gcloud workbench instances create

NAME: gcloud workbench instances create - creates a workbench instance
SYNOPSIS: gcloud workbench instances create (INSTANCE : --location=LOCATION) [--async] [--disable-proxy-access] [--instance-owners=INSTANCE_OWNERS] [--labels=[KEY=VALUE,…]] [--disable-public-ip --enable-ip-forwarding --machine-type=MACHINE_TYPE; default="n1-standard-4" --metadata=[KEY=VALUE,…] --min-cpu-platform=MIN_CPU_PLATFORM --service-account-email=SERVICE_ACCOUNT_EMAIL --tags=[TAGS,…] --accelerator-core-count=ACCELERATOR_CORE_COUNT --accelerator-type=ACCELERATOR_TYPE --boot-disk-encryption=BOOT_DISK_ENCRYPTION --boot-disk-size=BOOT_DISK_SIZE --boot-disk-type=BOOT_DISK_TYPE [--boot-disk-kms-key=BOOT_DISK_KMS_KEY : --boot-disk-encryption-key-keyring=BOOT_DISK_ENCRYPTION_KEY_KEYRING --boot-disk-encryption-key-location=BOOT_DISK_ENCRYPTION_KEY_LOCATION --boot-disk-encryption-key-project=BOOT_DISK_ENCRYPTION_KEY_PROJECT] [--container-repository=CONTAINER_REPOSITORY : --container-tag=CONTAINER_TAG] | [(--vm-image-family=VM_IMAGE_FAMILY | --vm-image-name=VM_IMAGE_NAME) : --vm-image-project=VM_IMAGE_PROJECT; default="deeplearning-platform-release"] --custom-gpu-driver-path=CUSTOM_GPU_DRIVER_PATH --install-gpu-driver --data-disk-encryption=DATA_DISK_ENCRYPTION --data-disk-size=DATA_DISK_SIZE --data-disk-type=DATA_DISK_TYPE [--data-disk-kms-key=DATA_DISK_KMS_KEY : --data-disk-encryption-key-keyring=DATA_DISK_ENCRYPTION_KEY_KEYRING --data-disk-encryption-key-location=DATA_DISK_ENCRYPTION_KEY_LOCATION --data-disk-encryption-key-project=DATA_DISK_ENCRYPTION_KEY_PROJECT] --network=NETWORK --nic-type=NIC_TYPE [--subnet=SUBNET : --subnet-region=SUBNET_REGION] --shielded-integrity-monitoring=SHIELDED_INTEGRITY_MONITORING --shielded-secure-boot=SHIELDED_SECURE_BOOT --shielded-vtpm=SHIELDED_VTPM] [GCLOUD_WIDE_FLAG …]
DESCRIPTION: Creates a workbench instance.
EXAMPLES: To create an instance from a VmImage family, run:
gcloud workbench instances create example-instance --vm-image-project=cloud-notebooks-managed --vm-image-family=workbench-instances --machine-type=n1-standard-4 --location=us-central1-b

To create an instance from a VmImage name, run:
gcloud workbench instances create example-instance --vm-image-project=cloud-notebooks-managed --vm-image-name=workbench-instances-v20230925-debian-11-py310 --machine-type=n1-standard-4 --location=us-central1-b

To create an instance from a Container Repository, run:
gcloud workbench instances create example-instance --container-repository=gcr.io/deeplearning-platform-release/base-cpu --container-tag=latest --machine-type=n1-standard-4 --location=us-central1-b

To create an instance with shielded-secure-boot, shielded-vtpm and shielded-integrity-monitoring disabled, run:
gcloud workbench instances create example-instance --shielded-integrity-monitoring=false --shielded-secure-boot=false --shielded-vtpm=false --location=us-central1-b
POSITIONAL ARGUMENTS: Instance resource - User-defined unique name of this instance. The instance name must be 1 to 63 characters long and contain only lowercase letters, numeric characters, and dashes. The first character must be a lowercase letter and the last character cannot be a dash. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.
To set the project attribute:

provide the argument instance on the command line with a fully specified name;

provide the argument --project on the command line;

set the property core/project.

This must be specified.

INSTANCE

ID of the instance or fully qualified identifier for the instance.
To set the instance attribute:

provide the argument instance on the command line.

This positional argument must be specified if any of the other arguments in this group are specified.

--location=LOCATION

Google Cloud location of this environment https://cloud.google.com/compute/docs/regions-zones/#locations.
To set the location attribute:

provide the argument instance on the command line with a fully specified name;

provide the argument --location on the command line;

set the property notebooks/location.
FLAGS: --async

Return immediately, without waiting for the operation in progress to complete.

--disable-proxy-access

If true, the notebook instance will not register with the proxy.

