Console

1. In the Google Cloud console, go to theGoogle Kubernetes Engine clustersoverview page.

   Go to GKE clusters

2. Select the Google Cloud project that the cluster is in.

3. In the cluster list, select the name of the cluster, and then selectView details in the side panel.

4. On theDetails tab, selecteditEdit on the field that you want to change.

   For example, to grant cluster administrative privileges to other usersselecteditEdit next toAdmin users and enter the email address of the user.

5. When you are finished making changes, selectDone.

gcloud

When you update a cluster using the gcloud CLI, you must alwaysinclude theCLUSTER_NAME andGOOGLE_CLOUD_LOCATION fields, which tellGKE on Azure what cluster to update. In the following command, onlyinclude the fields that you want to update; remove the other fields beforerunning the command.

gcloudcontainerazureclustersupdateCLUSTER_NAME\--location=GOOGLE_CLOUD_LOCATION\--cluster-version=CLUSTER_VERSION\--admin-users=USERNAME_LIST\--client=CLIENT_NAME\--vm-size=VM_SIZE

Replace the following:

• CLUSTER_NAME: the name of your cluster
• GOOGLE_CLOUD_LOCATION (required): thesupported Google Cloud regionthat manages your cluster—for example,us-west1
• CLUSTER_VERSION: the newsupported cluster version
• USERNAME_LIST: a comma-separated list of usernames, for example, "kai@example.com,hao@example.com,kalani@example.com". These are the email addresses of the users you're granting administrative privileges on this cluster to. The names in this setting will replace any previous list of admin-users on the cluster.
• CLIENT_NAME: your AzureClient
• VM_SIZE: the new supportedVM size

To update the cluster's Authentication from AzureClient toworkload identity federation,run the following command:

gcloudcontainerazureclustersupdateCLUSTER_NAME\--location=GOOGLE_CLOUD_LOCATION\--azure-tenant-id="${TENANT_ID}"\--azure-application-id="${APPLICATION_ID}"\--clear-client

API

When you update a cluster using the GKE Multi-Cloud API, you must alwaysinclude theCLUSTER_NAME andGOOGLE_CLOUD_LOCATION fields in the HTTP request. Thesefields tell GKE on Azure what cluster to update. You must alsoinclude the API endpoint in the request. You create a JSON file with thefields that you want to update. Only include the fields that you want toupdate in the JSON file and in theUPDATE_MASK.

The following example shows how to update your cluster through the API.For more information, including the list of fields that you can update, seetheprojects.locations.azureClusters.patchmethod documentation.

1. Create a JSON file namedcluster_update.json with the fields thatyou want to update.

   • When usingworkload identity federation,the JSON file should look like this:

     {  "description": "CLUSTER_DESCRIPTION",  "controlPlane": {    "version": "CLUSTER_VERSION",    "vm_size": "VM_SIZE  },  "azureServicesAuthentication": {    "tenantId": "TENANT_ID",    "applicationId": "APPLICATION_ID"  },  "authorization": {      "adminUsers": [          {          "username":USERNAME1,          "username":USERNAME2,          "username":USERNAME3          }      ]  }}

   • When usingAzure client,the JSON file should look like this:

     {  "description": "CLUSTER_DESCRIPTION",  "controlPlane": {    "version": "CLUSTER_VERSION",    "vm_size": "VM_SIZE  },  "azureClient": "CLIENT_NAME",  "authorization": {      "adminUsers": [          {          "username":USERNAME1,          "username":USERNAME2,          "username":USERNAME3          }      ]  }}

   Replace the following:

   • CLUSTER_VERSION: the newsupported cluster version. Note thatyou must upgrade through all minor versions when upgrading your cluster
   • CLUSTER_DESCRIPTION: the new cluster description
   • USERNAME1,USERNAME2,USERNAME3:the email addresses of the users you'regranting administrative privileges on this cluster to. The names inthese fields will replace any previous list of admin-users on the cluster.
   • CLIENT_NAME: yourAzureClient name
   • TENANT_ID: the Azure tenant ID
   • APPLICATION_ID: the Azure application ID that wascreated inCreate an Azure Active Directory Application
   • VM_SIZE: the newVM size

2. Update these settings through the GKE Multi-Cloud API with following command.

   curl-d@cluster_update.json-XPATCH\ENDPOINT/projects/PROJECT_ID/locations/GOOGLE_CLOUD_LOCATION/azureClusters/CLUSTER_NAME?update_mask=UPDATE_MASK

Replace the following:

• ENDPOINT (required): Your Google Cloudservice endpoint
• PROJECT_ID (required): Your Google Cloud project
• GOOGLE_CLOUD_LOCATION (required): thesupported Google Cloud regionthat manages your cluster—for example,us-west1
• CLUSTER_NAME (required): Your cluster name
• UPDATE_MASK (required): a comma-separated list of oneor more of the following flags, indicating which fields you want toupdate. In this example, specify the following.
  • controlPlane.version
  • description
  • authorization.admin_users
  • control_plane.vm_size
  • azure_client
  • azure_services_authentication.tenant_id
  • azure_services_authentication.application_id

To update the cluster's Authentication from AzureClient toworkload identity federation,addazure_client,azure_services_authentication.tenant_id andazure_services_authentication.application_id in the fieldupdate_mask.