feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/container/aws/clusters/__init__.py

@@ -0,0 +1,32 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2021 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command group `gcloud container aws clusters`."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.projects import util
+from googlecloudsdk.core import log
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.GA)
+class Clusters(base.Group):
+  """Create and manage Anthos clusters on AWS."""
+
+  @staticmethod
+  def Args(parser):
+    pass

gcloud auth application-default login/google-cloud-sdk/lib/surface/container/aws/clusters/create.py

@@ -0,0 +1,132 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2021 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to create an Anthos cluster on AWS."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.container.gkemulticloud import aws as api_util
+from googlecloudsdk.calliope import arg_parsers
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.container.aws import flags as aws_flags
+from googlecloudsdk.command_lib.container.aws import resource_args
+from googlecloudsdk.command_lib.container.gkemulticloud import command_util
+from googlecloudsdk.command_lib.container.gkemulticloud import constants
+from googlecloudsdk.command_lib.container.gkemulticloud import endpoint_util
+from googlecloudsdk.command_lib.container.gkemulticloud import flags
+
+# Command needs to be in one line for the docgen tool to format properly.
+_EXAMPLES = """
+To create a cluster named ``my-cluster'' managed in location ``us-west1'',
+run:
+
+$ {command} my-cluster --location=us-west1 --aws-region=AWS_REGION --cluster-version=CLUSTER_VERSION --database-encryption-kms-key-arn=KMS_KEY_ARN --iam-instance-profile=IAM_INSTANCE_PROFILE --pod-address-cidr-blocks=POD_ADDRESS_CIDR_BLOCKS --role-arn=ROLE_ARN --service-address-cidr-blocks=SERVICE_ADDRESS_CIDR_BLOCKS --subnet-ids=SUBNET_ID --vpc-id=VPC_ID
+"""
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA)
+class Create(base.CreateCommand):
+  """Create an Anthos cluster on AWS."""
+
+  detailed_help = {'EXAMPLES': _EXAMPLES}
+
+  @staticmethod
+  def Args(parser):
+    """Registers flags for this command."""
+    resource_args.AddAwsClusterResourceArg(parser, 'to create')
+
+    parser.add_argument(
+        '--subnet-ids',
+        required=True,
+        type=arg_parsers.ArgList(),
+        metavar='SUBNET_ID',
+        help=(
+            'Subnet ID of an existing VNET to use for the cluster control'
+            ' plane.'
+        ),
+    )
+
+    flags.AddPodAddressCidrBlocks(parser)
+    flags.AddServiceAddressCidrBlocks(parser)
+    flags.AddClusterVersion(parser)
+    flags.AddRootVolumeSize(parser)
+    flags.AddMainVolumeSize(parser)
+    flags.AddValidateOnly(parser, 'cluster to create')
+    flags.AddFleetProject(parser)
+    flags.AddTags(parser, 'cluster')
+    flags.AddAdminUsers(parser)
+    flags.AddAdminGroups(parser)
+    flags.AddDescription(parser)
+    flags.AddAnnotations(parser)
+    flags.AddLogging(parser)
+    flags.AddMonitoringConfig(parser, True)
+    flags.AddBinauthzEvaluationMode(parser)
+
+    aws_flags.AddAwsRegion(parser)
+    aws_flags.AddIamInstanceProfile(parser)
+    aws_flags.AddInstanceType(parser)
+    aws_flags.AddSshEC2KeyPair(parser)
+    aws_flags.AddConfigEncryptionKmsKeyArn(parser)
+    aws_flags.AddDatabaseEncryptionKmsKeyArn(parser)
+    aws_flags.AddRoleArn(parser)
+    aws_flags.AddRoleSessionName(parser)
+    aws_flags.AddVpcId(parser)
+    aws_flags.AddSecurityGroupIds(parser, kind='control plane')
+    aws_flags.AddPerNodePoolSGRules(parser)
+    aws_flags.AddRootVolumeType(parser)
+    aws_flags.AddRootVolumeIops(parser)
+    aws_flags.AddRootVolumeThroughput(parser)
+    aws_flags.AddRootVolumeKmsKeyArn(parser)
+    aws_flags.AddMainVolumeType(parser)
+    aws_flags.AddMainVolumeIops(parser)
+    aws_flags.AddMainVolumeThroughput(parser)
+    aws_flags.AddMainVolumeKmsKeyArn(parser)
+    aws_flags.AddProxyConfig(parser)
+
+    base.ASYNC_FLAG.AddToParser(parser)
+
+    parser.display_info.AddFormat(constants.AWS_CLUSTERS_FORMAT)
+
+  def Run(self, args):
+    """Runs the create command."""
+    location = resource_args.ParseAwsClusterResourceArg(args).locationsId
+    with endpoint_util.GkemulticloudEndpointOverride(location):
+      cluster_ref = resource_args.ParseAwsClusterResourceArg(args)
+      cluster_client = api_util.ClustersClient()
+      message = command_util.ClusterMessage(
+          cluster_ref.awsClustersId,
+          action='Creating',
+          kind=constants.AWS,
+          region=args.aws_region,
+      )
+      return command_util.Create(
+          resource_ref=cluster_ref,
+          resource_client=cluster_client,
+          args=args,
+          message=message,
+          kind=constants.AWS_CLUSTER_KIND,
+      )
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
+class CreateAlpha(Create):
+  """Create an Anthos cluster on AWS."""
+
+  @staticmethod
+  def Args(parser, track=base.ReleaseTrack.ALPHA):
+    """Registers alpha track flags for this command."""
+    Create.Args(parser)
+    aws_flags.AddInstancePlacement(parser)

