imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-13 16:37:00 +00:00
Code Activity

gcloud: Thu Jul 17 11:02:31 UTC 2025

Browse source
This commit is contained in:
Automated 2025-07-17 11:02:31 +00:00
parent e53f7148d8
commit fe3a430c1d
365 changed files with 6027 additions and 1863 deletions
Download patch file Download diff file Expand all files Collapse all files

140
gcloud/container/clusters/create
View file

@ -30,7 +30,7 @@ SYNOPSIS
[--default-max-pods-per-node=DEFAULT_MAX_PODS_PER_NODE]
[--disable-default-snat] [--disable-l4-lb-firewall-reconciliation]
[--disk-size=DISK_SIZE] [--disk-type=DISK_TYPE]
[--enable-authorized-networks-on-private-endpoint]
[--enable-authorized-networks-on-private-endpoint] [--enable-auto-ipam]
[--enable-autorepair] [--no-enable-autoupgrade]
[--enable-cilium-clusterwide-network-policy] [--enable-cloud-logging]
[--enable-cloud-monitoring] [--enable-cloud-run-alpha]
@ -44,12 +44,13 @@ SYNOPSIS
[--enable-ip-alias] [--enable-kubernetes-alpha]
[--enable-kubernetes-unstable-apis=API,[API,...]]
[--enable-l4-ilb-subsetting] [--enable-legacy-authorization]
[--enable-managed-prometheus] [--enable-master-global-access]
[--enable-multi-networking] [--enable-nested-virtualization]
[--enable-network-policy] [--enable-ray-cluster-logging]
[--enable-ray-cluster-monitoring] [--enable-secret-manager]
[--enable-service-externalips] [--enable-shielded-nodes]
[--enable-stackdriver-kubernetes] [--enable-vertical-pod-autoscaling]
[--enable-legacy-lustre-port] [--enable-managed-prometheus]
[--enable-master-global-access] [--enable-multi-networking]
[--enable-nested-virtualization] [--enable-network-policy]
[--enable-ray-cluster-logging] [--enable-ray-cluster-monitoring]
[--enable-secret-manager] [--enable-service-externalips]
[--enable-shielded-nodes] [--enable-stackdriver-kubernetes]
[--enable-vertical-pod-autoscaling]
[--fleet-project=PROJECT_ID_OR_NUMBER] [--gateway-api=GATEWAY_API]
[--hpa-profile=HPA_PROFILE] [--image-type=IMAGE_TYPE]
[--in-transit-encryption=IN_TRANSIT_ENCRYPTION]
@ -75,7 +76,7 @@ SYNOPSIS
[--placement-policy=PLACEMENT_POLICY] [--placement-type=PLACEMENT_TYPE]
[--preemptible] [--private-endpoint-subnetwork=NAME]
[--private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE]
[--release-channel=[CHANNEL]] [--resource-manager-tags=[KEY=VALUE,...]]
[--release-channel=CHANNEL] [--resource-manager-tags=[KEY=VALUE,...]]
[--security-group=SECURITY_GROUP] [--security-posture=SECURITY_POSTURE]
[--services-ipv4-cidr=CIDR] [--services-secondary-range-name=NAME]
[--shielded-integrity-monitoring] [--shielded-secure-boot] [--spot]
@ -232,7 +233,8 @@ FLAGS
ADDON must be one of: HttpLoadBalancing, HorizontalPodAutoscaling,
KubernetesDashboard, NetworkPolicy, NodeLocalDNS, ConfigConnector,
GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, BackupRestore,
GcsFuseCsiDriver, ParallelstoreCsiDriver, RayOperator, CloudRun.
GcsFuseCsiDriver, ParallelstoreCsiDriver, LustreCsiDriver, RayOperator,
CloudRun.
--alpha-cluster-feature-gates=[FEATURE=true|false,...]
Selectively enable or disable Kubernetes alpha and beta
@ -492,6 +494,10 @@ FLAGS
Enable enforcement of --master-authorized-networks CIDR ranges for
traffic reaching cluster's control plane via private IP.