--instance-owners=INSTANCE_OWNERS

The owners of this instance after creation. Format: alias@example.com. Currently supports one owner only. If not specified, all of the service account users of the VM instance's service account can use the instance.

--labels=[KEY=VALUE,…]

Labels to apply to this instance. These can be later modified by the setLabels method.

Gce Setup for the instance

--disable-public-ip

If specified, no public IP will be assigned to this instance.

--enable-ip-forwarding

If specified, IP forwarding will be enabled for this instance.

--machine-type=MACHINE_TYPE; default="n1-standard-4"

The Compute Engine machine type of this instance.

--metadata=[KEY=VALUE,…]

Custom metadata to apply to this instance.

--min-cpu-platform=MIN_CPU_PLATFORM

The minimum CPU platform to use for this instance. The list of valid values can be found in https://cloud.google.com/compute/docs/instances/specify-min-cpu-platform#availablezones

The service account on this instance, giving access to other Google Cloud services. You can use any service account within the same project, but you must grant the service account user permission to use the instance. If not specified, the Compute Engine default service account is used.

--service-account-email=SERVICE_ACCOUNT_EMAIL

The service account on this instance, giving access to other Google Cloud services. You can use any service account within the same project, but you must grant the service account user permission to use the instance. If not specified, the Compute Engine default service account is used.

--tags=[TAGS,…]

Tags to apply to this instance.

The hardware accelerator used on this instance. If you use accelerators, make sure that your configuration has enough vCPUs and memory to support the `machine_type` you have selected.

--accelerator-core-count=ACCELERATOR_CORE_COUNT

Count of cores of this accelerator.

--accelerator-type=ACCELERATOR_TYPE

Type of this accelerator. ACCELERATOR_TYPE must be one of: NVIDIA_TESLA_K80, NVIDIA_TESLA_P100, NVIDIA_TESLA_V100, NVIDIA_TESLA_P4, NVIDIA_TESLA_T4, NVIDIA_TESLA_A100, NVIDIA_A100_80GB, NVIDIA_TESLA_T4_VWS, NVIDIA_TESLA_P100_VWS, NVIDIA_TESLA_P4_VWS, NVIDIA_L4.

Boot disk configurations.

--boot-disk-encryption=BOOT_DISK_ENCRYPTION

Disk encryption method used on the boot disk, defaults to GMEK. BOOT_DISK_ENCRYPTION must be one of: GMEK, CMEK.

--boot-disk-size=BOOT_DISK_SIZE

Size of boot disk in GB attached to this instance, up to a maximum of 64000 GB (64 TB). The minimum recommended value is 100 GB. If not specified, this defaults to 100.

--boot-disk-type=BOOT_DISK_TYPE

Type of boot disk attached to this instance, defaults to standard persistent disk (PD_STANDARD). BOOT_DISK_TYPE must be one of: PD_STANDARD, PD_SSD, PD_BALANCED, PD_EXTREME.

Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the boot_disk. The 'Compute Engine Service Agent' service account must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. The arguments in this group can be used to specify the attributes of this resource.

--boot-disk-kms-key=BOOT_DISK_KMS_KEY

ID of the key or fully qualified identifier for the key.
To set the kms-key attribute:

provide the argument --boot-disk-kms-key on the command line.

This flag argument must be specified if any of the other arguments in this group are specified.

--boot-disk-encryption-key-keyring=BOOT_DISK_ENCRYPTION_KEY_KEYRING

The KMS keyring of the key.
To set the kms-keyring attribute:

provide the argument --boot-disk-kms-key on the command line with a fully specified name;

provide the argument --boot-disk-encryption-key-keyring on the command line.

--boot-disk-encryption-key-location=BOOT_DISK_ENCRYPTION_KEY_LOCATION

The Google Cloud location for the key.
To set the kms-location attribute:

provide the argument --boot-disk-kms-key on the command line with a fully specified name;

provide the argument --boot-disk-encryption-key-location on the command line.

--boot-disk-encryption-key-project=BOOT_DISK_ENCRYPTION_KEY_PROJECT

The Google Cloud project for the key.
To set the kms-project attribute:

provide the argument --boot-disk-kms-key on the command line with a fully specified name;

provide the argument --boot-disk-encryption-key-project on the command line;

set the property core/project.

At most one of these can be specified:

--container-repository=CONTAINER_REPOSITORY

The path to the container image repository. For example: gcr.io/{project_id}/{image_name}.
This flag argument must be specified if any of the other arguments in this group are specified.

--container-tag=CONTAINER_TAG

The tag of the container image. If not specified, this defaults to the latest tag.