gcloud auth application-default login/google-cloud-sdk/lib/surface/container/aws/clusters/delete.py

@@ -0,0 +1,72 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2021 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to delete an Anthos cluster on AWS."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.container.gkemulticloud import aws as api_util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.container.aws import resource_args
+from googlecloudsdk.command_lib.container.gkemulticloud import command_util
+from googlecloudsdk.command_lib.container.gkemulticloud import constants
+from googlecloudsdk.command_lib.container.gkemulticloud import endpoint_util
+from googlecloudsdk.command_lib.container.gkemulticloud import flags
+
+_EXAMPLES = """
+To delete a cluster named ``my-cluster'' managed in location ``us-west1'',
+run:
+
+$ {command} my-cluster --location=us-west1
+"""
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.GA)
+class Delete(base.DeleteCommand):
+  """Delete an Anthos cluster on AWS."""
+
+  detailed_help = {'EXAMPLES': _EXAMPLES}
+
+  @staticmethod
+  def Args(parser):
+    """Register flags for this command."""
+    resource_args.AddAwsClusterResourceArg(parser, 'to delete')
+
+    flags.AddValidateOnly(parser, 'cluster to delete')
+    flags.AddAllowMissing(parser, 'cluster')
+    flags.AddIgnoreErrors(parser, constants.AWS, 'cluster')
+
+    base.ASYNC_FLAG.AddToParser(parser)
+
+  def Run(self, args):
+    """Runs the delete command."""
+    location = resource_args.ParseAwsClusterResourceArg(args).locationsId
+    with endpoint_util.GkemulticloudEndpointOverride(location):
+      cluster_ref = resource_args.ParseAwsClusterResourceArg(args)
+      cluster_client = api_util.ClustersClient()
+      cluster = cluster_client.Get(cluster_ref)
+      message = command_util.ClusterMessage(
+          cluster_ref.awsClustersId,
+          kind=constants.AWS,
+          region=cluster.awsRegion,
+      )
+      command_util.DeleteWithIgnoreErrors(
+          args,
+          cluster_client,
+          cluster_ref,
+          message,
+          constants.AWS_CLUSTER_KIND,
+      )

gcloud auth application-default login/google-cloud-sdk/lib/surface/container/aws/clusters/describe.py

