File: //snap/google-cloud-cli/394/help/man/man1/gcloud_container_hub_policycontroller_deployment_set.1
.TH "GCLOUD_CONTAINER_HUB_POLICYCONTROLLER_DEPLOYMENT_SET" 1
.SH "NAME"
.HP
gcloud container hub policycontroller deployment set \- sets configuration of the Policy Controller components
.SH "SYNOPSIS"
.HP
\f5gcloud container hub policycontroller deployment set\fR \fIDEPLOYMENT\fR \fIPROPERTY\fR \fIVALUE\fR [\fB\-\-effect\fR=\fIEFFECT\fR] [\fB\-\-all\-memberships\fR\ |\ [\fB\-\-memberships\fR=[\fIMEMBERSHIPS\fR,...]\ :\ \fB\-\-location\fR=\fILOCATION\fR]] [\fIGCLOUD_WIDE_FLAG\ ...\fR]
.SH "DESCRIPTION"
Customizes on\-cluster components of Policy Controller. Supported properties may
be set with this command, or removed with 'remove'. These components are managed
as individual kubernetes deployments (e.g. 'admission') in the
gatekeeper\-system namespace.
When setting cpu or memory limits and requests, Kubernetes\-standard resource
units are used.
All properties set using this command will overwrite previous properties, with
the exception of tolerations which can only be added, and any number may be
added. To edit a toleration, use 'remove' to first delete it, and then 'set' the
desired toleration.
.SH "EXAMPLES"
To set the replica count for a component:
.RS 2m
$ gcloud container hub policycontroller deployment set admission \e
replica\-count 3
.RE
To set the replica count for a component across all fleet memberships:
.RS 2m
$ gcloud container hub policycontroller deployment set admission \e
replica\-count 3 \-\-all\-memberships
.RE
To set a toleration with key 'my\-key' on a component (which is an 'Exists'
operator):
.RS 2m
$ gcloud container hub policycontroller deployment set admission \e
toleration my\-key
.RE
To set a toleration with key 'my\-key' and 'my\-value' on a component (which is
an 'Equal' operator):
.RS 2m
$ gcloud container hub policycontroller deployment set admission \e
toleration my\-key=my\-value
.RE
To set a toleration with key 'my\-key' and 'my\-value' on a component, along
with the effect 'NoSchedule' (which is an 'Equal' operator):
.RS 2m
$ gcloud container hub policycontroller deployment set admission \e
toleration my\-key=my\-value \-\-effect=NoSchedule
.RE
To set a memory limit:
.RS 2m
$ gcloud container hub policycontroller deployment set audit \e
memory\-limit 4Gi
.RE
To set a memory request:
.RS 2m
$ gcloud container hub policycontroller deployment set mutation \e
memory\-request 2Gi
.RE
To set a cpu limit:
.RS 2m
$ gcloud container hub policycontroller deployment set admission \e
cpu\-limit 500m
.RE
To set a cpu request:
.RS 2m
$ gcloud container hub policycontroller deployment set audit \e
cpu\-request 250m
.RE
To set anti\-affinity to achieve high availability on the mutation deployment:
.RS 2m
$ gcloud container hub policycontroller deployment set mutation \e
pod\-affinity anti
.RE
.SH "POSITIONAL ARGUMENTS"
.RS 2m
.TP 2m
\fIDEPLOYMENT\fR
The PolicyController deployment component (e.g. "admission", "audit" or
"mutation") upon which to set configuration.
.TP 2m
\fIPROPERTY\fR
Property to be set.
.TP 2m
\fIVALUE\fR
The value to set the property to. Valid input varies based on the property being
set.
.RE
.sp
.SH "FLAGS"
.RS 2m
.TP 2m
\fB\-\-effect\fR=\fIEFFECT\fR
Applies only to "toleration" property. \fIEFFECT\fR must be one of:
\fBNoSchedule\fR, \fBPreferNoSchedule\fR, \fBNoExecute\fR.
.TP 2m
Membership flags.
At most one of these can be specified:
.RS 2m
.TP 2m
\fB\-\-all\-memberships\fR
If supplied, apply to all Policy Controllers memberships in the fleet.
.TP 2m
Membership resource \- The group of arguments defining one or more memberships.
The arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but can
be set in other ways.
To set the \f5project\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5\-\-memberships\fR on the command line with a fully
specified name;
.IP "\(bu" 2m
provide the argument \f5\-\-project\fR on the command line;
.IP "\(bu" 2m
set the property \f5core/project\fR.
.RE
.sp
.RS 2m
.TP 2m
\fB\-\-memberships\fR=[\fIMEMBERSHIPS\fR,...]
IDs of the memberships or fully qualified identifiers for the memberships.
To set the \f5memberships\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5\-\-memberships\fR on the command line.
.RE
.sp
This flag argument must be specified if any of the other arguments in this group
are specified.
.TP 2m
\fB\-\-location\fR=\fILOCATION\fR
Location for the memberships.
To set the \f5location\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5\-\-memberships\fR on the command line with a fully
specified name;
.IP "\(em" 2m
provide the argument \f5\-\-location\fR on the command line;
.IP "\(em" 2m
set the property \f5gkehub/location\fR.
.RE
.sp
.RE
.RE
.RE
.sp
.SH "GCLOUD WIDE FLAGS"
These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.
Run \fB$ gcloud help\fR for details.
.SH "NOTES"
These variants are also available:
.RS 2m
$ gcloud alpha container hub policycontroller deployment set
.RE
.RS 2m
$ gcloud beta container hub policycontroller deployment set
.RE