mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-17 22:36:52 +00:00
gcloud: Thu Jul 17 11:02:31 UTC 2025
This commit is contained in:
parent
e53f7148d8
commit
fe3a430c1d
365 changed files with 6027 additions and 1863 deletions
|
|
@ -31,7 +31,7 @@ SYNOPSIS
|
|||
[--disable-default-snat] [--disable-l4-lb-firewall-reconciliation]
|
||||
[--disable-pod-cidr-overprovision] [--disk-size=DISK_SIZE]
|
||||
[--disk-type=DISK_TYPE]
|
||||
[--enable-authorized-networks-on-private-endpoint]
|
||||
[--enable-authorized-networks-on-private-endpoint] [--enable-auto-ipam]
|
||||
[--enable-autorepair] [--no-enable-autoupgrade]
|
||||
[--enable-cilium-clusterwide-network-policy] [--enable-cloud-logging]
|
||||
[--enable-cloud-monitoring] [--enable-cloud-run-alpha]
|
||||
|
|
@ -45,13 +45,13 @@ SYNOPSIS
|
|||
[--enable-ip-alias] [--enable-kubernetes-alpha]
|
||||
[--enable-kubernetes-unstable-apis=API,[API,...]]
|
||||
[--enable-l4-ilb-subsetting] [--enable-legacy-authorization]
|
||||
[--enable-logging-monitoring-system-only] [--enable-managed-prometheus]
|
||||
[--enable-master-global-access] [--enable-multi-networking]
|
||||
[--enable-nested-virtualization] [--enable-network-policy]
|
||||
[--enable-pod-security-policy] [--enable-ray-cluster-logging]
|
||||
[--enable-ray-cluster-monitoring] [--enable-service-externalips]
|
||||
[--enable-shielded-nodes] [--enable-stackdriver-kubernetes]
|
||||
[--enable-vertical-pod-autoscaling]
|
||||
[--enable-legacy-lustre-port] [--enable-logging-monitoring-system-only]
|
||||
[--enable-managed-prometheus] [--enable-master-global-access]
|
||||
[--enable-multi-networking] [--enable-nested-virtualization]
|
||||
[--enable-network-policy] [--enable-pod-security-policy]
|
||||
[--enable-ray-cluster-logging] [--enable-ray-cluster-monitoring]
|
||||
[--enable-service-externalips] [--enable-shielded-nodes]
|
||||
[--enable-stackdriver-kubernetes] [--enable-vertical-pod-autoscaling]
|
||||
[--fleet-project=PROJECT_ID_OR_NUMBER] [--gateway-api=GATEWAY_API]
|
||||
[--hpa-profile=HPA_PROFILE] [--identity-provider=IDENTITY_PROVIDER]
|
||||
[--image-type=IMAGE_TYPE]
|
||||
|
|
@ -79,7 +79,7 @@ SYNOPSIS
|
|||
[--placement-policy=PLACEMENT_POLICY] [--placement-type=PLACEMENT_TYPE]
|
||||
[--preemptible] [--private-endpoint-subnetwork=NAME]
|
||||
[--private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE]
|
||||
[--release-channel=[CHANNEL]] [--resource-manager-tags=[KEY=VALUE,...]]
|
||||
[--release-channel=CHANNEL] [--resource-manager-tags=[KEY=VALUE,...]]
|
||||
[--security-group=SECURITY_GROUP] [--security-posture=SECURITY_POSTURE]
|
||||
[--services-ipv4-cidr=CIDR] [--services-secondary-range-name=NAME]
|
||||
[--shielded-integrity-monitoring] [--shielded-secure-boot] [--spot]
|
||||
|
|
@ -222,7 +222,8 @@ FLAGS
|
|||
ADDON must be one of: HttpLoadBalancing, HorizontalPodAutoscaling,
|
||||
KubernetesDashboard, NetworkPolicy, NodeLocalDNS, ConfigConnector,
|
||||
GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, BackupRestore,
|
||||
GcsFuseCsiDriver, ParallelstoreCsiDriver, RayOperator, Istio, CloudRun.
|
||||
GcsFuseCsiDriver, ParallelstoreCsiDriver, LustreCsiDriver, RayOperator,
|
||||
Istio, CloudRun.
|
||||
|
||||
--allow-route-overlap
|
||||
Allows the provided cluster CIDRs to overlap with existing routes that
|
||||
|
|
@ -499,6 +500,10 @@ FLAGS
|
|||
Enable enforcement of --master-authorized-networks CIDR ranges for
|
||||
traffic reaching cluster's control plane via private IP.
|
||||
|
||||
--enable-auto-ipam
|
||||
Enable the Auto IP Address Management (Auto IPAM) feature for the
|
||||
cluster.
|
||||
|
||||
--enable-autorepair
|
||||
Enable node autorepair feature for a cluster's default node pool(s).
