.TH "GCLOUD_ALPHA_CONTAINER_AZURE_CLUSTERS_CREATE" 1



.SH "NAME"
.HP
gcloud alpha container azure clusters create \- create an Anthos cluster on Azure



.SH "SYNOPSIS"
.HP
\f5gcloud alpha container azure clusters create\fR (\fICLUSTER\fR\ :\ \fB\-\-location\fR=\fILOCATION\fR) \fB\-\-azure\-region\fR=\fIAZURE_REGION\fR \fB\-\-cluster\-version\fR=\fICLUSTER_VERSION\fR \fB\-\-fleet\-project\fR=\fIFLEET_PROJECT\fR \fB\-\-pod\-address\-cidr\-blocks\fR=\fIPOD_ADDRESS_CIDR_BLOCKS\fR \fB\-\-resource\-group\-id\fR=\fIRESOURCE_GROUP_ID\fR \fB\-\-service\-address\-cidr\-blocks\fR=\fISERVICE_ADDRESS_CIDR_BLOCKS\fR \fB\-\-ssh\-public\-key\fR=\fISSH_PUBLIC_KEY\fR \fB\-\-vnet\-id\fR=\fIVNET_ID\fR (\fB\-\-client\fR=\fICLIENT\fR\ |\ \fB\-\-azure\-application\-id\fR=\fIAZURE_APPLICATION_ID\fR\ \fB\-\-azure\-tenant\-id\fR=\fIAZURE_TENANT_ID\fR) [\fB\-\-admin\-groups\fR=[\fIGROUP\fR,...]] [\fB\-\-admin\-users\fR=\fIUSER\fR,[\fIUSER\fR,...]] [\fB\-\-annotations\fR=\fIANNOTATION\fR,[\fIANNOTATION\fR,...]] [\fB\-\-async\fR] [\fB\-\-config\-encryption\-key\-id\fR=\fICONFIG_ENCRYPTION_KEY_ID\fR] [\fB\-\-config\-encryption\-public\-key\fR=\fICONFIG_ENCRYPTION_PUBLIC_KEY\fR] [\fB\-\-database\-encryption\-key\-id\fR=\fIDATABASE_ENCRYPTION_KEY_ID\fR] [\fB\-\-description\fR=\fIDESCRIPTION\fR] [\fB\-\-enable\-managed\-prometheus\fR] [\fB\-\-endpoint\-subnet\-id\fR=\fIENDPOINT_SUBNET_ID\fR] [\fB\-\-logging\fR=\fICOMPONENT\fR,[\fICOMPONENT\fR,...]] [\fB\-\-main\-volume\-size\fR=\fIMAIN_VOLUME_SIZE\fR] [\fB\-\-replica\-placements\fR=[\fIREPLICA_PLACEMENT\fR,...]] [\fB\-\-root\-volume\-size\fR=\fIROOT_VOLUME_SIZE\fR] [\fB\-\-service\-load\-balancer\-subnet\-id\fR=\fISERVICE_LOAD_BALANCER_SUBNET_ID\fR] [\fB\-\-subnet\-id\fR=\fISUBNET_ID\fR] [\fB\-\-tags\fR=\fITAG\fR,[\fITAG\fR,...]] [\fB\-\-validate\-only\fR] [\fB\-\-vm\-size\fR=\fIVM_SIZE\fR] [\fB\-\-proxy\-resource\-group\-id\fR=\fIPROXY_RESOURCE_GROUP_ID\fR\ \fB\-\-proxy\-secret\-id\fR=\fIPROXY_SECRET_ID\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(ALPHA)\fR \fB(DEPRECATED)\fR Create an Anthos cluster on Azure.

This command is deprecated. See
https://cloud.google.com/kubernetes\-engine/multi\-cloud/docs/azure/deprecations/deprecation\-announcement
for more details.



.SH "EXAMPLES"

To create a cluster named \f5\fImy\-cluster\fR\fR managed in location
\f5\fIus\-west1\fR\fR, run:

.RS 2m
$ gcloud alpha container azure clusters create my\-cluster \e
    \-\-location=us\-west1 \-\-azure\-region=AZURE_REGION \e
    \-\-cluster\-version=CLUSTER_VERSION \-\-client=CLIENT \e
    \-\-pod\-address\-cidr\-blocks=POD_ADDRESS_CIDR_BLOCKS \e
    \-\-resource\-group\-id=RESOURCE_GROUP_ID \e
    \-\-ssh\-public\-key=SSH_PUBLIC_KEY \-\-subnet\-id=SUBNET_ID \e
    \-\-vnet\-id=VNET_ID
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m

Cluster resource \- Azure cluster to create. The arguments in this group can be
used to specify the attributes of this resource. (NOTE) Some attributes are not
given arguments in this group but can be set in other ways.