@@ -0,0 +1,63 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2021 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to describe an Anthos cluster on AWS."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.container.gkemulticloud import aws as api_util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.container.aws import resource_args
+from googlecloudsdk.command_lib.container.gkemulticloud import constants
+from googlecloudsdk.command_lib.container.gkemulticloud import endpoint_util
+from googlecloudsdk.command_lib.container.gkemulticloud import versions
+from googlecloudsdk.core import log
+
+
+_EXAMPLES = """
+To describe a cluster named ``my-cluster'' managed in location ``us-west1'',
+run:
+
+$ {command} my-cluster --location=us-west1
+"""
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.GA)
+class Describe(base.DescribeCommand):
+  """Describe an Anthos cluster on AWS."""
+
+  detailed_help = {'EXAMPLES': _EXAMPLES}
+
+  @staticmethod
+  def Args(parser):
+    """Registers flags for this command."""
+    resource_args.AddAwsClusterResourceArg(parser, 'to describe')
+
+  def Run(self, args):
+    """Runs the describe command."""
+    self._upgrade_hint = None
+    cluster_ref = resource_args.ParseAwsClusterResourceArg(args)
+    with endpoint_util.GkemulticloudEndpointOverride(cluster_ref.locationsId):
+      cluster_client = api_util.ClustersClient()
+      cluster_info = cluster_client.Get(cluster_ref)
+      self._upgrade_hint = versions.upgrade_hint_cluster(
+          cluster_ref, cluster_info, constants.AWS
+      )
+      return cluster_info
+
+  def Epilog(self, results_were_displayed):
+    if self._upgrade_hint:
+      log.status.Print(self._upgrade_hint)

gcloud auth application-default login/google-cloud-sdk/lib/surface/container/aws/clusters/get_credentials.py

@@ -0,0 +1,95 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2021 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to get credentials of an Anthos cluster on AWS."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.container.gkemulticloud import aws as api_util
+from googlecloudsdk.api_lib.container.gkemulticloud import util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.container.aws import resource_args
+from googlecloudsdk.command_lib.container.gkemulticloud import endpoint_util
+from googlecloudsdk.command_lib.container.gkemulticloud import flags
+from googlecloudsdk.command_lib.container.gkemulticloud import kubeconfig
+from googlecloudsdk.core import log
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.GA)
+class GetCredentials(base.Command):
+  """Get credentials of an Anthos cluster on AWS."""
+
+  detailed_help = {
+      'EXAMPLES': kubeconfig.COMMAND_EXAMPLE,
+      'DESCRIPTION': kubeconfig.COMMAND_DESCRIPTION.format(
+          cluster_type='Anthos cluster on AWS'
+      ),
+  }
+
+  @staticmethod
+  def Args(parser):
+    resource_args.AddAwsClusterResourceArg(parser, 'to get credentials')
+    flags.AddAuthProviderCmdPath(parser)
+    flags.AddPrivateEndpoint(parser)
+
+  def Run(self, args):
+    """Runs the get-credentials command."""
+    with endpoint_util.GkemulticloudEndpointOverride(
+        resource_args.ParseAwsClusterResourceArg(args).locationsId,
+        self.ReleaseTrack(),
+    ):
+      cluster_ref = resource_args.ParseAwsClusterResourceArg(args)
+      cluster_client = api_util.ClustersClient()
+
+      log.status.Print('Fetching cluster endpoint and auth data.')
+      resp = cluster_client.Get(cluster_ref)
+
+      if (
+          resp.state
+          != util.GetMessagesModule().GoogleCloudGkemulticloudV1AwsCluster.StateValueValuesEnum.RUNNING
+      ):
+        log.warning(
+            kubeconfig.NOT_RUNNING_MSG.format(cluster_ref.awsClustersId)
+        )
+
+      if not args.private_endpoint and kubeconfig.ConnectGatewayInNodePools(
+          resp, cluster_ref.awsClustersId
+      ):
+        kubeconfig.CheckClusterHasNodePools(
+            api_util.NodePoolsClient(), cluster_ref
+        )
+
+      kubeconfig.ValidateClusterVersion(resp, cluster_ref.awsClustersId)
+      context = kubeconfig.GenerateContext(
+          'aws',
+          cluster_ref.projectsId,
+          cluster_ref.locationsId,
+          cluster_ref.awsClustersId,
+      )
+      cmd_args = kubeconfig.GenerateAuthProviderCmdArgs(
+          'aws',
+          cluster_ref.awsClustersId,
+          cluster_ref.locationsId,
+          cluster_ref.projectsId,
+      )
+      kubeconfig.GenerateKubeconfig(
+          resp,
+          cluster_ref.awsClustersId,
+          context,
+          args.auth_provider_cmd_path,
+          cmd_args,
+          args.private_endpoint,
+      )