--vm-image-project=VM_IMAGE_PROJECT; default="deeplearning-platform-release"

The ID of the Google Cloud project that this VM image belongs to. Format: projects/{project_id}.

Exactly one of these must be specified:

--vm-image-family=VM_IMAGE_FAMILY

Use this VM image family to find the image; the newest image in this family will be used.

--vm-image-name=VM_IMAGE_NAME

Use this VM image name to find the image.

GPU driver configurations.

--custom-gpu-driver-path=CUSTOM_GPU_DRIVER_PATH

Specify a custom Cloud Storage path where the GPU driver is stored. If not specified, we'll automatically choose from official GPU drivers.

--install-gpu-driver

Whether the end user authorizes Google Cloud to install a GPU driver on this instance. If this field is empty or set to false, the GPU driver won't be installed. Only applicable to instances with GPUs.

Data disk configurations.

--data-disk-encryption=DATA_DISK_ENCRYPTION

Disk encryption method used on the data disk, defaults to GMEK. DATA_DISK_ENCRYPTION must be one of: GMEK, CMEK.

--data-disk-size=DATA_DISK_SIZE

Size of data disk in GB attached to this instance, up to a maximum of 64000 GB (64 TB). The minimum recommended value is 100 GB. If not specified, this defaults to 100.

--data-disk-type=DATA_DISK_TYPE

Type of data disk attached to this instance, defaults to standard persistent disk (PD_STANDARD). DATA_DISK_TYPE must be one of: PD_STANDARD, PD_SSD, PD_BALANCED, PD_EXTREME.

Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the data_disk. The 'Compute Engine Service Agent' service account must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. The arguments in this group can be used to specify the attributes of this resource.

--data-disk-kms-key=DATA_DISK_KMS_KEY

ID of the key or fully qualified identifier for the key.
To set the kms-key attribute:

provide the argument --data-disk-kms-key on the command line.

This flag argument must be specified if any of the other arguments in this group are specified.

--data-disk-encryption-key-keyring=DATA_DISK_ENCRYPTION_KEY_KEYRING

The KMS keyring of the key.
To set the kms-keyring attribute:

provide the argument --data-disk-kms-key on the command line with a fully specified name;

provide the argument --data-disk-encryption-key-keyring on the command line.

--data-disk-encryption-key-location=DATA_DISK_ENCRYPTION_KEY_LOCATION

The Google Cloud location for the key.
To set the kms-location attribute:

provide the argument --data-disk-kms-key on the command line with a fully specified name;

provide the argument --data-disk-encryption-key-location on the command line.

--data-disk-encryption-key-project=DATA_DISK_ENCRYPTION_KEY_PROJECT

The Google Cloud project for the key.
To set the kms-project attribute:

provide the argument --data-disk-kms-key on the command line with a fully specified name;

provide the argument --data-disk-encryption-key-project on the command line;

set the property core/project.

Network configs.

Network resource - The name of the VPC that this instance is in. Format: projects/{project_id}/global/networks/{network_id}. This represents a Cloud resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.
To set the project attribute:

provide the argument --network on the command line with a fully specified name;

provide the argument --project on the command line;

set the property core/project.

--network=NETWORK

ID of the network or fully qualified identifier for the network.
To set the network attribute:

provide the argument --network on the command line.

--nic-type=NIC_TYPE

Type of the network interface card. NIC_TYPE must be one of: VIRTIGO_NET, GVNIC.

Subnetwork resource - The name of the subnet that this instance is in. Format: projects/{project_id}/regions/{region}/subnetworks/{subnetwork_id}. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.
To set the project attribute:

provide the argument --subnet on the command line with a fully specified name;

provide the argument --project on the command line;

set the property core/project.

--subnet=SUBNET

ID of the subnetwork or fully qualified identifier for the subnetwork.
To set the subnet attribute:

provide the argument --subnet on the command line.

This flag argument must be specified if any of the other arguments in this group are specified.

--subnet-region=SUBNET_REGION

Google Cloud region of this subnetwork https://cloud.google.com/compute/docs/regions-zones/#locations.
To set the subnet-region attribute:

provide the argument --subnet on the command line with a fully specified name;

provide the argument --subnet-region on the command line.

Shielded VM configurations.

--shielded-integrity-monitoring=SHIELDED_INTEGRITY_MONITORING

Boolean. Enable monitoring of the boot integrity of the instance. Supported values: true, false.

--shielded-secure-boot=SHIELDED_SECURE_BOOT

Boolean. Boot instance with secure boot enabled. Supported values: true, false.

--shielded-vtpm=SHIELDED_VTPM

Boolean. Boot instance with TPM (Trusted Platform Module) enabled. Supported values: true, false.
GCLOUD WIDE FLAGS: These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.