--enable-auto-ipam
Enable the Auto IP Address Management (Auto IPAM) feature for the
cluster.
--enable-autorepair
Enable node autorepair feature for a cluster's default node pool(s).
@ -641,6 +647,10 @@ FLAGS
instead. For instructions, see
https://cloud.google.com/kubernetes-engine/docs/how-to/routes-based-cluster
Note: For IPv6-only clusters, these flags are a no-op as IP Aliases do
not apply, and any specified IP address ranges for Pods and Services
will be ignored.
You can't specify both --enable-ip-alias and --no-enable-ip-alias. If
you omit both --enable-ip-alias and --no-enable-ip-alias, the default
is a VPC-native cluster.
@ -671,6 +681,12 @@ FLAGS
permissions instead, create or update your cluster with the option
--no-enable-legacy-authorization.
--enable-legacy-lustre-port
Allow the Lustre CSI driver to initialize LNet (the virtual network
layer for Lustre kernel module) using port 6988. This flag is required
to workaround a port conflict with the gke-metadata-server on GKE
nodes.
--enable-managed-prometheus
Enables managed collection for Managed Service for Prometheus in the
cluster.
@ -1153,7 +1169,7 @@ FLAGS
PRIVATE_IPV6_GOOGLE_ACCESS_TYPE must be one of: bidirectional,
disabled, outbound-only.
--release-channel=[CHANNEL]
--release-channel=CHANNEL
Release channel a cluster is subscribed to.
If left unspecified and a version is specified, the cluster is enrolled
@ -1169,8 +1185,15 @@ FLAGS
CHANNEL must be one of:
rapid
None
Use 'None' to opt-out of any release channel.
extended
Clusters subscribed to 'extended' can remain on a minor version for
24 months from when the minor version is made available in the
Regular channel.
rapid
'rapid' channel is offered on an early access basis for customers
who want to test new releases.
@ -1178,28 +1201,15 @@ FLAGS
to unresolved issues with no known workaround and are not subject
to any SLAs.
regular
regular
Clusters subscribed to 'regular' receive versions that are
considered GA quality. 'regular' is intended for production users
who want to take advantage of new features.
extended
Clusters subscribed to 'extended' can remain on a minor version for 24 months
from when the minor version is made available in the Regular channel.
stable
stable
Clusters subscribed to 'stable' receive versions that are known to
be stable and reliable in production.
None
Use 'None' to opt-out of any release channel.
CHANNEL must be one of: rapid, regular, extended, stable, None.
--resource-manager-tags=[KEY=VALUE,...]
Applies the specified comma-separated resource manager tags that has
the GCE_FIREWALL purpose to all nodes in the new default node pool(s)
@ -1290,7 +1300,7 @@ FLAGS
VM instances.
--stack-type=STACK_TYPE
IP stack type of the node VMs. STACK_TYPE must be one of: ipv4,
IP stack type of the cluster nodes. STACK_TYPE must be one of: ipv4,
ipv4-ipv6.
--storage-pools=STORAGE_POOL,[...]
@ -1366,6 +1376,8 @@ FLAGS
'fs.mqueue.*', and 'net.*', and
sysctls under the groups.)
singleProcessOomKill true or false
maxParallelImagePulls integer (The value must be
between [2, 5].)
KEY VALUE
policy either 'Static' or 'None'
@ -1402,6 +1414,8 @@ FLAGS
net.ipv4.tcp_wmem Any positive
integer tuple
net.ipv4.tcp_tw_reuse Must be {0, 1, 2}
net.ipv4.tcp_max_orphans Must be between
[16384, 262144]
net.netfilter.nf_conntrack_max Must be between
[65536, 4194304]
net.netfilter.nf_conntrack_buckets Must be between
@ -1427,9 +1441,40 @@ FLAGS
[0,
184467440736927743
99]
fs.aio-max-nr Must be between
[65536, 4194304]
fs.file-max Must be between
[104857, 67108864]
fs.inotify.max_user_instances Must be between
[8192, 1048576]
fs.inotify.max_user_watches Must be between
[8192, 1048576]
fs.nr_open Must be between
[1048576,
2147483584]
vm.dirty_background_ratio Must be between
[1, 100]
vm.dirty_expire_centisecs Must be between
[0, 6000]
vm.dirty_ratio Must be between
[1, 100]
vm.dirty_writeback_centisecs Must be between
[0, 1000]
vm.max_map_count Must be between
[65536,
2147483647]
vm.overcommit_memory Must be one of {0,
1, 2}
vm.overcommit_ratio Must be between
[0, 100]
vm.vfs_cache_pressure Must be between
[0, 100]
vm.swappiness Must be between
[0, 200]
vm.watermark_scale_factor Must be between
[10, 3000]
vm.min_free_kbytes Must be between
[67584, 1048576]
List of supported hugepage size in 'hugepageConfig'.