gcloud auth application-default login/google-cloud-sdk/lib/surface/container/aws/clusters/list.py

@@ -0,0 +1,74 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2021 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to list Anthos clusters on AWS."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.container.gkemulticloud import aws as api_util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.container.aws import resource_args
+from googlecloudsdk.command_lib.container.gkemulticloud import constants
+from googlecloudsdk.command_lib.container.gkemulticloud import endpoint_util
+from googlecloudsdk.command_lib.container.gkemulticloud import versions
+from googlecloudsdk.core import log
+
+
+_EXAMPLES = """
+To lists all clusters managed in location ``us-west1'', run:
+
+$ {command} --location=us-west1
+"""
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.GA)
+class List(base.ListCommand):
+  """List Anthos clusters on AWS."""
+
+  detailed_help = {'EXAMPLES': _EXAMPLES}
+
+  @staticmethod
+  def Args(parser):
+    resource_args.AddLocationResourceArg(parser, 'to list')
+    parser.display_info.AddFormat(constants.AWS_CLUSTERS_FORMAT)
+
+  def Run(self, args):
+    """Runs the list command."""
+    self._upgrade_hint = None
+    location_ref = args.CONCEPTS.location.Parse()
+    with endpoint_util.GkemulticloudEndpointOverride(location_ref.locationsId):
+      cluster_client = api_util.ClustersClient()
+      items, is_empty = cluster_client.List(
+          location_ref, args.page_size, args.limit
+      )
+      if is_empty:
+        return items
+      platform = constants.AWS
+      cluster_info_table, end_of_life_flag = (
+          versions.generate_cluster_versions_table(
+              location_ref,
+              platform,
+              items,
+          )
+      )
+      if end_of_life_flag:
+        self._upgrade_hint = versions.upgrade_hint_cluster_list(platform)
+      return cluster_info_table
+
+  def Epilog(self, results_were_displayed):
+    super(List, self).Epilog(results_were_displayed)
+    if self._upgrade_hint:
+      log.status.Print(self._upgrade_hint)

gcloud auth application-default login/google-cloud-sdk/lib/surface/container/aws/clusters/print_access_token.py

@@ -0,0 +1,51 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2021 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to print access tokens for an Anthos cluster on AWS."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.container.gkemulticloud import aws as api_util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.container.aws import resource_args
+from googlecloudsdk.command_lib.container.gkemulticloud import endpoint_util
+from googlecloudsdk.command_lib.container.gkemulticloud import flags
+from googlecloudsdk.command_lib.container.gkemulticloud import kubeconfig
+
+
+@base.Hidden
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA, base.ReleaseTrack.GA)
+class PrintAccessToken(base.Command):
+  """Generate an access token for an Anthos cluster on AWS."""
+
+  @staticmethod
+  def Args(parser):
+    """Register flags for this command."""
+    resource_args.AddAwsClusterResourceArg(parser, 'to access')
+    flags.AddExecCredential(parser)
+
+  def Run(self, args):
+    """Runs the command."""
+    cluster_ref = args.CONCEPTS.cluster.Parse()
+    with endpoint_util.GkemulticloudEndpointOverride(cluster_ref.locationsId):
+      cluster_client = api_util.ClustersClient()
+      response = cluster_client.GenerateAccessToken(cluster_ref)
+      if args.exec_credential:
+        return kubeconfig.ExecCredential(
+            expiration_timestamp=response.expirationTime,
+            access_token=response.accessToken,
+        )
+      return response

gcloud auth application-default login/google-cloud-sdk/lib/surface/container/aws/clusters/update.py