|
||||
|
||||
|
|
@ -662,6 +667,10 @@ FLAGS
|
|||
instead. For instructions, see
|
||||
https://cloud.google.com/kubernetes-engine/docs/how-to/routes-based-cluster
|
||||
|
||||
Note: For IPv6-only clusters, these flags are a no-op as IP Aliases do
|
||||
not apply, and any specified IP address ranges for Pods and Services
|
||||
will be ignored.
|
||||
|
||||
You can't specify both --enable-ip-alias and --no-enable-ip-alias. If
|
||||
you omit both --enable-ip-alias and --no-enable-ip-alias, the default
|
||||
is a VPC-native cluster.
|
||||
|
|
@ -692,6 +701,12 @@ FLAGS
|
|||
permissions instead, create or update your cluster with the option
|
||||
--no-enable-legacy-authorization.
|
||||
|
||||
--enable-legacy-lustre-port
|
||||
Allow the Lustre CSI driver to initialize LNet (the virtual network
|
||||
layer for Lustre kernel module) using port 6988. This flag is required
|
||||
to workaround a port conflict with the gke-metadata-server on GKE
|
||||
nodes.
|
||||
|
||||
--enable-logging-monitoring-system-only
|
||||
(DEPRECATED) Enable Cloud Operations system-only monitoring and
|
||||
logging.
|
||||
|
|
@ -1190,7 +1205,7 @@ FLAGS
|
|||
PRIVATE_IPV6_GOOGLE_ACCESS_TYPE must be one of: bidirectional,
|
||||
disabled, outbound-only.
|
||||
|
||||
--release-channel=[CHANNEL]
|
||||
--release-channel=CHANNEL
|
||||
Release channel a cluster is subscribed to.
|
||||
|
||||
If left unspecified and a version is specified, the cluster is enrolled
|
||||
|
|
@ -1206,8 +1221,15 @@ FLAGS
|
|||
|
||||
CHANNEL must be one of:
|
||||
|
||||
rapid
|
||||
None
|
||||
Use 'None' to opt-out of any release channel.
|
||||
|
||||
extended
|
||||
Clusters subscribed to 'extended' can remain on a minor version for
|
||||
24 months from when the minor version is made available in the
|
||||
Regular channel.
|
||||
|
||||
rapid
|
||||
'rapid' channel is offered on an early access basis for customers
|
||||
who want to test new releases.
|
||||
|
||||
|
|
@ -1215,28 +1237,15 @@ FLAGS
|
|||
to unresolved issues with no known workaround and are not subject
|
||||
to any SLAs.
|
||||
|
||||
regular
|
||||
|
||||
regular
|
||||
Clusters subscribed to 'regular' receive versions that are
|
||||
considered GA quality. 'regular' is intended for production users
|
||||
who want to take advantage of new features.
|
||||
|
||||
extended
|
||||
|
||||
Clusters subscribed to 'extended' can remain on a minor version for 24 months
|
||||
from when the minor version is made available in the Regular channel.
|
||||
|
||||
stable
|
||||
|
||||
stable
|
||||
Clusters subscribed to 'stable' receive versions that are known to
|
||||
be stable and reliable in production.
|
||||
|
||||
None
|
||||
|
||||
Use 'None' to opt-out of any release channel.
|
||||
|
||||
CHANNEL must be one of: rapid, regular, extended, stable, None.
|
||||
|
||||
--resource-manager-tags=[KEY=VALUE,...]
|
||||
Applies the specified comma-separated resource manager tags that has
|
||||
the GCE_FIREWALL purpose to all nodes in the new default node pool(s)
|
||||
|
|
@ -1327,7 +1336,7 @@ FLAGS
|
|||
VM instances.
|
||||
|
||||
--stack-type=STACK_TYPE
|
||||
IP stack type of the node VMs. STACK_TYPE must be one of: ipv4,
|
||||
IP stack type of the cluster nodes. STACK_TYPE must be one of: ipv4,
|
||||
ipv4-ipv6.
|
||||
|
||||
--storage-pools=STORAGE_POOL,[...]
|
||||
|
|
@ -1403,6 +1412,8 @@ FLAGS
|
|||
'fs.mqueue.*', and 'net.*', and
|
||||
sysctls under the groups.)
|
||||
singleProcessOomKill true or false
|
||||
maxParallelImagePulls integer (The value must be
|
||||
between [2, 5].)