@ -1450,6 +1495,47 @@ FLAGS
◆ CGROUP_MODE_V2: Use cgroupv2 on the node pool.
◆ CGROUP_MODE_UNSPECIFIED: Use the default GKE cgroup configuration.
Supported values for 'transparentHugepageEnabled' under 'linuxConfig'
which controls transparent hugepage support for anonymous memory.
◆ TRANSPARENT_HUGEPAGE_ENABLED_ALWAYS: Transparent hugepage is
enabled system wide.
◆ TRANSPARENT_HUGEPAGE_ENABLED_MADVISE: Transparent hugepage is
enabled inside MADV_HUGEPAGE regions. This is the default kernel
configuration.
◆ TRANSPARENT_HUGEPAGE_ENABLED_NEVER: Transparent hugepage is
disabled.
◆ TRANSPARENT_HUGEPAGE_ENABLED_UNSPECIFIED: Default value. GKE will
not modify the kernel configuration.
Supported values for 'transparentHugepageDefrag' under 'linuxConfig'
which defines the transparent hugepage defrag configuration on the
node.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_ALWAYS: It means that an application
requesting THP will stall on allocation failure and directly reclaim
pages and compact memory in an effort to allocate a THP immediately.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_DEFER: It means that an application
will wake kswapd in the background to reclaim pages and wake
kcompactd to compact memory so that THP is available in the near
future. It is the responsibility of khugepaged to then install the
THP pages later.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_DEFER_WITH_MADVISE: It means that an
application will enter direct reclaim and compaction like always, but
only for regions that have used madvise(MADV_HUGEPAGE); all other
regions will wake kswapd in the background to reclaim pages and wake
kcompactd to compact memory so that THP is available in the near
future.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_MADVISE: It means that an application
will enter direct reclaim and compaction like always, but only for
regions that have used madvise(MADV_HUGEPAGE); all other regions will
wake kswapd in the background to reclaim pages and wake kcompactd to
compact memory so that THP is available in the near future.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_NEVER: It means that an application
will never enter direct reclaim or compaction.
◆ TRANSPARENT_HUGEPAGE_DEFRAG_UNSPECIFIED: Default value. GKE will
not modify the kernel configuration.
Note, updating the system configuration of an existing node pool
requires recreation of the nodes which which might cause a disruption.

50
gcloud/container/clusters/create-auto
View file

@ -18,17 +18,19 @@ SYNOPSIS
[--create-subnetwork=[KEY=VALUE,...]]
[--database-encryption-key=DATABASE_ENCRYPTION_KEY]
[--disable-l4-lb-firewall-reconciliation]
[--enable-authorized-networks-on-private-endpoint]
[--enable-authorized-networks-on-private-endpoint] [--enable-auto-ipam]
[--enable-backup-restore] [--enable-cilium-clusterwide-network-policy]
[--enable-dns-access] [--enable-fleet] [--enable-google-cloud-access]
[--enable-ip-access] [--enable-kubernetes-unstable-apis=API,[API,...]]
[--enable-confidential-nodes] [--enable-dns-access] [--enable-fleet]
[--enable-google-cloud-access] [--enable-ip-access]
[--enable-kubernetes-unstable-apis=API,[API,...]]