To set the \f5project\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5cluster\fR on the command line with a fully specified
name;
.IP "\(em" 2m
provide the argument \f5\-\-project\fR on the command line;
.IP "\(em" 2m
set the property \f5core/project\fR.
.RE
.sp

This must be specified.


.RS 2m
.TP 2m
\fICLUSTER\fR

ID of the cluster or fully qualified identifier for the cluster.

To set the \f5cluster\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5cluster\fR on the command line.
.RE
.sp

This positional argument must be specified if any of the other arguments in this
group are specified.

.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

Google Cloud location for the cluster.

To set the \f5location\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5cluster\fR on the command line with a fully specified
name;
.IP "\(bu" 2m
provide the argument \f5\-\-location\fR on the command line;
.IP "\(bu" 2m
set the property \f5container_azure/location\fR.
.RE
.sp


.RE
.RE
.sp

.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m
\fB\-\-azure\-region\fR=\fIAZURE_REGION\fR

Azure location to deploy the cluster. Refer to your Azure subscription for
available locations.

.TP 2m
\fB\-\-cluster\-version\fR=\fICLUSTER_VERSION\fR

Kubernetes version to use for the cluster.

.TP 2m
\fB\-\-fleet\-project\fR=\fIFLEET_PROJECT\fR

ID or number of the Fleet host project where the cluster is registered.

.TP 2m
\fB\-\-pod\-address\-cidr\-blocks\fR=\fIPOD_ADDRESS_CIDR_BLOCKS\fR

IP address range for the pods in this cluster in CIDR notation (e.g.
10.0.0.0/8).

.TP 2m
\fB\-\-resource\-group\-id\fR=\fIRESOURCE_GROUP_ID\fR

ID of the Azure Resource Group to associate the cluster with.

.TP 2m
\fB\-\-service\-address\-cidr\-blocks\fR=\fISERVICE_ADDRESS_CIDR_BLOCKS\fR

IP address range for the services IPs in CIDR notation (e.g. 10.0.0.0/8).

.TP 2m
\fB\-\-ssh\-public\-key\fR=\fISSH_PUBLIC_KEY\fR

SSH public key to use for authentication.

.TP 2m
\fB\-\-vnet\-id\fR=\fIVNET_ID\fR

ID of the Azure Virtual Network to associate with the cluster.

.TP 2m

Authentication configuration

Exactly one of these must be specified:


.RS 2m
.TP 2m

Client resource \- Azure client to use for cluster creation. This represents a
Cloud resource. (NOTE) Some attributes are not given arguments in this group but
can be set in other ways.

To set the \f5project\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5\-\-client\fR on the command line with a fully specified
name;
.IP "\(bu" 2m
provide the argument \f5\-\-project\fR on the command line;
.IP "\(bu" 2m
set the property \f5core/project\fR.
.RE
.sp

To set the \f5location\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5\-\-client\fR on the command line with a fully specified
name;
.IP "\(bu" 2m
provide the argument \f5\-\-location\fR on the command line;
.IP "\(bu" 2m
set the property \f5container_azure/location\fR.
.RE
.sp


.RS 2m
.TP 2m
\fB\-\-client\fR=\fICLIENT\fR

ID of the client or fully qualified identifier for the client.

To set the \f5client\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5\-\-client\fR on the command line.
.RE
.sp

.RE
.sp
.TP 2m

Azure services authentication


.RS 2m
.TP 2m
\fB\-\-azure\-application\-id\fR=\fIAZURE_APPLICATION_ID\fR

ID of the Azure Application to manage Azure resources.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-azure\-tenant\-id\fR=\fIAZURE_TENANT_ID\fR

ID of the Azure Tenant to manage Azure resources.

This flag argument must be specified if any of the other arguments in this group
are specified.


.RE
.RE
.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m
\fB\-\-admin\-groups\fR=[\fIGROUP\fR,...]

Groups of users that can perform operations as a cluster administrator.

.TP 2m
\fB\-\-admin\-users\fR=\fIUSER\fR,[\fIUSER\fR,...]

Users that can perform operations as a cluster administrator. If not specified,
the value of property core/account is used.

.TP 2m
\fB\-\-annotations\fR=\fIANNOTATION\fR,[\fIANNOTATION\fR,...]

Annotations for the cluster.