|
||||
|
||||
KEY VALUE
|
||||
policy either 'Static' or 'None'
|
||||
|
|
@ -1439,6 +1450,8 @@ FLAGS
|
|||
net.ipv4.tcp_wmem Any positive
|
||||
integer tuple
|
||||
net.ipv4.tcp_tw_reuse Must be {0, 1, 2}
|
||||
net.ipv4.tcp_max_orphans Must be between
|
||||
[16384, 262144]
|
||||
net.netfilter.nf_conntrack_max Must be between
|
||||
[65536, 4194304]
|
||||
net.netfilter.nf_conntrack_buckets Must be between
|
||||
|
|
@ -1464,9 +1477,40 @@ FLAGS
|
|||
[0,
|
||||
184467440736927743
|
||||
99]
|
||||
fs.aio-max-nr Must be between
|
||||
[65536, 4194304]
|
||||
fs.file-max Must be between
|
||||
[104857, 67108864]
|
||||
fs.inotify.max_user_instances Must be between
|
||||
[8192, 1048576]
|
||||
fs.inotify.max_user_watches Must be between
|
||||
[8192, 1048576]
|
||||
fs.nr_open Must be between
|
||||
[1048576,
|
||||
2147483584]
|
||||
vm.dirty_background_ratio Must be between
|
||||
[1, 100]
|
||||
vm.dirty_expire_centisecs Must be between
|
||||
[0, 6000]
|
||||
vm.dirty_ratio Must be between
|
||||
[1, 100]
|
||||
vm.dirty_writeback_centisecs Must be between
|
||||
[0, 1000]
|
||||
vm.max_map_count Must be between
|
||||
[65536,
|
||||
2147483647]
|
||||
vm.overcommit_memory Must be one of {0,
|
||||
1, 2}
|
||||
vm.overcommit_ratio Must be between
|
||||
[0, 100]
|
||||
vm.vfs_cache_pressure Must be between
|
||||
[0, 100]
|
||||
vm.swappiness Must be between
|
||||
[0, 200]
|
||||
vm.watermark_scale_factor Must be between
|
||||
[10, 3000]
|
||||
vm.min_free_kbytes Must be between
|
||||
[67584, 1048576]
|
||||
|
||||
List of supported hugepage size in 'hugepageConfig'.
|
||||
|
||||
|
|
@ -1487,6 +1531,47 @@ FLAGS
|
|||
◆ CGROUP_MODE_V2: Use cgroupv2 on the node pool.
|
||||
◆ CGROUP_MODE_UNSPECIFIED: Use the default GKE cgroup configuration.
|
||||
|
||||
Supported values for 'transparentHugepageEnabled' under 'linuxConfig'
|
||||
which controls transparent hugepage support for anonymous memory.
|
||||
|
||||
◆ TRANSPARENT_HUGEPAGE_ENABLED_ALWAYS: Transparent hugepage is
|
||||
enabled system wide.
|
||||
◆ TRANSPARENT_HUGEPAGE_ENABLED_MADVISE: Transparent hugepage is
|
||||
enabled inside MADV_HUGEPAGE regions. This is the default kernel
|
||||
configuration.
|
||||
◆ TRANSPARENT_HUGEPAGE_ENABLED_NEVER: Transparent hugepage is
|
||||
disabled.
|
||||
◆ TRANSPARENT_HUGEPAGE_ENABLED_UNSPECIFIED: Default value. GKE will
|
||||
not modify the kernel configuration.
|
||||
|
||||
Supported values for 'transparentHugepageDefrag' under 'linuxConfig'
|
||||
which defines the transparent hugepage defrag configuration on the
|
||||
node.
|
||||
|
||||
◆ TRANSPARENT_HUGEPAGE_DEFRAG_ALWAYS: It means that an application
|
||||
requesting THP will stall on allocation failure and directly reclaim
|
||||
pages and compact memory in an effort to allocate a THP immediately.
|
||||
◆ TRANSPARENT_HUGEPAGE_DEFRAG_DEFER: It means that an application
|
||||
will wake kswapd in the background to reclaim pages and wake
|
||||
kcompactd to compact memory so that THP is available in the near
|
||||
future. It is the responsibility of khugepaged to then install the
|
||||
THP pages later.
|
||||
◆ TRANSPARENT_HUGEPAGE_DEFRAG_DEFER_WITH_MADVISE: It means that an
|
||||
application will enter direct reclaim and compaction like always, but
|
||||
only for regions that have used madvise(MADV_HUGEPAGE); all other
|
||||
regions will wake kswapd in the background to reclaim pages and wake
|
||||
kcompactd to compact memory so that THP is available in the near
|
||||
future.
|
||||
◆ TRANSPARENT_HUGEPAGE_DEFRAG_MADVISE: It means that an application
|
||||
will enter direct reclaim and compaction like always, but only for
|
||||
regions that have used madvise(MADV_HUGEPAGE); all other regions will
|
||||
wake kswapd in the background to reclaim pages and wake kcompactd to
|
||||
compact memory so that THP is available in the near future.
|
||||
◆ TRANSPARENT_HUGEPAGE_DEFRAG_NEVER: It means that an application
|
||||
will never enter direct reclaim or compaction.
|
||||
◆ TRANSPARENT_HUGEPAGE_DEFRAG_UNSPECIFIED: Default value. GKE will
|
||||
not modify the kernel configuration.
|
||||
|
||||
Note, updating the system configuration of an existing node pool
|
||||
requires recreation of the nodes which which might cause a disruption.
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue