP will stall on allocation failure and directly reclaim
pages and compact memory in an effort to allocate a THP immediately.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_DEFER: It means that an application
will wake kswapd in the background to reclaim pages and wake
kcompactd to compact memory so that THP is available in the near
future. It is the responsibility of khugepaged to then install the
THP pages later.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_DEFER_WITH_MADVISE: It means that an
application will enter direct reclaim and compaction like always, but
only for regions that have used madvise(MADV_HUGEPAGE); all other
regions will wake kswapd in the background to reclaim pages and wake
kcompactd to compact memory so that THP is available in the near
future.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_MADVISE: It means that an application
will enter direct reclaim and compaction like always, but only for
regions that have used madvise(MADV_HUGEPAGE); all other regions will
wake kswapd in the background to reclaim pages and wake kcompactd to
compact memory so that THP is available in the near future.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_NEVER: It means that an application
will never enter direct reclaim or compaction.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_UNSPECIFIED: Default value. GKE will
not modify the kernel configuration.
Note, updating the system configuration of an existing node pool
requires recreation of the nodes which which might cause a disruption.