NAME

gcloud alpha container azure clusters create - create an Anthos cluster on Azure

SYNOPSIS

gcloud alpha container azure clusters create (CLUSTER : --location=LOCATION) --azure-region=AZURE_REGION --cluster-version=CLUSTER_VERSION --fleet-project=FLEET_PROJECT --pod-address-cidr-blocks=POD_ADDRESS_CIDR_BLOCKS --resource-group-id=RESOURCE_GROUP_ID --service-address-cidr-blocks=SERVICE_ADDRESS_CIDR_BLOCKS --ssh-public-key=SSH_PUBLIC_KEY --vnet-id=VNET_ID (--client=CLIENT : --azure-application-id=AZURE_APPLICATION_ID --azure-tenant-id=AZURE_TENANT_ID) [--admin-users=USER,[USER,...]] [--annotations=ANNOTATION,[ANNOTATION,...]] [--async] [--config-encryption-key-id=CONFIG_ENCRYPTION_KEY_ID] [--config-encryption-public-key=CONFIG_ENCRYPTION_PUBLIC_KEY] [--database-encryption-key-id=DATABASE_ENCRYPTION_KEY_ID] [--description=DESCRIPTION] [--enable-managed-prometheus] [--endpoint-subnet-id=ENDPOINT_SUBNET_ID] [--logging=COMPONENT,[COMPONENT,...]] [--main-volume-size=MAIN_VOLUME_SIZE] [--replica-placements=[REPLICA_PLACEMENT,...]] [--root-volume-size=ROOT_VOLUME_SIZE] [--service-load-balancer-subnet-id=SERVICE_LOAD_BALANCER_SUBNET_ID] [--subnet-id=SUBNET_ID] [--tags=TAG,[TAG,...]] [--validate-only] [--vm-size=VM_SIZE] [--proxy-resource-group-id=PROXY_RESOURCE_GROUP_ID --proxy-secret-id=PROXY_SECRET_ID] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION

(ALPHA) Create an Anthos cluster on Azure.

EXAMPLES

To create a cluster named my-cluster managed in location us-west1, run:

$ gcloud alpha container azure clusters create my-cluster \ --location=us-west1 --azure-region=AZURE_REGION \ --cluster-version=CLUSTER_VERSION --client=CLIENT \ --pod-address-cidr-blocks=POD_ADDRESS_CIDR_BLOCKS \ --resource-group-id=RESOURCE_GROUP_ID \ --ssh-public-key=SSH_PUBLIC_KEY --subnet-id=SUBNET_ID \ --vnet-id=VNET_ID

POSITIONAL ARGUMENTS

Cluster resource - Azure cluster to create. The arguments in this group can be

used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways. To set the project attribute:

provide the argument cluster on the command line with a fully specified name;

provide the argument --project on the command line;

set the property core/project.

This must be specified.

CLUSTER

ID of the cluster or fully qualified identifier for the cluster. To set the cluster attribute:

  • provide the argument cluster on the command line.

This positional argument must be specified if any of the other arguments in this group are specified.

--location=LOCATION

Google Cloud location for the cluster. To set the location attribute:

  • provide the argument cluster on the command line with a fully specified name;

  • provide the argument --location on the command line;

  • set the property container_azure/location.

REQUIRED FLAGS

--azure-region=AZURE_REGION

Azure location to deploy the cluster. Refer to your Azure subscription for available locations.

--cluster-version=CLUSTER_VERSION

Kubernetes version to use for the cluster.

--fleet-project=FLEET_PROJECT

ID or number of the Fleet host project where the cluster is registered.

--pod-address-cidr-blocks=POD_ADDRESS_CIDR_BLOCKS

IP address range for the pods in this cluster in CIDR notation (e.g. 10.0.0.0/8).

--resource-group-id=RESOURCE_GROUP_ID

ID of the Azure Resource Group to associate the cluster with.

--service-address-cidr-blocks=SERVICE_ADDRESS_CIDR_BLOCKS

IP address range for the services IPs in CIDR notation (e.g. 10.0.0.0/8).

--ssh-public-key=SSH_PUBLIC_KEY

SSH public key to use for authentication.