@@ -0,0 +1,100 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2021 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to update an Anthos cluster on AWS."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.container.gkemulticloud import aws as api_util
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.container.aws import flags as aws_flags
+from googlecloudsdk.command_lib.container.aws import resource_args
+from googlecloudsdk.command_lib.container.gkemulticloud import command_util
+from googlecloudsdk.command_lib.container.gkemulticloud import constants
+from googlecloudsdk.command_lib.container.gkemulticloud import endpoint_util
+from googlecloudsdk.command_lib.container.gkemulticloud import flags
+
+# Command needs to be in one line for the docgen tool to format properly.
+_EXAMPLES = """
+To update a cluster named ``my-cluster'' managed in location ``us-west1'', run:
+
+$ {command} my-cluster --location=us-west1 --cluster-version=CLUSTER_VERSION
+"""
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA)
+class Update(base.UpdateCommand):
+  """Update an Anthos cluster on AWS."""
+
+  detailed_help = {'EXAMPLES': _EXAMPLES}
+
+  @staticmethod
+  def Args(parser):
+    resource_args.AddAwsClusterResourceArg(parser, 'to update')
+    flags.AddClusterVersion(parser, required=False)
+    flags.AddValidateOnly(parser, 'update of the cluster')
+    flags.AddAdminUsers(parser, create=False)
+    flags.AddAdminGroups(parser)
+    flags.AddRootVolumeSize(parser)
+    flags.AddDescriptionForUpdate(parser)
+    flags.AddAnnotationsForUpdate(parser, 'cluster')
+    flags.AddTagsForUpdate(parser, 'control plane')
+    flags.AddLogging(parser)
+    flags.AddMonitoringConfig(parser)
+    flags.AddBinauthzEvaluationMode(parser)
+    aws_flags.AddInstanceType(parser)
+    aws_flags.AddRoleArn(parser, required=False)
+    aws_flags.AddRoleSessionName(parser)
+    aws_flags.AddConfigEncryptionKmsKeyArn(parser, required=False)
+    aws_flags.AddSecurityGroupFlagsForUpdate(parser, 'control plane')
+    aws_flags.AddPerNodePoolSGRulesForUpdate(parser)
+    aws_flags.AddProxyConfigForUpdate(parser, 'control plane')
+    aws_flags.AddRootVolumeKmsKeyArn(parser)
+    aws_flags.AddRootVolumeType(parser)
+    aws_flags.AddRootVolumeIops(parser)
+    aws_flags.AddRootVolumeThroughput(parser)
+    aws_flags.AddSshEC2KeyPairForUpdate(parser)
+    aws_flags.AddIamInstanceProfile(parser, required=False)
+
+    base.ASYNC_FLAG.AddToParser(parser)
+    parser.display_info.AddFormat(constants.AWS_CLUSTERS_FORMAT)
+
+  def Run(self, args):
+    """Runs the update command."""
+    location = resource_args.ParseAwsClusterResourceArg(args).locationsId
+    with endpoint_util.GkemulticloudEndpointOverride(location):
+      cluster_ref = resource_args.ParseAwsClusterResourceArg(args)
+      cluster_client = api_util.ClustersClient()
+      message = command_util.ClusterMessage(
+          cluster_ref.awsClustersId, action='Updating'
+      )
+      return command_util.Update(
+          resource_ref=cluster_ref,
+          resource_client=cluster_client,
+          args=args,
+          message=message,
+          kind=constants.AWS_CLUSTER_KIND,
+      )
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
+class UpdateAlpha(Update):
+  """Update an Anthos cluster on AWS."""
+
+  @staticmethod
+  def Args(parser, track=base.ReleaseTrack.ALPHA):
+    """Registers alpha track flags for this command."""
+    Update.Args(parser)