gcloud container fleet policycontroller content bundles set - sets bundle installation for Policy Controller content

gcloud container fleet policycontroller content bundles setBUNDLE_NAME[--all-memberships    | [--memberships=[MEMBERSHIPS,…] :--location=LOCATION]][--exempted-namespaces=EXEMPTED_NAMESPACES    |--no-exempted-namespaces][GCLOUD_WIDE_FLAG …]

The namespace exclusion flag (--exempted-namespaces) will specify aset of namespaces that the installed bundle will ignore. Subsequent calls withthe same bundle name and this flag will overwrite what namespaces are beingignored. Using--no-exempted-namespaces or specifying no namespaceswith--exempted-namespaces will remove all namespaces from theignore list.

To uninstall a bundle, use theremove command.

gcloudcontainerfleetpolicycontrollercontentbundlessetcis-k8s-v1.5.1

To install a policy bundle, while ignoring (exempting) certain namespaces frombeing affected by the bundle:

gcloudcontainerfleetpolicycontrollercontentbundlessetcis-k8s-v1.5.1--exempted-namespaces=kube-system,gatekeeper-system

To remove all exempted namespaces from a particular bundles ignore list:

gcloudcontainerfleetpolicycontrollercontentbundlessetcis-k8s-v1.5.1--no-exempted-namespaces

BUNDLE_NAME

The constraint bundle to install in Policy Controller.

Membership flags.

At most one of these can be specified:

--all-memberships

If supplied, apply to all Policy Controllers memberships in the fleet.

Or at least one of these can be specified:

Membership resource - The group of arguments defining one or more memberships.The arguments in this group can be used to specify the attributes of thisresource. (NOTE) Some attributes are not given arguments in this group but canbe set in other ways.

To set theproject attribute:

• provide the argument--memberships on the command line with a fullyspecified name;
• provide the argument--project on the command line;
• set the propertycore/project.

--memberships=[MEMBERSHIPS,…]

IDs of the memberships or fully qualified identifiers for the memberships.

To set thememberships attribute:

• provide the argument--memberships on the command line.

This flag argument must be specified if any of the other arguments in this groupare specified.

--location=LOCATION

Location for the memberships.

To set thelocation attribute:

• provide the argument--memberships on the command line with a fullyspecified name;
• provide the argument--location on the command line;
• set the propertygkehub/location.

Exempted Namespaces flags.

At most one of these can be specified:

--exempted-namespaces=EXEMPTED_NAMESPACES

Exempted namespaces are ignored by Policy Controller when applying constraintsadded by this bundle.

--no-exempted-namespaces

Removes all exempted namespaces from the specified bundle.

Run$gcloud help for details.