.TP 2m
\fB\-\-async\fR

Return immediately, without waiting for the operation in progress to complete.

.TP 2m
\fB\-\-config\-encryption\-key\-id\fR=\fICONFIG_ENCRYPTION_KEY_ID\fR

URL the of the Azure Key Vault key (with its version) to use to encrypt /
decrypt config data.

.TP 2m
\fB\-\-config\-encryption\-public\-key\fR=\fICONFIG_ENCRYPTION_PUBLIC_KEY\fR

RSA key of the Azure Key Vault public key to use for encrypting config data.

.TP 2m
\fB\-\-database\-encryption\-key\-id\fR=\fIDATABASE_ENCRYPTION_KEY_ID\fR

URL the of the Azure Key Vault key (with its version) to use to encrypt /
decrypt cluster secrets.

.TP 2m
\fB\-\-description\fR=\fIDESCRIPTION\fR

Description for the cluster.

.TP 2m
\fB\-\-enable\-managed\-prometheus\fR

Enables managed collection for Managed Service for Prometheus in the cluster.

See
https://cloud.google.com/stackdriver/docs/managed\-prometheus/setup\-managed#enable\-mgdcoll\-gke
for more info.

Managed Prometheus is enabled by default for cluster versions 1.27 or greater,
use \-\-no\-enable\-managed\-prometheus to disable.

.TP 2m
\fB\-\-endpoint\-subnet\-id\fR=\fIENDPOINT_SUBNET_ID\fR

ARM ID of the subnet where the control plane load balancer is deployed. When
unspecified, it defaults to the control plane subnet ID.

.TP 2m
\fB\-\-logging\fR=\fICOMPONENT\fR,[\fICOMPONENT\fR,...]

Set the components that have logging enabled.

Examples:

.RS 2m
$ gcloud alpha container azure clusters create \-\-logging=SYSTEM
$ gcloud alpha container azure clusters create \e
    \-\-logging=SYSTEM,WORKLOAD
.RE

\fICOMPONENT\fR must be one of: \fBSYSTEM\fR, \fBWORKLOAD\fR.

.TP 2m
\fB\-\-main\-volume\-size\fR=\fIMAIN_VOLUME_SIZE\fR

Size of the main volume. The value must be a whole number followed by a size
unit of \f5GB\fR for gigabyte, or \f5TB\fR for terabyte. If no size unit is
specified, GB is assumed.

.TP 2m
\fB\-\-replica\-placements\fR=[\fIREPLICA_PLACEMENT\fR,...]

Placement info for the control plane replicas. Replica placement is of format
subnetid:zone, for example subnetid12345:1

.TP 2m
\fB\-\-root\-volume\-size\fR=\fIROOT_VOLUME_SIZE\fR

Size of the root volume. The value must be a whole number followed by a size
unit of \f5GB\fR for gigabyte, or \f5TB\fR for terabyte. If no size unit is
specified, GB is assumed.

.TP 2m
\fB\-\-service\-load\-balancer\-subnet\-id\fR=\fISERVICE_LOAD_BALANCER_SUBNET_ID\fR

ARM ID of the subnet where Kubernetes private service type load balancers are
deployed, when the Service lacks a subnet annotation.

.TP 2m
\fB\-\-subnet\-id\fR=\fISUBNET_ID\fR

Subnet ID of an existing VNET to use for the cluster control plane.

.TP 2m
\fB\-\-tags\fR=\fITAG\fR,[\fITAG\fR,...]

Applies the given tags (comma separated) on the cluster. Example:

.RS 2m
$ gcloud alpha container azure clusters create EXAMPLE_CLUSTER \e
    \-\-tags=tag1=one,tag2=two
.RE

.TP 2m
\fB\-\-validate\-only\fR

Validate the creation of the cluster, but don't actually perform it.

.TP 2m
\fB\-\-vm\-size\fR=\fIVM_SIZE\fR

Azure Virtual Machine Size (e.g. Standard_DS1_v).

.TP 2m

Proxy config


.RS 2m
.TP 2m
\fB\-\-proxy\-resource\-group\-id\fR=\fIPROXY_RESOURCE_GROUP_ID\fR

The ARM ID the of the resource group containing proxy keyvault.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-proxy\-secret\-id\fR=\fIPROXY_SECRET_ID\fR

The URL the of the proxy setting secret with its version.

This flag argument must be specified if any of the other arguments in this group
are specified.


.RE
.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct project,
you might be trying to access an API with an invitation\-only early access
allowlist. This variant is also available:

.RS 2m
$ gcloud container azure clusters create
.RE