[--enable-legacy-lustre-port] [--enable-lustre-csi-driver]
[--enable-master-global-access] [--enable-multi-networking]
[--enable-ray-cluster-logging] [--enable-ray-cluster-monitoring]
[--enable-ray-operator] [--enable-secret-manager]
[--fleet-project=PROJECT_ID_OR_NUMBER] [--hpa-profile=HPA_PROFILE]
[--labels=[KEY=VALUE,...]] [--logging=[COMPONENT,...]]
[--monitoring=[COMPONENT,...]] [--network=NETWORK]
[--private-endpoint-subnetwork=NAME] [--release-channel=[CHANNEL]]
[--private-endpoint-subnetwork=NAME] [--release-channel=CHANNEL]
[--security-group=SECURITY_GROUP] [--security-posture=SECURITY_POSTURE]
[--services-ipv4-cidr=CIDR] [--services-secondary-range-name=NAME]
[--subnetwork=SUBNETWORK] [--tier=TIER]
@ -266,6 +268,10 @@ FLAGS
Enable enforcement of --master-authorized-networks CIDR ranges for
traffic reaching cluster's control plane via private IP.
--enable-auto-ipam
Enable the Auto IP Address Management (Auto IPAM) feature for the
cluster.
--enable-backup-restore
Enable the Backup for GKE add-on. This add-on is disabled by default.
To learn more, see the Backup for GKE overview:
@ -275,6 +281,11 @@ FLAGS
Enable Cilium Clusterwide Network Policies on the cluster. Disabled by
default.
--enable-confidential-nodes
Enable confidential nodes for the cluster. Enabling Confidential Nodes
will create nodes using Confidential VM
https://cloud.google.com/compute/confidential-vm/docs/about-cvm.
--enable-dns-access
Enable access to the cluster's control plane over DNS-based endpoint.
@ -300,6 +311,16 @@ FLAGS
expected to be production ready and should be avoided in
production-grade environments.
--enable-legacy-lustre-port
Allow the Lustre CSI driver to initialize LNet (the virtual network
layer for Lustre kernel module) using port 6988. This flag is required
to workaround a port conflict with the gke-metadata-server on GKE
nodes.
--enable-lustre-csi-driver
Enable the Lustre CSI Driver GKE add-on. This add-on is disabled by
default.
--enable-master-global-access
Use with private clusters to allow access to the master's private
endpoint from any Google Cloud region or on-premises environment
@ -392,7 +413,7 @@ FLAGS
Sets the subnetwork GKE uses to provision the control plane's private
endpoint.
--release-channel=[CHANNEL]
--release-channel=CHANNEL
Release channel a cluster is subscribed to.
If left unspecified and a version is specified, the cluster is enrolled
@ -408,8 +429,12 @@ FLAGS
CHANNEL must be one of:
rapid
extended
Clusters subscribed to 'extended' can remain on a minor version for
24 months from when the minor version is made available in the
Regular channel.
rapid
'rapid' channel is offered on an early access basis for customers
who want to test new releases.
@ -417,24 +442,15 @@ FLAGS
to unresolved issues with no known workaround and are not subject
to any SLAs.
regular
regular
Clusters subscribed to 'regular' receive versions that are
considered GA quality. 'regular' is intended for production users
who want to take advantage of new features.
extended
Clusters subscribed to 'extended' can remain on a minor version for 24 months
from when the minor version is made available in the Regular channel.
stable
stable
Clusters subscribed to 'stable' receive versions that are known to
be stable and reliable in production.
CHANNEL must be one of: rapid, regular, extended, stable.
--security-group=SECURITY_GROUP
The name of the RBAC security group for use with Google security groups
in Kubernetes RBAC

58
gcloud/container/clusters/update
View file

@ -24,8 +24,9 @@ SYNOPSIS
| --enable-intra-node-visibility
| --enable-kubernetes-unstable-apis=API,[API,...]
