.TH "GCLOUD_CONTAINER_HUB_POLICYCONTROLLER_UPDATE" 1



.SH "NAME"
.HP
gcloud container hub policycontroller update \- updates the configuration of Policy Controller Feature



.SH "SYNOPSIS"
.HP
\f5gcloud container hub policycontroller update\fR [\fB\-\-all\-memberships\fR\ |\ [\fB\-\-memberships\fR=[\fIMEMBERSHIPS\fR,...]\ :\ \fB\-\-location\fR=\fILOCATION\fR]\ \fB\-\-origin\fR=\fIORIGIN\fR\ |\ \fB\-\-audit\-interval\fR=\fIAUDIT_INTERVAL\fR\ \fB\-\-constraint\-violation\-limit\fR=\fICONSTRAINT_VIOLATION_LIMIT\fR\ \fB\-\-version\fR=\fIVERSION\fR\ \fB\-\-clear\-exemptable\-namespaces\fR\ |\ \fB\-\-exemptable\-namespaces\fR=\fIEXEMPTABLE_NAMESPACES\fR\ \fB\-\-log\-denies\fR\ |\ \fB\-\-no\-log\-denies\fR\ \fB\-\-monitoring\fR=\fIMONITORING\fR\ |\ \fB\-\-no\-monitoring\fR\ \fB\-\-mutation\fR\ |\ \fB\-\-no\-mutation\fR\ \fB\-\-referential\-rules\fR\ |\ \fB\-\-no\-referential\-rules\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

Updates the configuration of the Policy Controller installation



.SH "EXAMPLES"

To change the installed version, run:

.RS 2m
$ gcloud container hub policycontroller update \-\-version=VERSION
.RE

To modify the audit interval to 120 seconds, run:

.RS 2m
$ gcloud container hub policycontroller update \-\-audit\-interval=120
.RE



.SH "FLAGS"

.RS 2m
.TP 2m

Membership flags.

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-all\-memberships\fR

If supplied, apply to all Policy Controllers memberships in the fleet.

.TP 2m

Membership resource \- The group of arguments defining one or more memberships.
The arguments in this group can be used to specify the attributes of this
resource. (NOTE) Some attributes are not given arguments in this group but can
be set in other ways.

To set the \f5project\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5\-\-memberships\fR on the command line with a fully
specified name;
.IP "\(bu" 2m
provide the argument \f5\-\-project\fR on the command line;
.IP "\(bu" 2m
set the property \f5core/project\fR.
.RE
.sp


.RS 2m
.TP 2m
\fB\-\-memberships\fR=[\fIMEMBERSHIPS\fR,...]

IDs of the memberships or fully qualified identifiers for the memberships.

To set the \f5memberships\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5\-\-memberships\fR on the command line.
.RE
.sp

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

Location for the memberships.

To set the \f5location\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5\-\-memberships\fR on the command line with a fully
specified name;
.IP "\(em" 2m
provide the argument \f5\-\-location\fR on the command line;
.IP "\(em" 2m
set the property \f5gkehub/location\fR.
.RE
.sp

.RE
.RE
.sp
.TP 2m

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-origin\fR=\fIORIGIN\fR

If \-\-origin=FLEET will set the configuration of the membership to the fleet
default.

\fIORIGIN\fR must be (only one value is supported): \fBFLEET\fR.

.TP 2m
\fB\-\-audit\-interval\fR=\fIAUDIT_INTERVAL\fR

How often Policy Controller will audit resources, in seconds.

.TP 2m
\fB\-\-constraint\-violation\-limit\fR=\fICONSTRAINT_VIOLATION_LIMIT\fR

The number of violations stored on the constraint resource. Must be greater than
0.

.TP 2m
\fB\-\-version\fR=\fIVERSION\fR

The version of Policy Controller to install; defaults to latest version.

.TP 2m

Exemptable Namespace flags.

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-clear\-exemptable\-namespaces\fR

Removes any namespace exemptions, enabling Policy Controller on all namespaces.
Setting this flag will overwrite currently exempted namespaces, not append.

.TP 2m
\fB\-\-exemptable\-namespaces\fR=\fIEXEMPTABLE_NAMESPACES\fR

Namespaces that Policy Controller should ignore, separated by commas if multiple
are supplied.

.RE
.sp
.TP 2m

Log Denies flags.

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-log\-denies\fR

If set, log all denies and dry run failures. (To disable, use
\-\-no\-log\-denies)

.TP 2m
\fB\-\-no\-log\-denies\fR

If set, disable all log denies.

.RE
.sp
.TP 2m

Monitoring flags.

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-monitoring\fR=\fIMONITORING\fR

Monitoring backend options Policy Controller should export metrics to, separated
by commas if multiple are supplied. Setting this flag will overwrite currently
enabled backends, not append. Options: prometheus, cloudmonitoring

.TP 2m
\fB\-\-no\-monitoring\fR

Include this flag to disable the monitoring configuration of Policy Controller.

.RE
.sp
.TP 2m

Mutation flags.

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-mutation\fR

If set, enable support for mutation. (To disable, use \-\-no\-mutation)

.TP 2m
\fB\-\-no\-mutation\fR

Disables mutation support.

.RE
.sp
.TP 2m

Referential Rules flags.

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-referential\-rules\fR

If set, enable support for referential constraints. (To disable, use
\-\-no\-referential\-rules)

.TP 2m
\fB\-\-no\-referential\-rules\fR

Disables referential rules support.


.RE
.RE
.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha container hub policycontroller update
.RE

.RS 2m
$ gcloud beta container hub policycontroller update
.RE