--vnet-id=VNET_ID

ID of the Azure Virtual Network to associate with the cluster.

Authentication configuration

Exactly one of these must be specified:

Client resource - Azure client to use for cluster creation. This represents a

Cloud resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways. To set the project attribute:

  • provide the argument --client on the command line with a fully specified name;

  • provide the argument --project on the command line;

  • set the property core/project. To set the location attribute:

  • provide the argument --client on the command line with a fully specified name;

  • provide the argument --location on the command line;

  • set the property container_azure/location.

--client=CLIENT

ID of the client or fully qualified identifier for the client. To set the client attribute:

provide the argument --client on the command line.

Azure services authentication
--azure-application-id=AZURE_APPLICATION_ID

ID of the Azure Application to manage Azure resources.

This flag argument must be specified if any of the other arguments in this group are specified.

--azure-tenant-id=AZURE_TENANT_ID

ID of the Azure Tenant to manage Azure resources.

This flag argument must be specified if any of the other arguments in this group are specified.

OPTIONAL FLAGS

--admin-users=USER,[USER,...]

Users that can perform operations as a cluster administrator. If not specified, the value of property core/account is used.

--annotations=ANNOTATION,[ANNOTATION,...]

Annotations for the cluster.

--async

Return immediately, without waiting for the operation in progress to complete.

--config-encryption-key-id=CONFIG_ENCRYPTION_KEY_ID

URL the of the Azure Key Vault key (with its version) to use to encrypt / decrypt config data.

--config-encryption-public-key=CONFIG_ENCRYPTION_PUBLIC_KEY

RSA key of the Azure Key Vault public key to use for encrypting config data.

--database-encryption-key-id=DATABASE_ENCRYPTION_KEY_ID

URL the of the Azure Key Vault key (with its version) to use to encrypt / decrypt cluster secrets.

--description=DESCRIPTION

Description for the cluster.

--enable-managed-prometheus

Enable managed collection for Managed Service for Prometheus.

--endpoint-subnet-id=ENDPOINT_SUBNET_ID

ARM ID of the subnet where the control plane load balancer is deployed. When unspecified, it defaults to the control plane subnet ID.

--logging=COMPONENT,[COMPONENT,...]

Set the components that have logging enabled.

Examples:

$ gcloud alpha container azure clusters create --logging=SYSTEM $ gcloud alpha container azure clusters create \ --logging=SYSTEM,WORKLOAD

COMPONENT must be one of: SYSTEM, WORKLOAD.

--main-volume-size=MAIN_VOLUME_SIZE

Size of the main volume. The value must be a whole number followed by a size unit of GB for gigabyte, or TB for terabyte. If no size unit is specified, GB is assumed.

--replica-placements=[REPLICA_PLACEMENT,...]

Placement info for the control plane replicas. Replica placement is of format subnetid:zone, for example subnetid12345:1

--root-volume-size=ROOT_VOLUME_SIZE

Size of the root volume. The value must be a whole number followed by a size unit of GB for gigabyte, or TB for terabyte. If no size unit is specified, GB is assumed.

--service-load-balancer-subnet-id=SERVICE_LOAD_BALANCER_SUBNET_ID

ARM ID of the subnet where Kubernetes private service type load balancers are deployed, when the Service lacks a subnet annotation.

--subnet-id=SUBNET_ID

Subnet ID of an existing VNET to use for the cluster control plane.

--tags=TAG,[TAG,...]

Applies the given tags (comma separated) on the cluster. Example:

$ gcloud alpha container azure clusters create EXAMPLE_CLUSTER \ --tags=tag1=one,tag2=two

--validate-only

Validate the creation of the cluster, but don't actually perform it.

--vm-size=VM_SIZE

Azure Virtual Machine Size (e.g. Standard_DS1_v).

Proxy config
--proxy-resource-group-id=PROXY_RESOURCE_GROUP_ID

The ARM ID the of the resource group containing proxy keyvault.

This flag argument must be specified if any of the other arguments in this group are specified.

--proxy-secret-id=PROXY_SECRET_ID

The URL the of the proxy setting secret with its version.

This flag argument must be specified if any of the other arguments in this group are specified.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. This variant is also available:

$ gcloud container azure clusters create