| --enable-l4-ilb-subsetting | --enable-legacy-authorization
| --enable-multi-networking | --enable-network-policy
| --enable-private-nodes | --[no-]enable-ray-cluster-logging
| --enable-legacy-lustre-port | --enable-multi-networking
| --enable-network-policy | --enable-private-nodes
| --[no-]enable-ray-cluster-logging
| --[no-]enable-ray-cluster-monitoring | --enable-secret-manager
| --enable-service-externalips | --enable-shielded-nodes
| --enable-stackdriver-kubernetes | --enable-vertical-pod-autoscaling
@ -38,7 +39,7 @@ SYNOPSIS
| --notification-config=[pubsub=ENABLED|DISABLED,
pubsub-topic=TOPIC,...] | --patch-update=[PATCH_UPDATE]
| --private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE
| --release-channel=[CHANNEL] | --remove-labels=[KEY,...]
| --release-channel=CHANNEL | --remove-labels=[KEY,...]
| --remove-workload-policies=REMOVE_WORKLOAD_POLICIES
| --security-group=SECURITY_GROUP
| --security-posture=SECURITY_POSTURE | --set-password
@ -80,6 +81,7 @@ SYNOPSIS
| --disable-dataplane-v2-flow-observability
| --enable-dataplane-v2-flow-observability
--disable-dataplane-v2-metrics | --enable-dataplane-v2-metrics
| --disable-auto-ipam | --enable-auto-ipam
| --disable-l4-lb-firewall-reconciliation
| --enable-l4-lb-firewall-reconciliation
| --enable-authorized-networks-on-private-endpoint
@ -413,6 +415,12 @@ REQUIRED FLAGS
use RBAC permissions instead, create or update your cluster with the
option --no-enable-legacy-authorization.
--enable-legacy-lustre-port
Allow the Lustre CSI driver to initialize LNet (the virtual network
layer for Lustre kernel module) using port 6988. This flag is
required to workaround a port conflict with the gke-metadata-server
on GKE nodes.
--enable-multi-networking
Enables multi-networking on the cluster. Multi-networking is disabled
by default.
@ -647,7 +655,7 @@ REQUIRED FLAGS
PRIVATE_IPV6_GOOGLE_ACCESS_TYPE must be one of: bidirectional,
disabled, outbound-only.
--release-channel=[CHANNEL]
--release-channel=CHANNEL
Subscribe or unsubscribe this cluster to a release channel.
When a cluster is subscribed to a release channel, Google maintains
@ -658,8 +666,15 @@ REQUIRED FLAGS
CHANNEL must be one of:
rapid
None
Use 'None' to opt-out of any release channel.
extended
Clusters subscribed to 'extended' can remain on a minor version
for 24 months from when the minor version is made available in
the Regular channel.
rapid
'rapid' channel is offered on an early access basis for customers
who want to test new releases.
@ -667,27 +682,14 @@ REQUIRED FLAGS
to unresolved issues with no known workaround and are not subject
to any SLAs.
regular
regular
Clusters subscribed to 'regular' receive versions that are
considered GA quality. 'regular' is intended for production users
who want to take advantage of new features.
extended
Clusters subscribed to 'extended' can remain on a minor version for 24 months
from when the minor version is made available in the Regular channel.
stable
Clusters subscribed to 'stable' receive versions that are known to
be stable and reliable in production.
None
Use 'None' to opt-out of any release channel.
CHANNEL must be one of: rapid, regular, extended, stable, None.
stable
Clusters subscribed to 'stable' receive versions that are known
to be stable and reliable in production.
--remove-labels=[KEY,...]
Labels to remove from the Google Cloud resources in use by the
@ -742,7 +744,7 @@ REQUIRED FLAGS
existing username.
--stack-type=STACK_TYPE
IP stack type of the node VMs. STACK_TYPE must be one of: ipv4,
IP stack type of the cluster nodes. STACK_TYPE must be one of: ipv4,
ipv4-ipv6.
--start-credential-rotation
@ -1173,6 +1175,16 @@ REQUIRED FLAGS
--enable-dataplane-v2-metrics
Exposes advanced datapath flow metrics on node port.
At most one of these can be specified:
--disable-auto-ipam
Disable the Auto IP Address Management (Auto IPAM) feature for the
cluster.
--enable-auto-ipam
Enable the Auto IP Address Management (Auto IPAM) feature for the
cluster.
At most one of these can be specified:
--disable-l4-lb-firewall-reconciliation